./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash debcf50bf3bb3961401c62ca4b7217ea7cc93038f750143121614e56b550164d --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-19 06:51:05,903 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-19 06:51:05,906 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-19 06:51:05,940 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-19 06:51:05,940 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-19 06:51:05,948 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-19 06:51:05,952 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-19 06:51:05,957 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-19 06:51:05,960 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-19 06:51:05,968 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-19 06:51:05,970 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-19 06:51:05,972 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-19 06:51:05,973 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-19 06:51:05,981 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-19 06:51:05,982 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-19 06:51:05,984 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-19 06:51:05,985 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-19 06:51:05,988 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-19 06:51:05,990 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-19 06:51:05,992 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-19 06:51:06,002 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-19 06:51:06,004 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-19 06:51:06,005 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-19 06:51:06,007 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-19 06:51:06,012 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-19 06:51:06,019 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-19 06:51:06,019 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-19 06:51:06,020 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-19 06:51:06,023 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-19 06:51:06,024 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-19 06:51:06,025 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-19 06:51:06,027 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-19 06:51:06,028 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-19 06:51:06,030 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-19 06:51:06,032 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-19 06:51:06,034 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-19 06:51:06,035 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-19 06:51:06,035 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-19 06:51:06,036 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-19 06:51:06,037 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-19 06:51:06,038 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-19 06:51:06,039 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-19 06:51:06,078 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-19 06:51:06,081 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-19 06:51:06,082 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-19 06:51:06,083 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-19 06:51:06,084 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-19 06:51:06,084 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-19 06:51:06,084 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-19 06:51:06,085 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-19 06:51:06,085 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-19 06:51:06,085 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-19 06:51:06,087 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-19 06:51:06,087 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-19 06:51:06,087 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-19 06:51:06,087 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-19 06:51:06,088 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-19 06:51:06,088 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-19 06:51:06,088 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-19 06:51:06,089 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-19 06:51:06,090 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-19 06:51:06,090 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-19 06:51:06,090 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-19 06:51:06,090 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-19 06:51:06,091 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-19 06:51:06,091 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-19 06:51:06,091 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-19 06:51:06,091 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-19 06:51:06,092 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-19 06:51:06,092 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-19 06:51:06,092 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-19 06:51:06,093 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-19 06:51:06,093 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-19 06:51:06,093 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-19 06:51:06,094 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 06:51:06,094 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-19 06:51:06,094 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-19 06:51:06,095 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-19 06:51:06,095 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-19 06:51:06,095 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-19 06:51:06,095 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-19 06:51:06,096 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-19 06:51:06,096 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-19 06:51:06,096 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> debcf50bf3bb3961401c62ca4b7217ea7cc93038f750143121614e56b550164d [2022-11-19 06:51:06,507 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-19 06:51:06,544 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-19 06:51:06,547 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-19 06:51:06,549 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-19 06:51:06,550 INFO L275 PluginConnector]: CDTParser initialized [2022-11-19 06:51:06,552 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/../../sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c [2022-11-19 06:51:06,636 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/data/9cdeab61d/01e66507cccd4b4e87d6df8f99df8bf4/FLAG804ebd61c [2022-11-19 06:51:07,377 INFO L306 CDTParser]: Found 1 translation units. [2022-11-19 06:51:07,378 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c [2022-11-19 06:51:07,403 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/data/9cdeab61d/01e66507cccd4b4e87d6df8f99df8bf4/FLAG804ebd61c [2022-11-19 06:51:07,624 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/data/9cdeab61d/01e66507cccd4b4e87d6df8f99df8bf4 [2022-11-19 06:51:07,628 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-19 06:51:07,629 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-19 06:51:07,632 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-19 06:51:07,632 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-19 06:51:07,647 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-19 06:51:07,648 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 06:51:07" (1/1) ... [2022-11-19 06:51:07,649 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6c443d9a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:51:07, skipping insertion in model container [2022-11-19 06:51:07,649 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 06:51:07" (1/1) ... [2022-11-19 06:51:07,659 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-19 06:51:07,724 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-19 06:51:08,052 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c[11718,11731] [2022-11-19 06:51:08,104 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 06:51:08,115 INFO L203 MainTranslator]: Completed pre-run [2022-11-19 06:51:08,174 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c[11718,11731] [2022-11-19 06:51:08,197 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 06:51:08,217 INFO L208 MainTranslator]: Completed translation [2022-11-19 06:51:08,218 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:51:08 WrapperNode [2022-11-19 06:51:08,218 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-19 06:51:08,219 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-19 06:51:08,220 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-19 06:51:08,220 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-19 06:51:08,231 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:51:08" (1/1) ... [2022-11-19 06:51:08,259 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:51:08" (1/1) ... [2022-11-19 06:51:08,300 INFO L138 Inliner]: procedures = 57, calls = 101, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 227 [2022-11-19 06:51:08,303 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-19 06:51:08,304 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-19 06:51:08,305 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-19 06:51:08,305 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-19 06:51:08,318 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:51:08" (1/1) ... [2022-11-19 06:51:08,318 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:51:08" (1/1) ... [2022-11-19 06:51:08,333 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:51:08" (1/1) ... [2022-11-19 06:51:08,334 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:51:08" (1/1) ... [2022-11-19 06:51:08,342 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:51:08" (1/1) ... [2022-11-19 06:51:08,347 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:51:08" (1/1) ... [2022-11-19 06:51:08,349 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:51:08" (1/1) ... [2022-11-19 06:51:08,352 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:51:08" (1/1) ... [2022-11-19 