./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product58.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aef121e0 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product58.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash db9cad3d4bb6f197e1ca94da7e6c4fb3038f74aed96fd168a277cfa6f57caad2 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-aef121e [2021-11-23 03:32:26,980 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-23 03:32:26,983 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-23 03:32:27,043 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-23 03:32:27,044 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-23 03:32:27,050 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-23 03:32:27,052 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-23 03:32:27,057 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-23 03:32:27,060 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-23 03:32:27,068 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-23 03:32:27,070 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-23 03:32:27,072 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-23 03:32:27,072 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-23 03:32:27,075 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-23 03:32:27,077 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-23 03:32:27,083 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-23 03:32:27,085 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-23 03:32:27,086 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-23 03:32:27,088 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-23 03:32:27,099 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-23 03:32:27,101 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-23 03:32:27,103 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-23 03:32:27,106 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-23 03:32:27,108 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-23 03:32:27,112 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-23 03:32:27,112 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-23 03:32:27,113 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-23 03:32:27,115 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-23 03:32:27,116 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-23 03:32:27,117 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-23 03:32:27,118 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-23 03:32:27,119 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-23 03:32:27,121 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-23 03:32:27,122 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-23 03:32:27,124 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-23 03:32:27,125 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-23 03:32:27,125 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-23 03:32:27,126 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-23 03:32:27,126 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-23 03:32:27,127 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-23 03:32:27,128 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-23 03:32:27,129 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-32bit-Taipan_Default.epf [2021-11-23 03:32:27,174 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-23 03:32:27,175 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-23 03:32:27,175 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-23 03:32:27,176 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-23 03:32:27,177 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-23 03:32:27,181 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-23 03:32:27,181 INFO L138 SettingsManager]: * User list type=DISABLED [2021-11-23 03:32:27,182 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2021-11-23 03:32:27,182 INFO L138 SettingsManager]: * Explicit value domain=true [2021-11-23 03:32:27,182 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2021-11-23 03:32:27,182 INFO L138 SettingsManager]: * Octagon Domain=false [2021-11-23 03:32:27,182 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2021-11-23 03:32:27,183 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2021-11-23 03:32:27,183 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2021-11-23 03:32:27,183 INFO L138 SettingsManager]: * Interval Domain=false [2021-11-23 03:32:27,186 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2021-11-23 03:32:27,186 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2021-11-23 03:32:27,186 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2021-11-23 03:32:27,187 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-23 03:32:27,187 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-23 03:32:27,187 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-23 03:32:27,188 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-23 03:32:27,188 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-23 03:32:27,188 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-23 03:32:27,188 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-23 03:32:27,189 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-23 03:32:27,191 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-23 03:32:27,191 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-23 03:32:27,191 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-23 03:32:27,191 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-23 03:32:27,192 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-23 03:32:27,192 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-23 03:32:27,192 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 03:32:27,192 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-23 03:32:27,192 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-23 03:32:27,193 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-23 03:32:27,193 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2021-11-23 03:32:27,193 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-23 03:32:27,193 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-23 03:32:27,193 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-23 03:32:27,194 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-23 03:32:27,194 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> db9cad3d4bb6f197e1ca94da7e6c4fb3038f74aed96fd168a277cfa6f57caad2 [2021-11-23 03:32:27,482 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-23 03:32:27,514 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-23 03:32:27,517 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-23 03:32:27,519 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-23 03:32:27,520 INFO L275 PluginConnector]: CDTParser initialized [2021-11-23 03:32:27,521 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/../../sv-benchmarks/c/product-lines/minepump_spec5_product58.cil.c [2021-11-23 03:32:27,622 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/data/6d3cce0d1/a50f557e7ddb40a7872070920e934d1c/FLAGe8bf8efd1 [2021-11-23 03:32:28,202 INFO L306 CDTParser]: Found 1 translation units. [2021-11-23 03:32:28,203 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/sv-benchmarks/c/product-lines/minepump_spec5_product58.cil.c [2021-11-23 03:32:28,223 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/data/6d3cce0d1/a50f557e7ddb40a7872070920e934d1c/FLAGe8bf8efd1 [2021-11-23 03:32:28,475 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/data/6d3cce0d1/a50f557e7ddb40a7872070920e934d1c [2021-11-23 03:32:28,477 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-23 03:32:28,479 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-23 03:32:28,481 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-23 03:32:28,481 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-23 03:32:28,485 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-23 03:32:28,486 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:32:28" (1/1) ... [2021-11-23 03:32:28,488 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@77977d2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:32:28, skipping insertion in model container [2021-11-23 03:32:28,488 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:32:28" (1/1) ... [2021-11-23 03:32:28,495 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-23 03:32:28,543 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-23 03:32:28,849 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/sv-benchmarks/c/product-lines/minepump_spec5_product58.cil.c[14935,14948] [2021-11-23 03:32:28,892 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 03:32:28,922 INFO L203 MainTranslator]: Completed pre-run [2021-11-23 03:32:29,039 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/sv-benchmarks/c/product-lines/minepump_spec5_product58.cil.c[14935,14948] [2021-11-23 03:32:29,070 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 03:32:29,094 INFO L208 MainTranslator]: Completed translation [2021-11-23 03:32:29,094 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:32:29 WrapperNode [2021-11-23 03:32:29,095 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-23 03:32:29,096 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-23 03:32:29,096 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-23 03:32:29,097 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-23 03:32:29,110 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:32:29" (1/1) ... [2021-11-23 03:32:29,129 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:32:29" (1/1) ... [2021-11-23 03:32:29,195 INFO L137 Inliner]: procedures = 59, calls = 160, calls flagged for inlining = 28, calls inlined = 25, statements flattened = 288 [2021-11-23 03:32:29,195 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-23 03:32:29,196 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-23 03:32:29,196 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-23 03:32:29,197 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-23 03:32:29,206 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:32:29" (1/1) ... [2021-11-23 03:32:29,206 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:32:29" (1/1) ... [2021-11-23 03:32:29,210 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:32:29" (1/1) ... [2021-11-23 03:32:29,211 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:32:29" (1/1) ... [2021-11-23 03:32:29,218 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:32:29" (1/1) ... [2021-11-23 03:32:29,226 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:32:29" (1/1) ... [2021-11-23 03:32:29,228 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:32:29" (1/1) ... [2021-11-23 03:32:29,232 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-23 03:32:29,233 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-23 03:32:29,249 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-23 03:32:29,249 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-23 03:32:29,251 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:32:29" (1/1) ... [2021-11-23 03:32:29,259 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 03:32:29,276 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:32:29,299 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-23 03:32:29,333 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-23 03:32:29,358 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-23 03:32:29,359 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-23 03:32:29,359 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-23 03:32:29,360 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-23 03:32:29,360 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-23 03:32:29,361 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-23 03:32:29,361 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-23 03:32:29,361 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 03:32:29,361 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 03:32:29,362 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-23 03:32:29,362 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-23 03:32:29,362 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-11-23 03:32:29,362 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-11-23 03:32:29,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-23 03:32:29,363 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-23 03:32:29,363 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-23 03:32:29,363 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-23 03:32:29,363 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-23 