06:51:08,355 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-19 06:51:08,369 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-19 06:51:08,370 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-19 06:51:08,376 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-19 06:51:08,378 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:51:08" (1/1) ... [2022-11-19 06:51:08,386 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 06:51:08,400 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:51:08,429 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-19 06:51:08,432 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-19 06:51:08,473 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-19 06:51:08,474 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-19 06:51:08,474 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-19 06:51:08,474 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-19 06:51:08,474 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-19 06:51:08,474 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-19 06:51:08,474 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-19 06:51:08,475 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 06:51:08,475 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 06:51:08,475 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-19 06:51:08,475 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-19 06:51:08,475 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-19 06:51:08,475 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-19 06:51:08,476 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-19 06:51:08,476 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-19 06:51:08,476 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-19 06:51:08,580 INFO L235 CfgBuilder]: Building ICFG [2022-11-19 06:51:08,582 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-19 06:51:09,019 INFO L276 CfgBuilder]: Performing block encoding [2022-11-19 06:51:09,230 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-19 06:51:09,230 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-19 06:51:09,234 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 06:51:09 BoogieIcfgContainer [2022-11-19 06:51:09,235 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-19 06:51:09,239 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-19 06:51:09,240 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-19 06:51:09,244 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-19 06:51:09,245 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 06:51:07" (1/3) ... [2022-11-19 06:51:09,248 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6879922f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 06:51:09, skipping insertion in model container [2022-11-19 06:51:09,248 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:51:08" (2/3) ... [2022-11-19 06:51:09,248 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6879922f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 06:51:09, skipping insertion in model container [2022-11-19 06:51:09,249 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 06:51:09" (3/3) ... [2022-11-19 06:51:09,250 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product58.cil.c [2022-11-19 06:51:09,274 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-19 06:51:09,275 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-19 06:51:09,359 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-19 06:51:09,367 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6c69f436, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-19 06:51:09,367 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-19 06:51:09,373 INFO L276 IsEmpty]: Start isEmpty. Operand has 51 states, 33 states have (on average 1.4545454545454546) internal successors, (48), 41 states have internal predecessors, (48), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2022-11-19 06:51:09,382 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-11-19 06:51:09,383 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:51:09,383 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:51:09,384 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:51:09,399 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:51:09,399 INFO L85 PathProgramCache]: Analyzing trace with hash -1497506587, now seen corresponding path program 1 times [2022-11-19 06:51:09,413 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:51:09,415 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [925398238] [2022-11-19 06:51:09,416 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:51:09,417 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:51:09,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:51:09,650 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:51:09,651 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:51:09,652 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [925398238] [2022-11-19 06:51:09,653 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [925398238] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:51:09,653 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:51:09,653 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-19 06:51:09,655 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [963419171] [2022-11-19 06:51:09,656 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:51:09,662 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-19 06:51:09,664 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:51:09,704 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-19 06:51:09,706 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-19 06:51:09,708 INFO L87 Difference]: Start difference. First operand has 51 states, 33 states have (on average 1.4545454545454546) internal successors, (48), 41 states have internal predecessors, (48), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:51:09,826 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:51:09,827 INFO L93 Difference]: Finished difference Result 100 states and 137 transitions. [2022-11-19 06:51:09,828 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-19 06:51:09,830 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-11-19 06:51:09,831 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:51:09,841 INFO L225 Difference]: With dead ends: 100 [2022-11-19 06:51:09,842 INFO L226 Difference]: Without dead ends: 46 [2022-11-19 06:51:09,846 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-19 06:51:09,849 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 48 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:51:09,850 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 48 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:51:09,871 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2022-11-19 06:51:09,899 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 46. [2022-11-19 06:51:09,901 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 30 states have (on average 1.3333333333333333) internal successors, (40), 37 states have internal predecessors, (40), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-19 06:51:09,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 59 transitions. [2022-11-19 06:51:09,907 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 59 transitions. Word has length 12 [2022-11-19 06:51:09,908 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:51:09,908 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 59 transitions. [2022-11-19 06:51:09,908 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:51:09,909 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 59 transitions. [2022-11-19 06:51:09,910 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-19 06:51:09,911 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:51:09,911 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:51:09,911 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-19 06:51:09,911 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:51:09,912 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:51:09,912 INFO L85 PathProgramCache]: Analyzing trace with hash -903472037, now seen corresponding path program 1 times [2022-11-19 06:51:09,912 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:51:09,912 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1774465933] [2022-11-19 06:51:09,912 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:51:09,913 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:51:09,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:51:10,107 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:51:10,107 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:51:10,107 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1774465933] [2022-11-19 06:51:10,108 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1774465933] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:51:10,108 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:51:10,108 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 06:51:10,108 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1972078376] [2022-11-19 06:51:10,109 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:51:10,110 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 06:51:10,110 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:51:10,111 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 06:51:10,111 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:51:10,112 INFO L87 Difference]: Start difference. First operand 46 states and 59 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:51:10,164 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:51:10,164 INFO L93 Difference]: Finished difference Result 69 states and 89 transitions. [2022-11-19 06:51:10,165 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 06:51:10,165 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-19 06:51:10,165 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:51:10,166 INFO L225 Difference]: With dead ends: 69 [2022-11-19 06:51:10,167 INFO L226 Difference]: Without dead ends: 38 [2022-11-19 06:51:10,167 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:51:10,169 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 7 mSDsluCounter, 25 