03:32:29,516 INFO L236 CfgBuilder]: Building ICFG [2021-11-23 03:32:29,531 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-23 03:32:29,971 INFO L277 CfgBuilder]: Performing block encoding [2021-11-23 03:32:30,076 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-23 03:32:30,081 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-23 03:32:30,084 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:32:30 BoogieIcfgContainer [2021-11-23 03:32:30,084 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-23 03:32:30,086 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-23 03:32:30,086 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-23 03:32:30,090 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-23 03:32:30,090 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 03:32:28" (1/3) ... [2021-11-23 03:32:30,091 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2c48e19b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:32:30, skipping insertion in model container [2021-11-23 03:32:30,092 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:32:29" (2/3) ... [2021-11-23 03:32:30,092 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2c48e19b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:32:30, skipping insertion in model container [2021-11-23 03:32:30,092 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:32:30" (3/3) ... [2021-11-23 03:32:30,094 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product58.cil.c [2021-11-23 03:32:30,105 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-23 03:32:30,105 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-23 03:32:30,158 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-23 03:32:30,166 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-23 03:32:30,166 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-23 03:32:30,185 INFO L276 IsEmpty]: Start isEmpty. Operand has 58 states, 37 states have (on average 1.4324324324324325) internal successors, (53), 45 states have internal predecessors, (53), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2021-11-23 03:32:30,192 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2021-11-23 03:32:30,193 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:32:30,193 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:32:30,194 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:32:30,200 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:32:30,201 INFO L85 PathProgramCache]: Analyzing trace with hash 51422514, now seen corresponding path program 1 times [2021-11-23 03:32:30,211 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:32:30,212 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [29845916] [2021-11-23 03:32:30,212 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:32:30,213 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:32:30,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:32:30,462 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 03:32:30,463 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:32:30,463 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [29845916] [2021-11-23 03:32:30,464 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [29845916] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:32:30,464 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:32:30,464 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-23 03:32:30,466 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1167675287] [2021-11-23 03:32:30,467 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:32:30,472 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-23 03:32:30,473 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:32:30,504 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-23 03:32:30,505 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-23 03:32:30,508 INFO L87 Difference]: Start difference. First operand has 58 states, 37 states have (on average 1.4324324324324325) internal successors, (53), 45 states have internal predecessors, (53), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 03:32:30,594 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:32:30,595 INFO L93 Difference]: Finished difference Result 114 states and 155 transitions. [2021-11-23 03:32:30,596 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-23 03:32:30,598 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 21 [2021-11-23 03:32:30,598 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:32:30,611 INFO L225 Difference]: With dead ends: 114 [2021-11-23 03:32:30,612 INFO L226 Difference]: Without dead ends: 53 [2021-11-23 03:32:30,616 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-23 03:32:30,639 INFO L933 BasicCegarLoop]: 57 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 57 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-23 03:32:30,640 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 57 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-23 03:32:30,661 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2021-11-23 03:32:30,685 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2021-11-23 03:32:30,687 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 41 states have internal predecessors, (45), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-11-23 03:32:30,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 68 transitions. [2021-11-23 03:32:30,694 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 68 transitions. Word has length 21 [2021-11-23 03:32:30,695 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:32:30,695 INFO L470 AbstractCegarLoop]: Abstraction has 53 states and 68 transitions. [2021-11-23 03:32:30,696 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 03:32:30,696 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 68 transitions. [2021-11-23 03:32:30,699 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2021-11-23 03:32:30,702 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:32:30,702 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:32:30,704 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-23 03:32:30,705 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:32:30,707 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:32:30,711 INFO L85 PathProgramCache]: Analyzing trace with hash 829025429, now seen corresponding path program 1 times [2021-11-23 03:32:30,711 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:32:30,712 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [797707814] [2021-11-23 03:32:30,712 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:32:30,712 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:32:30,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:32:30,813 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 03:32:30,814 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:32:30,814 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [797707814] [2021-11-23 03:32:30,814 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [797707814] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:32:30,815 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:32:30,815 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 03:32:30,815 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2070192764] [2021-11-23 03:32:30,815 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:32:30,817 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 03:32:30,817 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:32:30,818 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 03:32:30,818 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:32:30,818 INFO L87 Difference]: Start difference. First operand 53 states and 68 transitions. Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 03:32:30,892 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:32:30,893 INFO L93 Difference]: Finished difference Result 83 states and 107 transitions. [2021-11-23 03:32:30,895 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 03:32:30,896 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 22 [2021-11-23 03:32:30,896 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:32:30,897 INFO L225 Difference]: With dead ends: 83 [2021-11-23 03:32:30,898 INFO L226 Difference]: Without dead ends: 45 [2021-11-23 03:32:30,899 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:32:30,900 INFO L933 BasicCegarLoop]: 43 mSDtfsCounter, 7 mSDsluCounter, 45 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 77 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:32:30,901 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [10 Valid, 77 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 03:32:30,902 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2021-11-23 03:32:30,912 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2021-11-23 03:32:30,913 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 29 states have (on average 1.3448275862068966) internal successors, (39), 36 states have internal predecessors, (39), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-11-23 03:32:30,924 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 57 transitions. [2021-11-23 03:32:30,925 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 57 transitions. Word has length 22 [2021-11-23 03:32:30,925 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:32:30,926 INFO L470 AbstractCegarLoop]: Abstraction has 45 states and 57 transitions. [2021-11-23 03:32:30,926 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 03:32:30,926 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 57 transitions. [2021-11-23 03:32:30,927 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-11-23 03:32:30,927 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:32:30,928 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:32:30,928 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-23 03:32:30,928 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:32:30,929 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:32:30,929 INFO L85 PathProgramCache]: Analyzing trace with hash 1503144156, now seen corresponding path program 1 times [2021-11-23 03:32:30,929 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:32:30,930 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [851377519] [2021-11-23 03:32:30,930 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:32:30,930 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:32:30,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:32:31,076 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-11-23 03:32:31,076 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:32:31,076 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [851377519] [2021-11-23 03:32:31,077 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [851377519] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:32:31,077 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:32:31,077 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-23 03:32:31,077 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1290432539] [2021-11-23 03:32:31,078 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:32:31,078 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-23 03:32:31,078 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:32:31,079 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-23 03:32:31,079 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-23 03:32:31,079 INFO L87 Difference]: Start difference. First operand 45 states and 57 transitions. Second operand has 6 states, 5 states have (on average 3.8) internal successors, (19), 5 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 03:32:31,308 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:32:31,309 INFO L93 Difference]: Finished difference Result 126 states and 165 transitions. [2021-11-23 03:32:31,309 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-23 03:32:31,309 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 3.8) internal successors, (19), 5 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 24 [2021-11-23 03:32:31,310 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:32:31,318 INFO L225 Difference]: With dead ends: 126 [2021-11-23 03:32:31,318 INFO L226 Difference]: Without dead ends: 83 [2021-11-23 03:32:31,322 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-11-23 03:32:31,329 INFO L933 BasicCegarLoop]: 56 mSDtfsCounter, 30 mSDsluCounter, 215 mSDsCounter, 0 mSdLazyCounter, 110 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 31 SdHoareTripleChecker+Valid, 235 SdHoareTripleChecker+Invalid, 117 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 