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 59 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 06:51:10,170 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 59 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 06:51:10,171 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-11-19 06:51:10,176 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 38. [2022-11-19 06:51:10,176 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 25 states have (on average 1.36) internal successors, (34), 32 states have internal predecessors, (34), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-19 06:51:10,178 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 48 transitions. [2022-11-19 06:51:10,178 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 48 transitions. Word has length 13 [2022-11-19 06:51:10,178 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:51:10,178 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 48 transitions. [2022-11-19 06:51:10,179 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:51:10,179 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 48 transitions. [2022-11-19 06:51:10,180 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-19 06:51:10,180 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:51:10,180 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:51:10,180 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-19 06:51:10,181 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:51:10,181 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:51:10,181 INFO L85 PathProgramCache]: Analyzing trace with hash -1673097531, now seen corresponding path program 1 times [2022-11-19 06:51:10,182 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:51:10,182 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1356123869] [2022-11-19 06:51:10,182 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:51:10,182 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:51:10,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:51:10,394 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:51:10,395 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:51:10,395 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1356123869] [2022-11-19 06:51:10,395 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1356123869] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:51:10,397 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:51:10,398 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-19 06:51:10,398 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [720358045] [2022-11-19 06:51:10,398 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:51:10,399 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 06:51:10,400 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:51:10,400 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 06:51:10,401 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:51:10,401 INFO L87 Difference]: Start difference. First operand 38 states and 48 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:51:10,462 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:51:10,462 INFO L93 Difference]: Finished difference Result 74 states and 95 transitions. [2022-11-19 06:51:10,463 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 06:51:10,463 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-19 06:51:10,463 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:51:10,464 INFO L225 Difference]: With dead ends: 74 [2022-11-19 06:51:10,465 INFO L226 Difference]: Without dead ends: 38 [2022-11-19 06:51:10,465 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:51:10,467 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 37 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 32 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 06:51:10,468 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 32 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 06:51:10,469 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-11-19 06:51:10,476 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 38. [2022-11-19 06:51:10,477 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 25 states have (on average 1.32) internal successors, (33), 32 states have internal predecessors, (33), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-19 06:51:10,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 47 transitions. [2022-11-19 06:51:10,479 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 47 transitions. Word has length 15 [2022-11-19 06:51:10,479 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:51:10,479 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 47 transitions. [2022-11-19 06:51:10,480 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:51:10,480 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 47 transitions. [2022-11-19 06:51:10,481 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-19 06:51:10,481 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:51:10,481 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:51:10,482 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-19 06:51:10,482 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:51:10,483 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:51:10,483 INFO L85 PathProgramCache]: Analyzing trace with hash -1105785491, now seen corresponding path program 1 times [2022-11-19 06:51:10,483 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:51:10,483 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1536633511] [2022-11-19 06:51:10,484 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:51:10,484 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:51:10,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:51:11,066 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:51:11,066 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:51:11,067 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1536633511] [2022-11-19 06:51:11,067 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1536633511] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:51:11,067 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:51:11,067 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 06:51:11,068 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [252353715] [2022-11-19 06:51:11,068 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:51:11,069 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 06:51:11,070 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:51:11,071 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 06:51:11,072 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:51:11,072 INFO L87 Difference]: Start difference. First operand 38 states and 47 transitions. Second operand has 5 states, 5 states have (on average 3.4) internal successors, (17), 4 states have internal predecessors, (17), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:51:11,463 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:51:11,463 INFO L93 Difference]: Finished difference Result 170 states and 218 transitions. [2022-11-19 06:51:11,464 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-19 06:51:11,464 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 3.4) internal successors, (17), 4 states have internal predecessors, (17), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-11-19 06:51:11,465 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:51:11,474 INFO L225 Difference]: With dead ends: 170 [2022-11-19 06:51:11,474 INFO L226 Difference]: Without dead ends: 134 [2022-11-19 06:51:11,475 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-19 06:51:11,482 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 102 mSDsluCounter, 79 mSDsCounter, 0 mSdLazyCounter, 124 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 104 SdHoareTripleChecker+Valid, 136 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 124 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-19 06:51:11,487 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [104 Valid, 136 Invalid, 151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-19 06:51:11,490 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 134 states. [2022-11-19 06:51:11,535 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 134 to 111. [2022-11-19 06:51:11,535 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 111 states, 77 states have (on average 1.2987012987012987) internal successors, (100), 88 states have internal predecessors, (100), 16 states have call successors, (16), 14 states have call predecessors, (16), 17 states have return successors, (24), 16 states have call predecessors, (24), 16 states have call successors, (24) [2022-11-19 06:51:11,539 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 111 states to 111 states and 140 transitions. [2022-11-19 06:51:11,544 INFO L78 Accepts]: Start accepts. Automaton has 111 states and 140 transitions. Word has length 18 [2022-11-19 06:51:11,544 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:51:11,544 INFO L495 AbstractCegarLoop]: Abstraction has 111 states and 140 transitions. [2022-11-19 06:51:11,545 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 3.4) internal successors, (17), 4 states have internal predecessors, (17), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:51:11,545 INFO L276 IsEmpty]: Start isEmpty. Operand 111 states and 140 transitions. [2022-11-19 06:51:11,546 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-19 06:51:11,546 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:51:11,547 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:51:11,547 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-19 06:51:11,547 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:51:11,548 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:51:11,548 INFO L85 PathProgramCache]: Analyzing trace with hash 1419149477, now seen corresponding path program 1 times [2022-11-19 06:51:11,548 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:51:11,548 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1134099265] [2022-11-19 06:51:11,549 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:51:11,549 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:51:11,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:51:11,703 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:51:11,704 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:51:11,704 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1134099265] [2022-11-19 06:51:11,704 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1134099265] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:51:11,705 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:51:11,705 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-19 06:51:11,705 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1911469739] [2022-11-19 06:51:11,707 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:51:11,707 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 06:51:11,708 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:51:11,709 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 06:51:11,713 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:51:11,713 INFO L87 Difference]: Start difference. First operand 111 states and 140 transitions. Second operand has 5 states, 5 states have (on average 4.0) internal successors, (20), 5 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 06:51:11,930 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:51:11,930 INFO L93 Difference]: Finished difference Result 319 states and 429 transitions. [2022-11-19 06:51:11,931 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 06:51:11,932 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.0) internal successors, (20), 5 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-11-19 06:51:11,934 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:51:11,943 INFO L225 Difference]: With dead ends: 319 [2022-11-19 06:51:11,943 INFO L226 Difference]: Without dead ends: 210 [2022-11-19 06:51:11,944 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-19 06:51:11,946 INFO L413 NwaCegarLoop]: 47 mSDtfsCounter, 66 mSDsluCounter, 121 mSDsCounter, 0 mSdLazyCounter, 86 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 168 SdHoareTripleChecker+Invalid, 96 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 86 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:51:11,946 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 168 Invalid, 96 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 86 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:51:11,947 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 210 states. [2022-11-19 06:51:12,013 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 180. [2022-11-19 06:51:12,018 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 180 states, 127 states have (on average 1.2519685039370079) internal successors, (159), 139 states have internal predecessors, (159), 23 states have call successors, (23), 22 states have call predecessors, (23), 29 states have return successors, (45), 27 states have call predecessors, (45), 23 states have call successors, (45) [2022-11-19 06:51:12,026 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 180 states to 180 states and 227 transitions. [2022-11-19 06:51:12,026 INFO L78 Accepts]: Start accepts. Automaton has 180 states and 227 transitions. Word has length 23 [2022-11-19 06:51:12,027 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:51:12,028 INFO L495 AbstractCegarLoop]: Abstraction has 180 states and 227 transitions. [2022-11-19 06:51:12,028 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.0) internal successors, (20), 5 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 06:51:12,029 INFO L276 IsEmpty]: Start isEmpty. Operand 180 states and 227 transitions. [2022-11-19 06:51:12,031 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-19 06:51:12,035 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:51:12,035 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:51:12,036 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-19 06:51:12,036 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:51:12,037 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:51:12,037 INFO L85 PathProgramCache]: Analyzing trace with hash 355769214, now seen corresponding path program 1 times [2022-11-19 06:51:12,037 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:51:12,037 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1018966981] [2022-11-19 06:51:12,037 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:51:12,038 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:51:12,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:51:12,312 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:51:12,312 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:51:12,313 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1018966981] [2022-11-19 06:51:12,313 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1018966981] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:51:12,314 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:51:12,314 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-19 06:51:12,314 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [137580282] [2022-11-19 06:51:12,314 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:51:12,315 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-19 06:51:12,316 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:51:12,316 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-19 06:51:12,316 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2022-11-19 06:51:12,317 INFO L87 Difference]: Start difference. First operand 180 states and 227 transitions. Second operand has 8 states, 7 states have (on average 3.0) internal successors, (21), 7 states have internal predecessors, (21), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-19 06:51:12,895 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:51:12,895 INFO L93 Difference]: Finished difference Result 521 states and 693 transitions. [2022-11-19 06:51:12,896 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-19 06:51:12,896 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.0) internal successors, (21), 7 states have internal predecessors, (21), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 26 [2022-11-19 06:51:12,896 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:51:12,899 INFO L225 Difference]: With dead ends: 521 [2022-11-19 06:51:12,899 INFO L226 Difference]: Without dead ends: 380 [2022-11-19 06:51:12,901 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-11-19 06:51:12,902 INFO L413 NwaCegarLoop]: 43 mSDtfsCounter, 155 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 256 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 158 SdHoareTripleChecker+Valid, 161 SdHoareTripleChecker+Invalid, 337 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 256 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-19 06:51:12,903 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [158 Valid, 161 Invalid, 337 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 256 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-19 06:51:12,904 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 380 states. [2022-11-19 06:51:13,022 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 380 to 366. [2022-11-19 06:51:13,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 366 states, 258 states have (on average 1.248062015503876) internal successors, (322), 282 states have internal predecessors, (322), 48 states have call successors, (48), 45 states have call predecessors, (48), 59 states have return successors, (112), 55 states have call predecessors, (112), 48 states have call successors, (112) [2022-11-19 06:51:13,028 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 366 states to 366 states and 482 transitions. [2022-11-19 06:51:13,029 INFO L78 Accepts]: Start accepts. Automaton has 366 states and 482 transitions. Word has length 26 [2022-11-19 06:51:13,030 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:51:13,030 INFO L495 AbstractCegarLoop]: Abstraction has 366 states and 482 transitions. [2022-11-19 06:51:13,030 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.0) internal successors, (21), 7 states have internal predecessors, (21), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-19 06:51:13,030 INFO L276 IsEmpty]: Start isEmpty. Operand 366 states and 482 transitions. [2022-11-19 06:51:13,033 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-19 06:51:13,033 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:51:13,033 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:51:13,034 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-19 06:51:13,034 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:51:13,035 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:51:13,035 INFO L85 PathProgramCache]: Analyzing trace with hash -874326473, now seen corresponding path program 1 times [2022-11-19 06:51:13,035 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:51:13,037 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1102120275] [2022-11-19 06:51:13,038 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:51:13,038 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:51:13,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:51:13,381 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:51:13,381 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:51:13,381 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1102120275] [2022-11-19 06:51:13,382 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1102120275] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:51:13,382 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:51:13,382 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-19 06:51:13,382 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1450380819] [2022-11-19 06:51:13,382 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:51:13,383 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-19 06:51:13,383 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:51:13,383 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-19 06:51:13,384 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=50, Unknown=0, NotChecked=0, Total=72 [2022-11-19 06:51:13,385 INFO L87 Difference]: Start difference. First operand 366 states and 482 transitions. Second operand has 9 states, 8 states have (on average 