110 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-23 03:32:31,330 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [31 Valid, 235 Invalid, 117 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 110 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-23 03:32:31,331 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2021-11-23 03:32:31,360 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 79. [2021-11-23 03:32:31,360 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 79 states, 52 states have (on average 1.2692307692307692) internal successors, (66), 59 states have internal predecessors, (66), 14 states have call successors, (14), 12 states have call predecessors, (14), 12 states have return successors, (18), 14 states have call predecessors, (18), 14 states have call successors, (18) [2021-11-23 03:32:31,362 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 98 transitions. [2021-11-23 03:32:31,362 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 98 transitions. Word has length 24 [2021-11-23 03:32:31,362 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:32:31,363 INFO L470 AbstractCegarLoop]: Abstraction has 79 states and 98 transitions. [2021-11-23 03:32:31,363 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 3.8) internal successors, (19), 5 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 03:32:31,363 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 98 transitions. [2021-11-23 03:32:31,364 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-11-23 03:32:31,365 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:32:31,373 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:32:31,373 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-23 03:32:31,374 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:32:31,374 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:32:31,375 INFO L85 PathProgramCache]: Analyzing trace with hash 148799262, now seen corresponding path program 1 times [2021-11-23 03:32:31,375 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:32:31,376 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [587414888] [2021-11-23 03:32:31,376 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:32:31,376 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:32:31,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:32:31,668 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-11-23 03:32:31,669 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:32:31,669 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [587414888] [2021-11-23 03:32:31,669 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [587414888] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:32:31,669 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:32:31,669 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2021-11-23 03:32:31,670 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1838572380] [2021-11-23 03:32:31,670 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:32:31,671 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2021-11-23 03:32:31,671 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:32:31,672 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2021-11-23 03:32:31,673 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=84, Unknown=0, NotChecked=0, Total=110 [2021-11-23 03:32:31,673 INFO L87 Difference]: Start difference. First operand 79 states and 98 transitions. Second operand has 11 states, 10 states have (on average 2.5) internal successors, (25), 10 states have internal predecessors, (25), 3 states have call successors, (4), 3 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2021-11-23 03:32:32,439 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:32:32,439 INFO L93 Difference]: Finished difference Result 233 states and 298 transitions. [2021-11-23 03:32:32,439 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2021-11-23 03:32:32,441 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 10 states have (on average 2.5) internal successors, (25), 10 states have internal predecessors, (25), 3 states have call successors, (4), 3 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Word has length 32 [2021-11-23 03:32:32,441 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:32:32,449 INFO L225 Difference]: With dead ends: 233 [2021-11-23 03:32:32,449 INFO L226 Difference]: Without dead ends: 156 [2021-11-23 03:32:32,453 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 124 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=153, Invalid=549, Unknown=0, NotChecked=0, Total=702 [2021-11-23 03:32:32,463 INFO L933 BasicCegarLoop]: 47 mSDtfsCounter, 227 mSDsluCounter, 287 mSDsCounter, 0 mSdLazyCounter, 451 mSolverCounterSat, 138 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 236 SdHoareTripleChecker+Valid, 282 SdHoareTripleChecker+Invalid, 589 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 138 IncrementalHoareTripleChecker+Valid, 451 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-11-23 03:32:32,464 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [236 Valid, 282 Invalid, 589 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [138 Valid, 451 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-11-23 03:32:32,465 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156 states. [2021-11-23 03:32:32,518 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 156 to 132. [2021-11-23 03:32:32,519 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 132 states, 89 states have (on average 1.247191011235955) internal successors, (111), 97 states have internal predecessors, (111), 22 states have call successors, (22), 17 states have call predecessors, (22), 20 states have return successors, (29), 23 states have call predecessors, (29), 22 states have call successors, (29) [2021-11-23 03:32:32,521 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 132 states to 132 states and 162 transitions. [2021-11-23 03:32:32,521 INFO L78 Accepts]: Start accepts. Automaton has 132 states and 162 transitions. Word has length 32 [2021-11-23 03:32:32,522 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:32:32,522 INFO L470 AbstractCegarLoop]: Abstraction has 132 states and 162 transitions. [2021-11-23 03:32:32,522 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 10 states have (on average 2.5) internal successors, (25), 10 states have internal predecessors, (25), 3 states have call successors, (4), 3 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2021-11-23 03:32:32,522 INFO L276 IsEmpty]: Start isEmpty. Operand 132 states and 162 transitions. [2021-11-23 03:32:32,524 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2021-11-23 03:32:32,525 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:32:32,525 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:32:32,525 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-23 03:32:32,525 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:32:32,526 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:32:32,526 INFO L85 PathProgramCache]: Analyzing trace with hash 2014061962, now seen corresponding path program 1 times [2021-11-23 03:32:32,527 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:32:32,527 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1402886609] [2021-11-23 03:32:32,527 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:32:32,527 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:32:32,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:32:32,717 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 03:32:32,718 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:32:32,718 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1402886609] [2021-11-23 03:32:32,719 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1402886609] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:32:32,719 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:32:32,721 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-23 03:32:32,721 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1519013828] [2021-11-23 03:32:32,721 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:32:32,723 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-23 03:32:32,724 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:32:32,729 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-23 03:32:32,729 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2021-11-23 03:32:32,730 INFO L87 Difference]: Start difference. First operand 132 states and 162 transitions. Second operand has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2021-11-23 03:32:33,243 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:32:33,244 INFO L93 Difference]: Finished difference Result 349 states and 435 transitions. [2021-11-23 03:32:33,246 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-11-23 03:32:33,246 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 35 [2021-11-23 03:32:33,247 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:32:33,254 INFO L225 Difference]: With dead ends: 349 [2021-11-23 03:32:33,260 INFO L226 Difference]: Without dead ends: 253 [2021-11-23 03:32:33,261 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 30 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2021-11-23 03:32:33,264 INFO L933 BasicCegarLoop]: 71 mSDtfsCounter, 183 mSDsluCounter, 219 mSDsCounter, 0 mSdLazyCounter, 310 mSolverCounterSat, 78 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 188 SdHoareTripleChecker+Valid, 255 SdHoareTripleChecker+Invalid, 388 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 78 IncrementalHoareTripleChecker+Valid, 310 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-23 03:32:33,264 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [188 Valid, 255 Invalid, 388 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [78 Valid, 310 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-23 03:32:33,267 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 253 states. [2021-11-23 03:32:33,314 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 253 to 213. [2021-11-23 03:32:33,315 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 213 states, 143 states have (on average 1.2447552447552448) internal successors, (178), 158 states have internal predecessors, (178), 36 states have call successors, (36), 27 states have call predecessors, (36), 33 states have return successors, (49), 38 states have call predecessors, (49), 36 states have call successors, (49) [2021-11-23 03:32:33,317 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 213 states to 213 states and 263 transitions. [2021-11-23 03:32:33,318 INFO L78 Accepts]: Start accepts. Automaton has 213 states and 263 transitions. Word has length 35 [2021-11-23 03:32:33,318 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:32:33,319 INFO L470 AbstractCegarLoop]: Abstraction has 213 states and 263 transitions. [2021-11-23 03:32:33,333 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2021-11-23 03:32:33,334 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 263 transitions. [2021-11-23 03:32:33,340 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2021-11-23 03:32:33,345 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:32:33,345 INFO L514 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:32:33,345 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-23 03:32:33,346 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:32:33,346 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:32:33,347 INFO L85 PathProgramCache]: Analyzing trace with hash 2116699212, now seen corresponding path program 1 times [2021-11-23 03:32:33,347 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:32:33,347 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [580205051] [2021-11-23 03:32:33,347 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:32:33,347 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:32:33,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:32:33,456 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2021-11-23 03:32:33,456 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:32:33,457 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [580205051] [2021-11-23 03:32:33,457 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [580205051] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:32:33,457 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:32:33,457 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 03:32:33,458 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1339980186] [2021-11-23 03:32:33,458 