2.75) internal successors, (22), 8 states have internal predecessors, (22), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-19 06:51:14,096 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:51:14,096 INFO L93 Difference]: Finished difference Result 945 states and 1316 transitions. [2022-11-19 06:51:14,097 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-19 06:51:14,097 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 2.75) internal successors, (22), 8 states have internal predecessors, (22), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Word has length 29 [2022-11-19 06:51:14,097 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:51:14,103 INFO L225 Difference]: With dead ends: 945 [2022-11-19 06:51:14,103 INFO L226 Difference]: Without dead ends: 681 [2022-11-19 06:51:14,105 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=71, Invalid=169, Unknown=0, NotChecked=0, Total=240 [2022-11-19 06:51:14,106 INFO L413 NwaCegarLoop]: 45 mSDtfsCounter, 132 mSDsluCounter, 151 mSDsCounter, 0 mSdLazyCounter, 331 mSolverCounterSat, 71 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 196 SdHoareTripleChecker+Invalid, 402 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 71 IncrementalHoareTripleChecker+Valid, 331 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-19 06:51:14,106 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [136 Valid, 196 Invalid, 402 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [71 Valid, 331 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-19 06:51:14,108 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 681 states. [2022-11-19 06:51:14,271 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 681 to 558. [2022-11-19 06:51:14,273 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 558 states, 395 states have (on average 1.220253164556962) internal successors, (482), 425 states have internal predecessors, (482), 69 states have call successors, (69), 65 states have call predecessors, (69), 93 states have return successors, (169), 88 states have call predecessors, (169), 69 states have call successors, (169) [2022-11-19 06:51:14,278 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 558 states to 558 states and 720 transitions. [2022-11-19 06:51:14,278 INFO L78 Accepts]: Start accepts. Automaton has 558 states and 720 transitions. Word has length 29 [2022-11-19 06:51:14,279 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:51:14,279 INFO L495 AbstractCegarLoop]: Abstraction has 558 states and 720 transitions. [2022-11-19 06:51:14,279 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 2.75) internal successors, (22), 8 states have internal predecessors, (22), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-19 06:51:14,280 INFO L276 IsEmpty]: Start isEmpty. Operand 558 states and 720 transitions. [2022-11-19 06:51:14,282 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-19 06:51:14,283 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:51:14,283 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:51:14,283 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-19 06:51:14,284 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:51:14,284 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:51:14,284 INFO L85 PathProgramCache]: Analyzing trace with hash -904725257, now seen corresponding path program 1 times [2022-11-19 06:51:14,285 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:51:14,285 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [174703525] [2022-11-19 06:51:14,285 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:51:14,285 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:51:14,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:51:14,606 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:51:14,607 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:51:14,607 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [174703525] [2022-11-19 06:51:14,607 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [174703525] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:51:14,607 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:51:14,609 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-19 06:51:14,612 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [339494803] [2022-11-19 06:51:14,612 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:51:14,613 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-19 06:51:14,613 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:51:14,614 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-19 06:51:14,615 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=46, Unknown=0, NotChecked=0, Total=72 [2022-11-19 06:51:14,615 INFO L87 Difference]: Start difference. First operand 558 states and 720 transitions. Second operand has 9 states, 8 states have (on average 4.375) internal successors, (35), 8 states have internal predecessors, (35), 3 states have call successors, (4), 3 states have call predecessors, (4), 3 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-19 06:51:14,964 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:51:14,964 INFO L93 Difference]: Finished difference Result 1073 states and 1407 transitions. [2022-11-19 06:51:14,965 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-19 06:51:14,965 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 4.375) internal successors, (35), 8 states have internal predecessors, (35), 3 states have call successors, (4), 3 states have call predecessors, (4), 3 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 42 [2022-11-19 06:51:14,965 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:51:14,969 INFO L225 Difference]: With dead ends: 1073 [2022-11-19 06:51:14,969 INFO L226 Difference]: Without dead ends: 577 [2022-11-19 06:51:14,971 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=71, Unknown=0, NotChecked=0, Total=110 [2022-11-19 06:51:14,972 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 159 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 128 mSolverCounterSat, 70 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 165 SdHoareTripleChecker+Valid, 89 SdHoareTripleChecker+Invalid, 198 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 70 IncrementalHoareTripleChecker+Valid, 128 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-19 06:51:14,972 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [165 Valid, 89 Invalid, 198 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [70 Valid, 128 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-19 06:51:14,973 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 577 states. [2022-11-19 06:51:15,085 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 577 to 517. [2022-11-19 06:51:15,087 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 517 states, 368 states have (on average 1.2173913043478262) internal successors, (448), 394 states have internal predecessors, (448), 62 states have call successors, (62), 58 states have call predecessors, (62), 86 states have return successors, (154), 81 states have call predecessors, (154), 62 states have call successors, (154) [2022-11-19 06:51:15,090 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 517 states to 517 states and 664 transitions. [2022-11-19 06:51:15,090 INFO L78 Accepts]: Start accepts. Automaton has 517 states and 664 transitions. Word has length 42 [2022-11-19 06:51:15,091 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:51:15,091 INFO L495 AbstractCegarLoop]: Abstraction has 517 states and 664 transitions. [2022-11-19 06:51:15,091 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 4.375) internal successors, (35), 8 states have internal predecessors, (35), 3 states have call successors, (4), 3 states have call predecessors, (4), 3 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-19 06:51:15,091 INFO L276 IsEmpty]: Start isEmpty. Operand 517 states and 664 transitions. [2022-11-19 06:51:15,093 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-19 06:51:15,093 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:51:15,093 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:51:15,093 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-19 06:51:15,093 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:51:15,094 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:51:15,094 INFO L85 PathProgramCache]: Analyzing trace with hash 317890339, now seen corresponding path program 2 times [2022-11-19 06:51:15,094 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:51:15,094 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1221630851] [2022-11-19 06:51:15,094 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:51:15,095 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:51:15,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:51:15,447 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 06:51:15,447 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:51:15,447 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1221630851] [2022-11-19 06:51:15,448 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1221630851] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:51:15,448 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1993349601] [2022-11-19 06:51:15,448 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-19 06:51:15,448 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:51:15,449 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:51:15,455 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:51:15,487 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-19 06:51:15,566 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2022-11-19 06:51:15,566 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 06:51:15,568 INFO L263 TraceCheckSpWp]: Trace formula consists of 170 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-19 06:51:15,574 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:51:15,656 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-19 06:51:15,656 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:51:15,656 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1993349601] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:51:15,657 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 06:51:15,657 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [11] total 13 [2022-11-19 06:51:15,657 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [998498556] [2022-11-19 06:51:15,657 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:51:15,658 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 06:51:15,658 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:51:15,658 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 06:51:15,658 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=123, Unknown=0, NotChecked=0, Total=156 [2022-11-19 06:51:15,659 INFO L87 Difference]: Start difference. First operand 517 states and 664 transitions. Second operand has 4 states, 4 states have (on average 7.0) internal successors, (28), 4 states have internal predecessors, (28), 1 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-19 06:51:15,796 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:51:15,796 INFO L93 Difference]: Finished difference Result 954 states and 1273 transitions. [2022-11-19 06:51:15,797 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 06:51:15,797 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.0) internal successors, (28), 4 states have internal predecessors, (28), 1 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 42 [2022-11-19 06:51:15,798 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:51:15,801 INFO L225 Difference]: With dead ends: 954 [2022-11-19 06:51:15,801 INFO L226 Difference]: Without dead ends: 485 [2022-11-19 06:51:15,803 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 57 GetRequests, 45 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 36 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=144, Unknown=0, NotChecked=0, Total=182 [2022-11-19 06:51:15,806 INFO L413 NwaCegarLoop]: 38 mSDtfsCounter, 38 mSDsluCounter, 67 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 51 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 06:51:15,806 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 105 Invalid, 51 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 06:51:15,808 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 485 states. [2022-11-19 06:51:15,888 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 485 to 437. [2022-11-19 06:51:15,890 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 437 states, 308 states have (on average 1.1915584415584415) internal successors, (367), 332 states have internal predecessors, (367), 57 states have call successors, (57), 55 states have call predecessors, (57), 71 states have return successors, (115), 67 states have call predecessors, (115), 57 states have call successors, (115) [2022-11-19 06:51:15,892 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 437 states to 437 states and 539 transitions. [2022-11-19 06:51:15,893 INFO L78 Accepts]: Start accepts. Automaton has 437 states and 539 transitions. Word has length 42 [2022-11-19 06:51:15,897 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:51:15,897 INFO L495 AbstractCegarLoop]: Abstraction has 437 states and 539 transitions. [2022-11-19 06:51:15,897 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.0) internal successors, (28), 4 states have internal predecessors, (28), 1 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-19 06:51:15,897 INFO L276 IsEmpty]: Start isEmpty. Operand 437 states and 539 transitions. [2022-11-19 06:51:15,900 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-19 06:51:15,900 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:51:15,901 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:51:15,915 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-19 06:51:16,107 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:51:16,107 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:51:16,107 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:51:16,108 INFO L85 PathProgramCache]: Analyzing trace with hash -940303233, now seen corresponding path program 1 times [2022-11-19 06:51:16,108 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:51:16,108 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1368004121] [2022-11-19 06:51:16,108 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:51:16,108 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:51:16,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:51:16,585 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 3 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:51:16,585 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:51:16,585 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1368004121] [2022-11-19 06:51:16,585 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1368004121] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:51:16,585 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1328325043] [2022-11-19 06:51:16,586 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:51:16,586 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:51:16,586 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:51:16,587 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:51:16,611 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-19 06:51:16,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:51:16,707 INFO L263 TraceCheckSpWp]: Trace formula consists of 272 conjuncts, 29 conjunts are in the unsatisfiable core [2022-11-19 06:51:16,711 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:51:17,052 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 5 proven. 11 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-19 06:51:17,052 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 06:51:17,520 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-19 06:51:17,520 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1328325043] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 06:51:17,521 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [710838757] [2022-11-19 06:51:17,551 INFO L159 IcfgInterpreter]: Started Sifa with 32 locations of interest [2022-11-19 06:51:17,551 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 06:51:17,559 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 06:51:17,566 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 06:51:17,567 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 06:51:24,576 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 139 for LOIs [2022-11-19 06:51:24,609 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 52 for LOIs [2022-11-19 06:51:24,896 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 24 for LOIs [2022-11-19 06:51:25,039 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 25 for LOIs [2022-11-19 06:51:25,040 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 06:51:30,958 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11161#(and (= |timeShift_getWaterLevel_~retValue_acc~4#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_getWaterLevel_~retValue_acc~4#1| ~waterLevel~0) (<= ~pumpRunning~0 1) (= ~methaneLevelCritical~0 0) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)) (= ~head~0.offset 0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~11#1|) (= 1 ~systemActive~0) (= |old(~pumpRunning~0)| 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~11#1|) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| |timeShift_getWaterLevel_#res#1|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1|) (<= 0 ~pumpRunning~0) (= ~head~0.base 0) (= |#NULL.offset| 0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| 0) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-19 06:51:30,958 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 06:51:30,958 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 06:51:30,958 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 9, 9] total 25 [2022-11-19 06:51:30,958 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1783862125] [2022-11-19 06:51:30,959 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 06:51:30,959 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-11-19 06:51:30,959 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:51:30,960 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-11-19 06:51:30,961 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=271, Invalid=1985, Unknown=0, NotChecked=0, Total=2256 [2022-11-19 06:51:30,962 INFO L87 Difference]: Start difference. First operand 437 states and 539 transitions. Second operand has 25 states, 22 states have (on average 4.0) internal successors, (88), 24 states have internal predecessors, (88), 12 states have call successors, (16), 8 states have call predecessors, (16), 9 states have return successors, (14), 12 states have call predecessors, (14), 11 states have call successors, (14) [2022-11-19 06:51:37,793 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:51:37,793 INFO L93 Difference]: Finished difference Result 1867 states and 2669 transitions. [2022-11-19 06:51:37,794 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 91 states. [2022-11-19 06:51:37,794 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 22 states have (on average 4.0) internal successors, (88), 24 states have internal predecessors, (88), 12 states have call successors, (16), 8 states have call predecessors, (16), 9 states have return successors, (14), 12 states have call predecessors, (14), 11 states have call successors, (14) Word has length 50 [2022-11-19 06:51:37,795 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:51:37,805 INFO L225 Difference]: With dead ends: 1867 [2022-11-19 06:51:37,806 INFO L226 Difference]: Without dead ends: 1462 [2022-11-19 06:51:37,812 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 260 GetRequests, 130 SyntacticMatches, 4 SemanticMatches, 126 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5980 ImplicationChecksByTransitivity, 9.5s TimeCoverageRelationStatistics Valid=2152, Invalid=14104, Unknown=0, NotChecked=0, Total=16256 [2022-11-19 06:51:37,813 INFO L413 NwaCegarLoop]: 106 mSDtfsCounter, 1093 mSDsluCounter, 976 mSDsCounter, 0 mSdLazyCounter, 2843 mSolverCounterSat, 1070 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1100 SdHoareTripleChecker+Valid, 1082 SdHoareTripleChecker+Invalid, 3913 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1070 