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:32:33,458 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 03:32:33,458 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:32:33,459 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 03:32:33,459 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:32:33,460 INFO L87 Difference]: Start difference. First operand 213 states and 263 transitions. Second operand has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2021-11-23 03:32:33,507 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:32:33,507 INFO L93 Difference]: Finished difference Result 424 states and 529 transitions. [2021-11-23 03:32:33,508 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 03:32:33,508 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 52 [2021-11-23 03:32:33,509 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:32:33,511 INFO L225 Difference]: With dead ends: 424 [2021-11-23 03:32:33,511 INFO L226 Difference]: Without dead ends: 213 [2021-11-23 03:32:33,512 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:32:33,513 INFO L933 BasicCegarLoop]: 41 mSDtfsCounter, 37 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-23 03:32:33,514 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [37 Valid, 41 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-23 03:32:33,515 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 213 states. [2021-11-23 03:32:33,545 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 213 to 213. [2021-11-23 03:32:33,553 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 213 states, 143 states have (on average 1.2097902097902098) internal successors, (173), 158 states have internal predecessors, (173), 36 states have call successors, (36), 27 states have call predecessors, (36), 33 states have return successors, (49), 38 states have call predecessors, (49), 36 states have call successors, (49) [2021-11-23 03:32:33,557 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 213 states to 213 states and 258 transitions. [2021-11-23 03:32:33,558 INFO L78 Accepts]: Start accepts. Automaton has 213 states and 258 transitions. Word has length 52 [2021-11-23 03:32:33,558 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:32:33,560 INFO L470 AbstractCegarLoop]: Abstraction has 213 states and 258 transitions. [2021-11-23 03:32:33,561 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2021-11-23 03:32:33,561 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 258 transitions. [2021-11-23 03:32:33,563 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-11-23 03:32:33,568 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:32:33,569 INFO L514 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:32:33,569 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-23 03:32:33,569 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:32:33,570 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:32:33,570 INFO L85 PathProgramCache]: Analyzing trace with hash -1860818290, now seen corresponding path program 1 times [2021-11-23 03:32:33,570 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:32:33,570 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1454026932] [2021-11-23 03:32:33,570 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:32:33,571 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:32:33,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:32:33,715 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 15 proven. 1 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-11-23 03:32:33,715 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:32:33,715 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1454026932] [2021-11-23 03:32:33,716 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1454026932] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:32:33,716 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1787439876] [2021-11-23 03:32:33,716 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:32:33,716 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:32:33,717 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:32:33,719 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:32:33,724 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-23 03:32:33,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:32:33,866 INFO L263 TraceCheckSpWp]: Trace formula consists of 466 conjuncts, 22 conjunts are in the unsatisfiable core [2021-11-23 03:32:33,874 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:32:34,365 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 26 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:32:34,366 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 03:32:34,738 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 15 proven. 1 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-11-23 03:32:34,738 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1787439876] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 03:32:34,739 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2038171154] [2021-11-23 03:32:34,766 INFO L159 IcfgInterpreter]: Started Sifa with 36 locations of interest [2021-11-23 03:32:34,767 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 03:32:34,774 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 03:32:34,780 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 03:32:34,781 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 03:32:42,734 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 50 for LOIs [2021-11-23 03:32:42,746 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 49 for LOIs [2021-11-23 03:32:43,250 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 44 for LOIs [2021-11-23 03:32:43,260 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 43 for LOIs [2021-11-23 03:32:43,306 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 03:32:48,076 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3770#(and (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| |timeShift_getWaterLevel_#res#1|) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (= ~methaneLevelCritical~0 0) (= |timeShift_getWaterLevel_~retValue_acc~1#1| ~waterLevel~0) (= ~head~0.offset 0) (= 1 ~systemActive~0) (= |old(~pumpRunning~0)| 0) (= |timeShift_getWaterLevel_~retValue_acc~1#1| |timeShift_getWaterLevel_#res#1|) (= |old(~waterLevel~0)| ~waterLevel~0) (= ~head~0.base 0) (= |#NULL.offset| 0) (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (= ~switchedOnBeforeTS~0 0) (<= 0 |#StackHeapBarrier|) (<= |timeShift_getWaterLevel_~retValue_acc~1#1| 2147483647) (= ~pumpRunning~0 1) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0) (= |old(~switchedOnBeforeTS~0)| 0))' at error location [2021-11-23 03:32:48,077 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 03:32:48,077 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 03:32:48,077 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 8 [2021-11-23 03:32:48,078 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1828987815] [2021-11-23 03:32:48,078 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 03:32:48,079 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-23 03:32:48,079 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:32:48,079 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-23 03:32:48,080 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=152, Invalid=970, Unknown=0, NotChecked=0, Total=1122 [2021-11-23 03:32:48,081 INFO L87 Difference]: Start difference. First operand 213 states and 258 transitions. Second operand has 8 states, 8 states have (on average 6.25) internal successors, (50), 8 states have internal predecessors, (50), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2021-11-23 03:32:48,684 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:32:48,685 INFO L93 Difference]: Finished difference Result 712 states and 886 transitions. [2021-11-23 03:32:48,685 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-11-23 03:32:48,686 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 8 states have internal predecessors, (50), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 60 [2021-11-23 03:32:48,686 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:32:48,691 INFO L225 Difference]: With dead ends: 712 [2021-11-23 03:32:48,691 INFO L226 Difference]: Without dead ends: 501 [2021-11-23 03:32:48,694 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 192 GetRequests, 148 SyntacticMatches, 7 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 458 ImplicationChecksByTransitivity, 5.0s TimeCoverageRelationStatistics Valid=196, Invalid=1286, Unknown=0, NotChecked=0, Total=1482 [2021-11-23 03:32:48,695 INFO L933 BasicCegarLoop]: 105 mSDtfsCounter, 177 mSDsluCounter, 354 mSDsCounter, 0 mSdLazyCounter, 321 mSolverCounterSat, 85 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 178 SdHoareTripleChecker+Valid, 394 SdHoareTripleChecker+Invalid, 406 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 85 IncrementalHoareTripleChecker+Valid, 321 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-23 03:32:48,695 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [178 Valid, 394 Invalid, 406 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [85 Valid, 321 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-23 03:32:48,697 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 501 states. [2021-11-23 03:32:48,735 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 501 to 377. [2021-11-23 03:32:48,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 377 states, 251 states have (on average 1.1912350597609562) internal successors, (299), 279 states have internal predecessors, (299), 61 states have call successors, (61), 51 states have call predecessors, (61), 64 states have return successors, (103), 64 states have call predecessors, (103), 61 states have call successors, (103) [2021-11-23 03:32:48,741 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 377 states to 377 states and 463 transitions. [2021-11-23 03:32:48,742 INFO L78 Accepts]: Start accepts. Automaton has 377 states and 463 transitions. Word has length 60 [2021-11-23 03:32:48,743 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:32:48,743 INFO L470 AbstractCegarLoop]: Abstraction has 377 states and 463 transitions. [2021-11-23 03:32:48,743 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 8 states have internal predecessors, (50), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2021-11-23 03:32:48,743 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 463 transitions. [2021-11-23 03:32:48,745 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-11-23 03:32:48,745 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:32:48,746 INFO L514 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:32:48,789 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-23 03:32:48,973 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2021-11-23 03:32:48,974 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:32:48,974 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:32:48,974 INFO L85 PathProgramCache]: Analyzing trace with hash -257129915, now seen corresponding path program 1 times [2021-11-23 03:32:48,974 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:32:48,975 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1003543318] [2021-11-23 03:32:48,975 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:32:48,975 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:32:49,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:32:49,067 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2021-11-23 03:32:49,069 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:32:49,069 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1003543318] [2021-11-23 03:32:49,069 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1003543318] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:32:49,070 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2004597407] [2021-11-23 03:32:49,070 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:32:49,070 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:32:49,070 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:32:49,072 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:32:49,097 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-23 03:32:49,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:32:49,202 INFO L263 TraceCheckSpWp]: Trace formula consists of 458 conjuncts, 13 conjunts are in the unsatisfiable core [2021-11-23 03:32:49,205 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:32:49,343 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 14 proven. 