IncrementalHoareTripleChecker+Valid, 2843 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.0s IncrementalHoareTripleChecker+Time [2022-11-19 06:51:37,815 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1100 Valid, 1082 Invalid, 3913 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1070 Valid, 2843 Invalid, 0 Unknown, 0 Unchecked, 3.0s Time] [2022-11-19 06:51:37,817 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1462 states. [2022-11-19 06:51:38,004 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1462 to 894. [2022-11-19 06:51:38,007 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 894 states, 631 states have (on average 1.196513470681458) internal successors, (755), 696 states have internal predecessors, (755), 126 states have call successors, (126), 106 states have call predecessors, (126), 136 states have return successors, (257), 139 states have call predecessors, (257), 126 states have call successors, (257) [2022-11-19 06:51:38,014 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 894 states to 894 states and 1138 transitions. [2022-11-19 06:51:38,015 INFO L78 Accepts]: Start accepts. Automaton has 894 states and 1138 transitions. Word has length 50 [2022-11-19 06:51:38,015 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:51:38,015 INFO L495 AbstractCegarLoop]: Abstraction has 894 states and 1138 transitions. [2022-11-19 06:51:38,016 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 22 states have (on average 4.0) internal successors, (88), 24 states have internal predecessors, (88), 12 states have call successors, (16), 8 states have call predecessors, (16), 9 states have return successors, (14), 12 states have call predecessors, (14), 11 states have call successors, (14) [2022-11-19 06:51:38,016 INFO L276 IsEmpty]: Start isEmpty. Operand 894 states and 1138 transitions. [2022-11-19 06:51:38,018 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2022-11-19 06:51:38,018 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:51:38,018 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:51:38,040 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-19 06:51:38,227 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-19 06:51:38,228 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:51:38,229 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:51:38,229 INFO L85 PathProgramCache]: Analyzing trace with hash 1352416078, now seen corresponding path program 1 times [2022-11-19 06:51:38,229 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:51:38,229 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [487072465] [2022-11-19 06:51:38,229 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:51:38,230 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:51:38,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:51:38,947 INFO L134 CoverageAnalysis]: Checked inductivity of 58 backedges. 28 proven. 10 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-11-19 06:51:38,948 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:51:38,948 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [487072465] [2022-11-19 06:51:38,948 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [487072465] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:51:38,948 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [63595002] [2022-11-19 06:51:38,949 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:51:38,949 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:51:38,949 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:51:38,950 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:51:38,981 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-19 06:51:39,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:51:39,094 INFO L263 TraceCheckSpWp]: Trace formula consists of 349 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-19 06:51:39,097 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:51:39,287 INFO L134 CoverageAnalysis]: Checked inductivity of 58 backedges. 48 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-19 06:51:39,287 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:51:39,288 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [63595002] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:51:39,288 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 06:51:39,288 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [12] total 15 [2022-11-19 06:51:39,288 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [802765314] [2022-11-19 06:51:39,289 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:51:39,289 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 06:51:39,289 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:51:39,290 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 06:51:39,290 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=172, Unknown=0, NotChecked=0, Total=210 [2022-11-19 06:51:39,291 INFO L87 Difference]: Start difference. First operand 894 states and 1138 transitions. Second operand has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-11-19 06:51:39,636 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:51:39,636 INFO L93 Difference]: Finished difference Result 1589 states and 2024 transitions. [2022-11-19 06:51:39,637 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-19 06:51:39,637 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 74 [2022-11-19 06:51:39,637 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:51:39,641 INFO L225 Difference]: With dead ends: 1589 [2022-11-19 06:51:39,642 INFO L226 Difference]: Without dead ends: 666 [2022-11-19 06:51:39,645 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 98 GetRequests, 81 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=58, Invalid=284, Unknown=0, NotChecked=0, Total=342 [2022-11-19 06:51:39,646 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 54 mSDsluCounter, 127 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 187 SdHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:51:39,646 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 187 Invalid, 128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:51:39,648 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 666 states. [2022-11-19 06:51:39,756 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 666 to 575. [2022-11-19 06:51:39,757 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 575 states, 410 states have (on average 1.1853658536585365) internal successors, (486), 448 states have internal predecessors, (486), 74 states have call successors, (74), 73 states have call predecessors, (74), 90 states have return successors, (119), 82 states have call predecessors, (119), 74 states have call successors, (119) [2022-11-19 06:51:39,760 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 575 states to 575 states and 679 transitions. [2022-11-19 06:51:39,761 INFO L78 Accepts]: Start accepts. Automaton has 575 states and 679 transitions. Word has length 74 [2022-11-19 06:51:39,761 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:51:39,761 INFO L495 AbstractCegarLoop]: Abstraction has 575 states and 679 transitions. [2022-11-19 06:51:39,762 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-11-19 06:51:39,762 INFO L276 IsEmpty]: Start isEmpty. Operand 575 states and 679 transitions. [2022-11-19 06:51:39,763 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2022-11-19 06:51:39,763 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:51:39,763 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:51:39,776 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-19 06:51:39,970 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-19 06:51:39,972 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:51:39,972 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:51:39,972 INFO L85 PathProgramCache]: Analyzing trace with hash 1539431954, now seen corresponding path program 1 times [2022-11-19 06:51:39,973 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:51:39,973 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [919307065] [2022-11-19 06:51:39,973 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:51:39,973 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:51:39,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:51:40,984 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 45 proven. 41 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-19 06:51:40,984 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:51:40,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [919307065] [2022-11-19 06:51:40,985 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [919307065] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:51:40,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [326734469] [2022-11-19 06:51:40,985 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:51:40,985 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:51:40,986 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:51:40,987 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:51:41,003 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-19 06:51:41,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:51:41,147 INFO L263 TraceCheckSpWp]: Trace formula consists of 420 conjuncts, 43 conjunts are in the unsatisfiable core [2022-11-19 06:51:41,155 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:51:41,796 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 51 proven. 36 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-19 06:51:41,797 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 06:51:42,824 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 62 proven. 