1 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2021-11-23 03:32:49,344 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 03:32:49,508 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2021-11-23 03:32:49,509 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2004597407] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 03:32:49,509 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1917960965] [2021-11-23 03:32:49,512 INFO L159 IcfgInterpreter]: Started Sifa with 41 locations of interest [2021-11-23 03:32:49,512 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 03:32:49,513 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 03:32:49,513 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 03:32:49,513 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 03:32:58,774 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 321 for LOIs [2021-11-23 03:32:58,842 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 51 for LOIs [2021-11-23 03:32:59,814 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 26 for LOIs [2021-11-23 03:32:59,817 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 72 for LOIs [2021-11-23 03:33:00,149 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 55 for LOIs [2021-11-23 03:33:00,162 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 03:33:12,608 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5908#(and (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 0)) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (= |timeShift_getWaterLevel_~retValue_acc~1#1| ~waterLevel~0) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (= ~head~0.offset 0) (<= |old(~switchedOnBeforeTS~0)| 2147483647) (<= |old(~pumpRunning~0)| 2147483647) (= 1 ~systemActive~0) (= |timeShift_getWaterLevel_~retValue_acc~1#1| |timeShift_getWaterLevel_#res#1|) (<= ~methaneLevelCritical~0 0) (<= 0 ~head~0.base) (<= 0 (+ |old(~switchedOnBeforeTS~0)| 2147483648)) (<= 0 ~methaneLevelCritical~0) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 2147483648)) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 2147483647) (<= ~head~0.base 0) (= |#NULL.offset| 0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (= ~switchedOnBeforeTS~0 0) (<= 0 |#StackHeapBarrier|) (<= |timeShift_getWaterLevel_~retValue_acc~1#1| 2147483647) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2147483648)))' at error location [2021-11-23 03:33:12,608 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 03:33:12,609 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 03:33:12,609 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 9 [2021-11-23 03:33:12,609 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [765875867] [2021-11-23 03:33:12,609 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 03:33:12,610 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-11-23 03:33:12,610 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:33:12,610 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-11-23 03:33:12,611 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=205, Invalid=1435, Unknown=0, NotChecked=0, Total=1640 [2021-11-23 03:33:12,612 INFO L87 Difference]: Start difference. First operand 377 states and 463 transitions. Second operand has 9 states, 7 states have (on average 6.571428571428571) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (10), 2 states have call predecessors, (10), 4 states have return successors, (12), 4 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-23 03:33:13,195 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:33:13,195 INFO L93 Difference]: Finished difference Result 734 states and 930 transitions. [2021-11-23 03:33:13,195 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2021-11-23 03:33:13,195 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 6.571428571428571) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (10), 2 states have call predecessors, (10), 4 states have return successors, (12), 4 states have call predecessors, (12), 2 states have call successors, (12) Word has length 63 [2021-11-23 03:33:13,196 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:33:13,199 INFO L225 Difference]: With dead ends: 734 [2021-11-23 03:33:13,200 INFO L226 Difference]: Without dead ends: 483 [2021-11-23 03:33:13,202 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 207 GetRequests, 157 SyntacticMatches, 1 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 763 ImplicationChecksByTransitivity, 12.7s TimeCoverageRelationStatistics Valid=282, Invalid=2268, Unknown=0, NotChecked=0, Total=2550 [2021-11-23 03:33:13,203 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 183 mSDsluCounter, 412 mSDsCounter, 0 mSdLazyCounter, 438 mSolverCounterSat, 98 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 185 SdHoareTripleChecker+Valid, 420 SdHoareTripleChecker+Invalid, 536 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 98 IncrementalHoareTripleChecker+Valid, 438 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-23 03:33:13,203 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [185 Valid, 420 Invalid, 536 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [98 Valid, 438 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-23 03:33:13,205 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 483 states. [2021-11-23 03:33:13,255 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 483 to 445. [2021-11-23 03:33:13,257 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 445 states, 293 states have (on average 1.1638225255972696) internal successors, (341), 327 states have internal predecessors, (341), 76 states have call successors, (76), 66 states have call predecessors, (76), 75 states have return successors, (123), 75 states have call predecessors, (123), 76 states have call successors, (123) [2021-11-23 03:33:13,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 445 states to 445 states and 540 transitions. [2021-11-23 03:33:13,264 INFO L78 Accepts]: Start accepts. Automaton has 445 states and 540 transitions. Word has length 63 [2021-11-23 03:33:13,266 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:33:13,267 INFO L470 AbstractCegarLoop]: Abstraction has 445 states and 540 transitions. [2021-11-23 03:33:13,267 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 6.571428571428571) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (10), 2 states have call predecessors, (10), 4 states have return successors, (12), 4 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-23 03:33:13,267 INFO L276 IsEmpty]: Start isEmpty. Operand 445 states and 540 transitions. [2021-11-23 03:33:13,270 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2021-11-23 03:33:13,271 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:33:13,271 INFO L514 BasicCegarLoop]: trace histogram [5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:33:13,309 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-23 03:33:13,485 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:33:13,485 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:33:13,486 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:33:13,486 INFO L85 PathProgramCache]: Analyzing trace with hash 801223230, now seen corresponding path program 1 times [2021-11-23 03:33:13,486 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:33:13,486 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [626719225] [2021-11-23 03:33:13,486 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:33:13,486 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:33:13,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:33:13,855 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 19 proven. 37 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2021-11-23 03:33:13,856 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:33:13,856 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [626719225] [2021-11-23 03:33:13,856 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [626719225] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:33:13,856 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1443227139] [2021-11-23 03:33:13,856 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:33:13,856 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:33:13,856 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:33:13,857 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:33:13,877 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-11-23 03:33:13,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:33:13,982 INFO L263 TraceCheckSpWp]: Trace formula consists of 562 conjuncts, 30 conjunts are in the unsatisfiable core [2021-11-23 03:33:13,987 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:33:14,443 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 55 proven. 15 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2021-11-23 03:33:14,443 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 03:33:15,020 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 49 proven. 5 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-11-23 03:33:15,020 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1443227139] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 03:33:15,020 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [900383257] [2021-11-23 03:33:15,023 INFO L159 IcfgInterpreter]: Started Sifa with 37 locations of interest [2021-11-23 03:33:15,024 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 03:33:15,024 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 03:33:15,024 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 03:33:15,025 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 03:33:25,795 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 324 for LOIs [2021-11-23 03:33:25,857 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 48 for LOIs [2021-11-23 03:33:26,115 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 58 for LOIs [2021-11-23 03:33:26,130 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 28 for LOIs [2021-11-23 03:33:26,162 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 03:33:37,161 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8362#(and (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 0)) (<= 0 |old(~pumpRunning~0)|) (<= ~pumpRunning~0 1) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (= ~methaneLevelCritical~0 0) (<= |old(~pumpRunning~0)| 1) (= |timeShift_getWaterLevel_~retValue_acc~1#1| ~waterLevel~0) (= ~head~0.offset 0) (<= |old(~switchedOnBeforeTS~0)| 2147483647) (= 1 ~systemActive~0) (= |timeShift_getWaterLevel_~retValue_acc~1#1| |timeShift_getWaterLevel_#res#1|) (<= 0 (+ |old(~switchedOnBeforeTS~0)| 2147483648)) (<= 0 ~pumpRunning~0) (= ~head~0.base 0) (= |#NULL.offset| 0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (= ~switchedOnBeforeTS~0 0) (<= 0 |#StackHeapBarrier|) (<= |timeShift_getWaterLevel_~retValue_acc~1#1| 2147483647) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2147483648)))' at error location [2021-11-23 03:33:37,161 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 03:33:37,161 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 03:33:37,162 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 11, 11] total 31 [2021-11-23 03:33:37,162 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [958920150] [2021-11-23 03:33:37,162 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 03:33:37,164 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2021-11-23 03:33:37,164 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:33:37,165 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2021-11-23 03:33:37,166 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=353, Invalid=3187, Unknown=0, NotChecked=0, Total=3540 [2021-11-23 03:33:37,167 INFO L87 Difference]: Start difference. First operand 445 states and 540 transitions. Second operand has 31 states, 31 states have (on average 4.548387096774194) internal successors, (141), 31 states have internal predecessors, (141), 16 states have call successors, (27), 8 states have call predecessors, (27), 11 states have return successors, (25), 17 states have call predecessors, (25), 15 states have call successors, (25) [2021-11-23 03:33:40,204 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:33:40,204 INFO L93 Difference]: Finished difference Result 988 states and 1216 transitions. [2021-11-23 03:33:40,204 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2021-11-23 03:33:40,205 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 4.548387096774194) internal successors, (141), 31 states have internal predecessors, (141), 16 states have call successors, (27), 8 states have call predecessors, (27), 11 states have return successors, (25), 17 states have call predecessors, (25), 15 states have call successors, (25) Word has length 85 [2021-11-23 03:33:40,205 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:33:40,206 INFO L225 Difference]: With dead ends: 988 [2021-11-23 03:33:40,206 INFO L226 Difference]: Without dead ends: 0 [2021-11-23 03:33:40,214 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 352 GetRequests, 238 SyntacticMatches, 5 SemanticMatches, 109 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4453 ImplicationChecksByTransitivity, 13.0s TimeCoverageRelationStatistics Valid=1480, Invalid=10730, Unknown=0, NotChecked=0, Total=12210 [2021-11-23 03:33:40,214 INFO L933 BasicCegarLoop]: 107 mSDtfsCounter, 912 mSDsluCounter, 916 mSDsCounter, 0 mSdLazyCounter, 1846 mSolverCounterSat, 692 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 915 SdHoareTripleChecker+Valid, 798 SdHoareTripleChecker+Invalid, 2538 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 692 IncrementalHoareTripleChecker+Valid, 1846 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2021-11-23 03:33:40,215 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [915 Valid, 798 Invalid, 2538 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [692 Valid, 1846 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2021-11-23 03:33:40,215 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-23 03:33:40,215 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-23 03:33:40,216 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 03:33:40,216 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-23 03:33:40,216 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 85 [2021-11-23 03:33:40,216 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:33:40,217 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-23 03:33:40,217 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 4.548387096774194) internal successors, (141), 31 states have internal predecessors, (141), 16 states have call successors, (27), 8 states have call predecessors, (27), 11 states have return successors, (25), 17 states have call predecessors, (25), 15 states have call successors, (25) [2021-11-23 03:33:40,217 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-23 03:33:40,217 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-23 03:33:40,220 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-23 03:33:40,248 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-11-23 03:33:40,425 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:33:40,430 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-23 03:33:45,787 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 790 796) no Hoare annotation was computed. [2021-11-23 03:33:45,788 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 790 796) the Hoare annotation is: true [2021-11-23 03:33:45,788 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 84 95) the Hoare annotation is: true [2021-11-23 03:33:45,788 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2021-11-23 03:33:45,788 INFO L858 garLoopResultBuilder]: For program point L770-2(lines 766 788) no Hoare annotation was computed. [2021-11-23 03:33:45,788 INFO L854 garLoopResultBuilder]: At program point L832(lines 832 840) the Hoare annotation is: (let ((.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) (let ((.cse1 (+ ~waterLevel~0 1))) (and .cse0 (or (and (= |old(~waterLevel~0)| .cse1) (< 0 |old(~waterLevel~0)|)) (= |old(~waterLevel~0)| ~waterLevel~0)) (or (<= |old(~waterLevel~0)| 0) (<= .cse1 |old(~waterLevel~0)|)) .cse2)) .cse3 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse5 .cse3) (or (and .cse5 (not (= |old(~pumpRunning~0)| 1))) (and .cse0 (not (= ~pumpRunning~0 0)) (= ~waterLevel~0 1) .cse2) .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-23 03:33:45,789 INFO L854 garLoopResultBuilder]: At program point L192(line 192) the Hoare annotation is: (let ((.cse11 (+ ~waterLevel~0 1)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (= ~pumpRunning~0 0)) (.cse6 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse9 (or (and (= |old(~waterLevel~0)| .cse11) (< 0 |old(~waterLevel~0)|)) .cse7)) (.cse10 (or (<= |old(~waterLevel~0)| 0) (<= .cse11 |old(~waterLevel~0)|))) (.cse8 (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse9 .cse10 .cse8)) (.cse4 (and (not (= ~switchedOnBeforeTS~0 0)) .cse5 .cse6 .cse9 .cse10)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 (not (= |old(~pumpRunning~0)| 1))) .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) .cse0 .cse2 .cse3 .cse4 (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse1 .cse2 .cse3 (and .cse5 .cse6 .cse7 .cse8)))))) [2021-11-23 03:33:45,789 INFO L858 garLoopResultBuilder]: For program point L192-1(line 192) no Hoare annotation was computed. [2021-11-23 03:33:45,789 INFO L854 garLoopResultBuilder]: At program point L828(lines 828 845) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse5 (= 0 ~systemActive~0)) (.cse6 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) (let ((.cse2 (+ ~waterLevel~0 1))) (and .cse0 (or .cse1 (<= |old(~waterLevel~0)| 0) (<= .cse2 |old(~waterLevel~0)|)) (or (and (= |old(~waterLevel~0)| .cse2) (< 0 |old(~waterLevel~0)|)) .cse3) .cse4)) .cse5 .cse6) (or (not (= |old(~pumpRunning~0)| 1)) (and .cse0 (<= ~waterLevel~0 1) (<= 1 ~waterLevel~0) .cse4) .cse5 .cse6 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse1 .cse3 .cse4) .cse5 .cse6))) [2021-11-23 03:33:45,790 INFO L854 garLoopResultBuilder]: At program point L177(line 177) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) (and .cse0 .cse1 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) .cse2 .cse3) (or (not (= |old(~pumpRunning~0)| 1)) (and .cse0 .cse1) .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse3 (and (not (= ~switchedOnBeforeTS~0 0)) (= ~pumpRunning~0 0) .cse1) (= |old(~switchedOnBeforeTS~0)| 0)))) [2021-11-23 03:33:45,790 INFO L854 garLoopResultBuilder]: At program point L177-1(line 177) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= |timeShift___utac_acc__Specification5_spec__2_#t~ret9#1| ~pumpRunning~0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0 .cse1) .cse2 .cse3) (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) (and .cse4 .cse0 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse1) .cse2 .cse3 (= |old(~switchedOnBeforeTS~0)| 0)) (or (and .cse4 .cse0 .cse1) (not (= |old(~pumpRunning~0)| 1)) .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-23 03:33:45,790 INFO L854 garLoopResultBuilder]: At program point L685(line 685) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) .cse0 .cse1) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse0) (or (and .cse2 (not (= |old(~pumpRunning~0)| 1))) .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-23 03:33:45,790 INFO L854 garLoopResultBuilder]: At program point L838(line 838) the Hoare annotation is: (let ((.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) (let ((.cse1 (+ ~waterLevel~0 1))) (and .cse0 (or (and (= |old(~waterLevel~0)| .cse1) (< 0 |old(~waterLevel~0)|)) (= |old(~waterLevel~0)| ~waterLevel~0)) (or (<= |old(~waterLevel~0)| 0) (<= .cse1 |old(~waterLevel~0)|)) .cse2)) .cse3 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse5 .cse3) (or (and .cse5 (not (= |old(~pumpRunning~0)| 1))) (and .cse0 (not (= ~pumpRunning~0 0)) (= ~waterLevel~0 1) .cse2) .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-23 03:33:45,790 INFO L858 garLoopResultBuilder]: For program point L194(lines 194 204) no Hoare annotation was computed. [2021-11-23 03:33:45,791 INFO L858 garLoopResultBuilder]: For program point L190(lines 190 207) no Hoare annotation was computed. [2021-11-23 03:33:45,791 INFO L854 garLoopResultBuilder]: At program point L190-1(lines 182 210) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 1)) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse6 (= 0 ~systemActive~0)) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (not (= ~switchedOnBeforeTS~0 0))) (.cse9 (= ~pumpRunning~0 0)) (.cse1 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (let ((.cse2 (= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 1)) (and .cse0 .cse1 .cse2 .cse3) (and .cse1 .cse4 .cse5) .cse6 .cse7 (and .cse8 .cse9 .cse1 .cse2) (not (<= 2 |old(~waterLevel~0)|)))) (or (not (= |old(~pumpRunning~0)| 0)) .cse6 .cse7 (and .cse1 (<= 2 ~waterLevel~0) .cse4 (or .cse9 .cse5)) (and .cse9 .cse1 .cse4 .cse3)) (let ((.cse12 (+ ~waterLevel~0 1))) (let ((.cse10 (or (and (= |old(~waterLevel~0)| .cse12) (< 0 |old(~waterLevel~0)|)) .cse4)) (.cse11 (or (<= |old(~waterLevel~0)| 0) (<= .cse12 |old(~waterLevel~0)|)))) (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) (and .cse0 .cse1 .cse10 .cse11 .cse3) .cse6 .cse7 (and .cse8 .cse9 .cse1 .cse10 .cse11) (= |old(~switchedOnBeforeTS~0)| 0)))))) [2021-11-23 03:33:45,791 INFO L854 garLoopResultBuilder]: At program point L843(line 843) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 1)) .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) .cse0 .cse1 (= |old(~switchedOnBeforeTS~0)| 0)) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) .cse0 .cse1))) [2021-11-23 03:33:45,792 INFO L854 garLoopResultBuilder]: At program point L843-1(lines 824 848) the Hoare annotation is: (let ((.cse4 (+ ~waterLevel~0 1))) (let ((.cse10 (= ~pumpRunning~0 0)) (.cse1 (and (= |old(~waterLevel~0)| .cse4) (< 0 |old(~waterLevel~0)|))) (.cse3 (<= |old(~waterLevel~0)| 0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (and (not (= ~switchedOnBeforeTS~0 0)) .cse10 (or .cse1 (and .cse3 .cse2)))) (.cse7 (= 0 ~systemActive~0)) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) (and .cse0 (or .cse1 .cse2) (or .cse3 (<= .cse4 |old(~waterLevel~0)|)) .cse5) .cse6 .cse7 .cse8 (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse9 (and .cse10 .cse2 .cse5) (and (<= 2 ~waterLevel~0) .cse2) .cse7 .cse8) (or (and .cse9 (not (= |old(~pumpRunning~0)| 1))) .cse6 (and .cse2 (or .cse0 (= ~pumpRunning~0 1))) .cse7 .cse8 (and .cse0 (= ~waterLevel~0 1) .cse5) (not (<= 2 |old(~waterLevel~0)|))))))) [2021-11-23 03:33:45,792 INFO L854 garLoopResultBuilder]: At program point L777-1(lines 777 783) the Hoare annotation is: (let ((.cse4 (+ ~waterLevel~0 1))) (let ((.cse10 (= ~pumpRunning~0 0)) (.cse1 (and (= |old(~waterLevel~0)| .cse4) (< 0 |old(~waterLevel~0)|))) (.cse3 (<= |old(~waterLevel~0)| 0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (and (not (= ~switchedOnBeforeTS~0 0)) .cse10 (or .cse1 (and .cse3 .cse2)))) (.cse7 (= 0 ~systemActive~0)) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) (and .cse0 (or .cse1 .cse2) (or .cse3 (<= .cse4 |old(~waterLevel~0)|)) .cse5) .cse6 .cse7 .cse8 (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse9 (and .cse10 .cse2 .cse5) (and (<= 2 ~waterLevel~0) .cse2) .cse7 .cse8) (or (and .cse9 (not (= |old(~pumpRunning~0)| 1))) .cse6 (and .cse2 (or .cse0 (= ~pumpRunning~0 1))) .cse7 .cse8 (and .cse0 (= ~waterLevel~0 1) .cse5) (not (<= 2 |old(~waterLevel~0)|))))))) [2021-11-23 03:33:45,792 INFO L858 garLoopResultBuilder]: For program point L195(lines 195 201) no Hoare annotation was computed. [2021-11-23 03:33:45,792 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 763 789) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) (and .cse0 .cse1 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) .cse2 .cse3) (or (not (= |old(~pumpRunning~0)| 1)) (and .cse0 .cse1) .