21 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-19 06:51:42,824 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [326734469] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 06:51:42,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1178840767] [2022-11-19 06:51:42,828 INFO L159 IcfgInterpreter]: Started Sifa with 34 locations of interest [2022-11-19 06:51:42,828 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 06:51:42,828 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 06:51:42,829 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 06:51:42,829 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 06:51:45,021 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 23 for LOIs [2022-11-19 06:51:45,025 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 26 for LOIs [2022-11-19 06:51:45,319 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 59 for LOIs [2022-11-19 06:51:45,587 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 33 for LOIs [2022-11-19 06:51:45,589 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 06:51:50,381 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '20102#(and (<= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483647) (= |timeShift_getWaterLevel_~retValue_acc~4#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_getWaterLevel_~retValue_acc~4#1| ~waterLevel~0) (<= 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483648)) (= ~methaneLevelCritical~0 0) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)) (= ~head~0.offset 0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~11#1|) (= 1 ~systemActive~0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~11#1|) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1|) (= ~head~0.base 0) (= |#NULL.offset| 0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| 0) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-19 06:51:50,381 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 06:51:50,381 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 06:51:50,381 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 14, 14] total 35 [2022-11-19 06:51:50,382 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1893209315] [2022-11-19 06:51:50,382 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 06:51:50,382 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-11-19 06:51:50,382 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:51:50,383 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-11-19 06:51:50,384 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=444, Invalid=2978, Unknown=0, NotChecked=0, Total=3422 [2022-11-19 06:51:50,385 INFO L87 Difference]: Start difference. First operand 575 states and 679 transitions. Second operand has 35 states, 33 states have (on average 3.9696969696969697) internal successors, (131), 33 states have internal predecessors, (131), 12 states have call successors, (18), 8 states have call predecessors, (18), 13 states have return successors, (20), 12 states have call predecessors, (20), 12 states have call successors, (20) [2022-11-19 06:51:51,679 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:51:51,679 INFO L93 Difference]: Finished difference Result 649 states and 768 transitions. [2022-11-19 06:51:51,680 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-19 06:51:51,680 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 33 states have (on average 3.9696969696969697) internal successors, (131), 33 states have internal predecessors, (131), 12 states have call successors, (18), 8 states have call predecessors, (18), 13 states have return successors, (20), 12 states have call predecessors, (20), 12 states have call successors, (20) Word has length 87 [2022-11-19 06:51:51,680 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:51:51,681 INFO L225 Difference]: With dead ends: 649 [2022-11-19 06:51:51,681 INFO L226 Difference]: Without dead ends: 0 [2022-11-19 06:51:51,686 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 296 GetRequests, 214 SyntacticMatches, 10 SemanticMatches, 72 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2481 ImplicationChecksByTransitivity, 6.2s TimeCoverageRelationStatistics Valid=782, Invalid=4620, Unknown=0, NotChecked=0, Total=5402 [2022-11-19 06:51:51,687 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 486 mSDsluCounter, 196 mSDsCounter, 0 mSdLazyCounter, 500 mSolverCounterSat, 310 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 487 SdHoareTripleChecker+Valid, 224 SdHoareTripleChecker+Invalid, 810 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 310 IncrementalHoareTripleChecker+Valid, 500 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-19 06:51:51,688 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [487 Valid, 224 Invalid, 810 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [310 Valid, 500 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-19 06:51:51,689 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-19 06:51:51,689 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-19 06:51:51,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:51:51,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-19 06:51:51,690 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 87 [2022-11-19 06:51:51,690 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:51:51,690 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-19 06:51:51,691 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 33 states have (on average 3.9696969696969697) internal successors, (131), 33 states have internal predecessors, (131), 12 states have call successors, (18), 8 states have call predecessors, (18), 13 states have return successors, (20), 12 states have call predecessors, (20), 12 states have call successors, (20) [2022-11-19 06:51:51,691 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-19 06:51:51,691 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-19 06:51:51,694 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-19 06:51:51,708 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-19 06:51:51,908 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:51:51,910 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-19 06:51:57,391 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 731 737) no Hoare annotation was computed. [2022-11-19 06:51:57,391 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 731 737) the Hoare annotation is: true [2022-11-19 06:51:57,392 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 487 498) the Hoare annotation is: true [2022-11-19 06:51:57,392 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 487 498) no Hoare annotation was computed. [2022-11-19 06:51:57,392 INFO L895 garLoopResultBuilder]: At program point L779(line 779) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~waterLevel~0)| 1)) .cse0) (or .cse0 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-19 06:51:57,393 INFO L895 garLoopResultBuilder]: At program point L449(line 449) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~waterLevel~0)| 1)) .cse0) (or .cse0 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-19 06:51:57,393 INFO L895 garLoopResultBuilder]: At program point L784(line 784) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (and .cse1 (= ~waterLevel~0 1))))) [2022-11-19 06:51:57,393 INFO L895 garLoopResultBuilder]: At program point L784-1(lines 765 789) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~waterLevel~0 1))) (and (or (and .cse0 .cse1 (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse2) .cse3 (= |old(~waterLevel~0)| ~waterLevel~0) (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3 (and .cse1 .cse2)))) [2022-11-19 06:51:57,394 INFO L895 garLoopResultBuilder]: At program point L718-1(lines 718 724) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~waterLevel~0 1))) (and (or (and .cse0 .cse1 (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse2) .cse3 (= |old(~waterLevel~0)| ~waterLevel~0) (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3 (and .cse1 .cse2)))) [2022-11-19 06:51:57,394 INFO L899 garLoopResultBuilder]: For program point L711-1(lines 710 729) no Hoare annotation was computed. [2022-11-19 06:51:57,394 INFO L895 garLoopResultBuilder]: At program point L773(lines 773 781) the Hoare annotation is: (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0)))) (let ((.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (and (or .cse4 .cse2) (or (and .cse3 (or (not (< 0 (+ |old(~waterLevel~0)| 1))) (not (<= |old(~waterLevel~0)| 0)))) .cse2)))) (and (or (< |old(~waterLevel~0)| 2) .cse0 .cse1) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (= ~waterLevel~0 1)) .cse2 .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse4 .cse0)))) [2022-11-19 06:51:57,395 INFO L895 garLoopResultBuilder]: At program point L769(lines 769 786) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (and .cse1 (= ~waterLevel~0 1))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (and (not .cse1) (= |old(~waterLevel~0)| (+ ~waterLevel~0 1))))) (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-19 06:51:57,395 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 707 730) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0)) (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-19 06:51:57,395 INFO L899 garLoopResultBuilder]: For program point L431(lines 431 437) no Hoare annotation was computed. [2022-11-19 06:51:57,396 INFO L895 garLoopResultBuilder]: At program point L427(lines 427 440) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~waterLevel~0 1)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| 1) .cse2 .cse3)) (or (and .cse0 .cse2 (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| 0)) .cse3) .cse1 (and (= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|) (= |old(~waterLevel~0)| ~waterLevel~0)) (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-19 06:51:57,396 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 707 730) no Hoare annotation was computed. [2022-11-19 06:51:57,396 INFO L895 garLoopResultBuilder]: At program point L427-1(lines 419 443) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~waterLevel~0 1)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| 1) .cse2 .cse3)) (or (and .cse0 .cse2 (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| 0)) .cse3) .cse1 (and (= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|) (= |old(~waterLevel~0)| ~waterLevel~0)) (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-19 06:51:57,396 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 449) no Hoare annotation was computed. [2022-11-19 06:51:57,397 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 566 595) no Hoare annotation was computed. [2022-11-19 06:51:57,397 INFO L902 garLoopResultBuilder]: At program point L576-2(lines