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse3 (and (not (= ~switchedOnBeforeTS~0 0)) (= ~pumpRunning~0 0) .cse1) (= |old(~switchedOnBeforeTS~0)| 0)))) [2021-11-23 03:33:45,792 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 763 789) no Hoare annotation was computed. [2021-11-23 03:33:45,793 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 685) no Hoare annotation was computed. [2021-11-23 03:33:45,793 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 580 609) no Hoare annotation was computed. [2021-11-23 03:33:45,793 INFO L861 garLoopResultBuilder]: At program point L605(lines 580 609) the Hoare annotation is: true [2021-11-23 03:33:45,793 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 580 609) the Hoare annotation is: true [2021-11-23 03:33:45,793 INFO L858 garLoopResultBuilder]: For program point L601(line 601) no Hoare annotation was computed. [2021-11-23 03:33:45,794 INFO L858 garLoopResultBuilder]: For program point L594(lines 594 598) no Hoare annotation was computed. [2021-11-23 03:33:45,794 INFO L861 garLoopResultBuilder]: At program point L594-1(lines 594 598) the Hoare annotation is: true [2021-11-23 03:33:45,794 INFO L861 garLoopResultBuilder]: At program point L590-2(lines 590 604) the Hoare annotation is: true [2021-11-23 03:33:45,794 INFO L861 garLoopResultBuilder]: At program point L586(line 586) the Hoare annotation is: true [2021-11-23 03:33:45,794 INFO L858 garLoopResultBuilder]: For program point L586-1(line 586) no Hoare annotation was computed. [2021-11-23 03:33:45,794 INFO L854 garLoopResultBuilder]: At program point L667(lines 667 674) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (not (= 0 ~systemActive~0))) [2021-11-23 03:33:45,795 INFO L861 garLoopResultBuilder]: At program point L667-2(lines 667 674) the Hoare annotation is: true [2021-11-23 03:33:45,795 INFO L858 garLoopResultBuilder]: For program point L721(lines 721 727) no Hoare annotation was computed. [2021-11-23 03:33:45,795 INFO L854 garLoopResultBuilder]: At program point L721-1(lines 721 727) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (<= ~waterLevel~0 2)) (.cse4 (= ~pumpRunning~0 0)) (.cse2 (= ~pumpRunning~0 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) .cse3) (and .cse4 (<= ~waterLevel~0 1) .cse0 .cse3) (and (<= 2 ~waterLevel~0) .cse0 .cse1 (or .cse4 .cse2) .cse3))) [2021-11-23 03:33:45,795 INFO L854 garLoopResultBuilder]: At program point L746(lines 701 748) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= ~waterLevel~0 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= ~pumpRunning~0 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3) (and (<= 2 ~waterLevel~0) .cse2 (<= ~waterLevel~0 2) (or .cse0 .cse4) .cse3) (and .cse1 .cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4) .cse3))) [2021-11-23 03:33:45,795 INFO L854 garLoopResultBuilder]: At program point L713(line 713) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= ~waterLevel~0 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= ~pumpRunning~0 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3) (and (<= 2 ~waterLevel~0) .cse2 (<= ~waterLevel~0 2) (or .cse0 .cse4) .cse3) (and .cse1 .cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4) .cse3))) [2021-11-23 03:33:45,796 INFO L861 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2021-11-23 03:33:45,796 INFO L854 garLoopResultBuilder]: At program point L739-2(lines 731 744) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (<= ~waterLevel~0 2)) (.cse4 (= ~pumpRunning~0 0)) (.cse2 (= ~pumpRunning~0 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) .cse3) (and .cse4 (<= ~waterLevel~0 1) .cse0 .cse3) (and (<= 2 ~waterLevel~0) .cse0 .cse1 (or .cse4 .cse2) .cse3))) [2021-11-23 03:33:45,796 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-23 03:33:45,796 INFO L858 garLoopResultBuilder]: For program point L702(lines 701 748) no Hoare annotation was computed. [2021-11-23 03:33:45,796 INFO L854 garLoopResultBuilder]: At program point L723(line 723) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (<= ~waterLevel~0 2)) (.cse4 (= ~pumpRunning~0 0)) (.cse2 (= ~pumpRunning~0 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) .cse3) (and .cse4 (<= ~waterLevel~0 1) .cse0 .cse3) (and (<= 2 ~waterLevel~0) .cse0 .cse1 (or .cse4 .cse2) .cse3))) [2021-11-23 03:33:45,797 INFO L861 garLoopResultBuilder]: At program point L752(lines 691 756) the Hoare annotation is: true [2021-11-23 03:33:45,797 INFO L858 garLoopResultBuilder]: For program point L711(lines 711 717) no Hoare annotation was computed. [2021-11-23 03:33:45,797 INFO L858 garLoopResultBuilder]: For program point L711-1(lines 711 717) no Hoare annotation was computed. [2021-11-23 03:33:45,797 INFO L854 garLoopResultBuilder]: At program point L749(lines 700 750) the Hoare annotation is: false [2021-11-23 03:33:45,797 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 798 822) the Hoare annotation is: (or (not (<= ~waterLevel~0 2)) (= 0 ~systemActive~0) (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|))) [2021-11-23 03:33:45,798 INFO L854 garLoopResultBuilder]: At program point L812(line 812) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (= ~switchedOnBeforeTS~0 0) .cse2) (or .cse0 .cse1 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse2) (or (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0) (not (<= ~waterLevel~0 1)) .cse1 .cse2))) [2021-11-23 03:33:45,798 INFO L854 garLoopResultBuilder]: At program point L806(lines 806 814) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (= ~switchedOnBeforeTS~0 0) .cse2) (or .cse0 .cse1 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse2) (or (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0) (not (<= ~waterLevel~0 1)) .cse1 .cse2))) [2021-11-23 03:33:45,798 INFO L854 garLoopResultBuilder]: At program point L802(lines 802 819) the Hoare annotation is: (or (not (<= ~waterLevel~0 2)) (= 0 ~systemActive~0) (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|))) [2021-11-23 03:33:45,798 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 798 822) no Hoare annotation was computed. [2021-11-23 03:33:45,798 INFO L854 garLoopResultBuilder]: At program point L817(line 817) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2))) [2021-11-23 03:33:45,799 INFO L858 garLoopResultBuilder]: For program point L817-1(lines 798 822) no Hoare annotation was computed. [2021-11-23 03:33:45,799 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2021-11-23 03:33:45,799 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 72 83) the Hoare annotation is: (let ((.cse3 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or (and .cse0 (not (= ~pumpRunning~0 1))) .cse1 .cse2 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 (not (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) .cse1 .cse2) (or .cse3 .cse0 .cse1 .cse2))) [2021-11-23 03:33:45,799 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 894 902) no Hoare annotation was computed. [2021-11-23 03:33:45,799 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 894 902) the Hoare annotation is: true [2021-11-23 03:33:45,803 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:33:45,805 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-23 03:33:45,847 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 03:33:45 BoogieIcfgContainer [2021-11-23 03:33:45,847 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-23 03:33:45,848 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-23 03:33:45,848 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-23 03:33:45,848 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-23 03:33:45,849 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:32:30" (3/4) ... [2021-11-23 03:33:45,852 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-23 03:33:45,859 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-23 03:33:45,860 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-23 03:33:45,860 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-23 03:33:45,860 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-23 03:33:45,860 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 03:33:45,861 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-23 03:33:45,861 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-11-23 03:33:45,873 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 82 nodes and edges [2021-11-23 03:33:45,874 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 29 nodes and edges [2021-11-23 03:33:45,875 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2021-11-23 03:33:45,876 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-23 03:33:45,876 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-23 03:33:45,877 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-23 03:33:45,878 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-23 03:33:45,908 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((2 <= waterLevel && splverifierCounter == 0) && waterLevel <= 2) && (pumpRunning == 0 || pumpRunning == 1)) && !(0 == systemActive))) || ((((waterLevel <= 1 && splverifierCounter == 0) && pumpRunning == switchedOnBeforeTS) && (pumpRunning == \old(pumpRunning) || pumpRunning == 1)) && !(0 == systemActive)) [2021-11-23 03:33:45,909 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && aux-isPumpRunning()-aux == pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || (((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && aux-isPumpRunning()-aux == pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || \old(switchedOnBeforeTS) == 0)) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && aux-isPumpRunning()-aux == pumpRunning) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-11-23 03:33:45,909 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((splverifierCounter == 0 && waterLevel <= 2) && pumpRunning == switchedOnBeforeTS) && (pumpRunning == \old(pumpRunning) || pumpRunning == 1)) && !(0 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((2 <= waterLevel && splverifierCounter == 0) && waterLevel <= 2) && (pumpRunning == 0 || pumpRunning == 1)) && !(0 == systemActive)) [2021-11-23 03:33:45,910 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || (((pumpRunning == \old(pumpRunning) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && (\old(waterLevel) <= 0 || waterLevel + 1 <= \old(waterLevel))) && pumpRunning == switchedOnBeforeTS)) || ((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel)))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || \old(switchedOnBeforeTS) == 0) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((!(\old(pumpRunning) == 0) && !(\old(pumpRunning) == 1)) || ((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel)))) || (\old(waterLevel) == waterLevel && (pumpRunning == \old(pumpRunning) || pumpRunning == 1))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS)) || !(2 <= \old(waterLevel))) [2021-11-23 03:33:45,911 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 1) || (((pumpRunning == \old(pumpRunning) && tmp == waterLevel) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS)) || ((tmp == waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && tmp == waterLevel) && waterLevel == 1)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((tmp == waterLevel && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && (pumpRunning == 0 || pumpRunning == 1))) || (((pumpRunning == 0 && tmp == waterLevel) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || ((((pumpRunning == \old(pumpRunning) && tmp == waterLevel) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && (\old(waterLevel) <= 0 || waterLevel + 1 <= \old(waterLevel))) && pumpRunning == switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && tmp == waterLevel) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && (\old(waterLevel) <= 0 || waterLevel + 1 <= \old(waterLevel)))) || \old(switchedOnBeforeTS) == 0) [2021-11-23 03:33:45,911 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || (((pumpRunning == \old(pumpRunning) && ((pumpRunning == 0 || \old(waterLevel) <= 0) || waterLevel + 1 <= \old(waterLevel))) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && pumpRunning == switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 1) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && 1 <= waterLevel) && pumpRunning == switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2021-11-23 03:33:45,911 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) && !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-11-23 03:33:45,912 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || (((pumpRunning == \old(pumpRunning) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && (\old(waterLevel) <= 0 || waterLevel + 1 <= \old(waterLevel))) && pumpRunning == switchedOnBeforeTS)) || ((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel)))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || \old(switchedOnBeforeTS) == 0) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((!(\old(pumpRunning) == 0) && !(\old(pumpRunning) == 1)) || ((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel)))) || (\old(waterLevel) == waterLevel && (pumpRunning == \old(pumpRunning) || pumpRunning == 1))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS)) || !(2 <= \old(waterLevel))) [2021-11-23 03:33:45,912 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(waterLevel <= 2) || 0 == systemActive) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning)) [2021-11-23 03:33:45,914 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || (((pumpRunning == \old(pumpRunning) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && (\old(waterLevel) <= 0 || waterLevel + 1 <= \old(waterLevel))) && pumpRunning == switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) && !(\old(pumpRunning) == 1)) || (((pumpRunning == \old(pumpRunning) && !(pumpRunning == 0)) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-11-23 03:33:45,914 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(waterLevel <= 2) || 0 == systemActive) || switchedOnBeforeTS == 0) || !(switchedOnBeforeTS == \old(pumpRunning))) && (((!(waterLevel <= 2) || 0 == systemActive) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning)))) && (((tmp == 0 || !(waterLevel <= 1)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning))) [2021-11-23 03:33:45,951 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/witness.graphml [2021-11-23 03:33:45,952 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-23 03:33:45,953 INFO L158 Benchmark]: Toolchain (without parser) took 77473.64ms. Allocated memory was 88.1MB in the beginning and 612.4MB in the end (delta: 524.3MB). Free memory was 52.2MB in the beginning and 416.9MB in the end (delta: -364.7MB). Peak memory consumption was 157.8MB. Max. memory is 16.1GB. [2021-11-23 03:33:45,953 INFO L158 Benchmark]: CDTParser took 0.30ms. Allocated memory is still 88.1MB. Free memory was 59.7MB in the beginning and 59.6MB in the end (delta: 26.8kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-23 03:33:45,954 INFO L158 Benchmark]: CACSL2BoogieTranslator took 614.50ms. Allocated memory was 88.1MB in the beginning and 107.0MB in the end (delta: 18.9MB). Free memory was 52.0MB in the beginning and 74.9MB in the end (delta: -22.9MB). Peak memory consumption was 7.9MB. Max. memory is 16.1GB. [2021-11-23 03:33:45,954 INFO L158 Benchmark]: Boogie Procedure Inliner took 99.40ms. Allocated memory is still 107.0MB. Free memory was 74.9MB in the beginning and 72.3MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-23 03:33:45,955 INFO L158 Benchmark]: Boogie Preprocessor took 36.20ms. Allocated memory is still 107.0MB. Free memory was 72.3MB in the beginning and 70.7MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-23 03:33:45,955 INFO L158 Benchmark]: RCFGBuilder took 850.77ms. Allocated memory is still 107.0MB. Free memory was 70.7MB in the beginning and 73.9MB in the end (delta: -3.3MB). Peak memory consumption was 17.3MB. Max. memory is 16.1GB. [2021-11-23 03:33:45,956 INFO L158 Benchmark]: TraceAbstraction took 75760.78ms. Allocated memory was 107.0MB in the beginning and 612.4MB in the end (delta: 505.4MB). Free memory was 73.2MB in the beginning and 424.3MB in the end (delta: -351.1MB). Peak memory consumption was 371.9MB. Max. memory is 16.1GB. [2021-11-23 03:33:45,956 INFO L158 Benchmark]: Witness Printer took 104.38ms. Allocated memory is still 612.4MB. Free memory was 424.3MB in the beginning and 416.9MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-11-23 03:33:45,959 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30ms. Allocated memory is still 88.1MB. Free memory was 59.7MB in the beginning and 59.6MB in the end (delta: 26.8kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 614.50ms. Allocated memory was 88.1MB in the beginning and 107.0MB in the end (delta: 18.9MB). Free memory was 52.0MB in the beginning and 74.9MB in the end (delta: -22.9MB). Peak memory consumption was 7.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 99.40ms. Allocated memory is still 107.0MB. Free memory was 74.9MB in the beginning and 72.3MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 36.20ms. Allocated memory is still 107.0MB. Free memory was 72.3MB in the beginning and 70.7MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 850.77ms. Allocated memory is still 107.0MB. Free memory was 70.7MB in the beginning and 73.9MB in the end (delta: -3.3MB). Peak memory consumption was 17.3MB. Max. memory is 16.1GB. * TraceAbstraction took 75760.78ms. Allocated memory was 107.0MB in the beginning and 612.4MB in the end (delta: 505.4MB). Free memory was 73.2MB in the beginning and 424.3MB in the end (delta: -351.1MB). Peak memory consumption was 371.9MB. Max. memory is 16.1GB. * Witness Printer took 104.38ms. Allocated memory is still 612.4MB. Free memory was 424.3MB in the beginning and 416.9MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 685]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 58 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 75.6s, OverallIterations: 9, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 6.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.4s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1780 SdHoareTripleChecker+Valid, 3.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1756 mSDsluCounter, 2559 SdHoareTripleChecker+Invalid, 2.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2448 mSDsCounter, 1100 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3533 IncrementalHoareTripleChecker+Invalid, 4633 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1100 mSolverCounterUnsat, 643 mSDtfsCounter, 3533 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 818 GetRequests, 563 SyntacticMatches, 13 SemanticMatches, 242 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5831 ImplicationChecksByTransitivity, 31.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=445occurred in iteration=8, InterpolantAutomatonStates: 136, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 9 MinimizatonAttempts, 230 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 36 LocationsWithAnnotation, 1205 PreInvPairs, 1443 NumberOfFragments, 1815 HoareAnnotationTreeSize, 1205 FomulaSimplifications, 7905 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 36 FomulaSimplificationsInter, 26435 FormulaSimplificationTreeSizeReductionInter, 4.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.7s SatisfiabilityAnalysisTime, 3.3s InterpolantComputationTime, 602 NumberOfCodeBlocks, 602 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 795 ConstructedInterpolants, 0 QuantifiedInterpolants, 2654 SizeOfPredicates, 27 NumberOfNonLiveVariables, 1486 ConjunctsInSsa, 65 ConjunctsInUnsatCore, 15 InterpolantComputations, 6 PerfectInterpolantSequences, 350/413 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 685]: Loop Invariant Derived loop invariant: (((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) && !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 701]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((2 <= waterLevel && splverifierCounter == 0) && waterLevel <= 2) && (pumpRunning == 0 || pumpRunning == 1)) && !(0 == systemActive))) || ((((waterLevel <= 1 && splverifierCounter == 0) && pumpRunning == switchedOnBeforeTS) && (pumpRunning == \old(pumpRunning) || pumpRunning == 1)) && !(0 == systemActive)) - InvariantResult [Line: 806]: Loop Invariant Derived loop invariant: ((((!(waterLevel <= 2) || 0 == systemActive) || switchedOnBeforeTS == 0) || !(switchedOnBeforeTS == \old(pumpRunning))) && (((!(waterLevel <= 2) || 0 == systemActive) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning)))) && (((tmp == 0 || !(waterLevel <= 1)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning))) - InvariantResult [Line: 700]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 691]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 721]: Loop Invariant Derived loop invariant: (((((splverifierCounter == 0 && waterLevel <= 2) && pumpRunning == switchedOnBeforeTS) && (pumpRunning == \old(pumpRunning) || pumpRunning == 1)) && !(0 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((2 <= waterLevel && splverifierCounter == 0) && waterLevel <= 2) && (pumpRunning == 0 || pumpRunning == 1)) && !(0 == systemActive)) - InvariantResult [Line: 580]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 828]: Loop Invariant Derived loop invariant: ((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || (((pumpRunning == \old(pumpRunning) && ((pumpRunning == 0 || \old(waterLevel) <= 0) || waterLevel + 1 <= \old(waterLevel))) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && pumpRunning == switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 1) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && 1 <= waterLevel) && pumpRunning == switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 667]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && waterLevel == 1) && pumpRunning == switchedOnBeforeTS) && !(0 == systemActive) - InvariantResult [Line: 182]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 1) || (((pumpRunning == \old(pumpRunning) && tmp == waterLevel) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS)) || ((tmp == waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && tmp == waterLevel) && waterLevel == 1)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((tmp == waterLevel && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && (pumpRunning == 0 || pumpRunning == 1))) || (((pumpRunning == 0 && tmp == waterLevel) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || ((((pumpRunning == \old(pumpRunning) && tmp == waterLevel) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && (\old(waterLevel) <= 0 || waterLevel + 1 <= \old(waterLevel))) && pumpRunning == switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && tmp == waterLevel) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && (\old(waterLevel) <= 0 || waterLevel + 1 <= \old(waterLevel)))) || \old(switchedOnBeforeTS) == 0) - InvariantResult [Line: 667]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 824]: Loop Invariant Derived loop invariant: ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || (((pumpRunning == \old(pumpRunning) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && (\old(waterLevel) <= 0 || waterLevel + 1 <= \old(waterLevel))) && pumpRunning == switchedOnBeforeTS)) || ((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel)))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || \old(switchedOnBeforeTS) == 0) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((!(\old(pumpRunning) == 0) && !(\old(pumpRunning) == 1)) || ((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel)))) || (\old(waterLevel) == waterLevel && (pumpRunning == \old(pumpRunning) || pumpRunning == 1))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 590]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 177]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && aux-isPumpRunning()-aux == pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || (((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && aux-isPumpRunning()-aux == pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || \old(switchedOnBeforeTS) == 0)) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && aux-isPumpRunning()-aux == pumpRunning) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 832]: Loop Invariant Derived loop invariant: ((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || (((pumpRunning == \old(pumpRunning) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && (\old(waterLevel) <= 0 || waterLevel + 1 <= \old(waterLevel))) && pumpRunning == switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) && !(\old(pumpRunning) == 1)) || (((pumpRunning == \old(pumpRunning) && !(pumpRunning == 0)) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 802]: Loop Invariant Derived loop invariant: ((!(waterLevel <= 2) || 0 == systemActive) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning)) - InvariantResult [Line: 777]: Loop Invariant Derived loop invariant: ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || (((pumpRunning == \old(pumpRunning) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && (\old(waterLevel) <= 0 || waterLevel + 1 <= \old(waterLevel))) && pumpRunning == switchedOnBeforeTS)) || ((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel)))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || \old(switchedOnBeforeTS) == 0) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((!(\old(pumpRunning) == 0) && !(\old(pumpRunning) == 1)) || ((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel)))) || (\old(waterLevel) == waterLevel && (pumpRunning == \old(pumpRunning) || pumpRunning == 1))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS)) || !(2 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2021-11-23 03:33:46,042 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b3fcc71-15d3-41e7-aca1-e73de8a4b723/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE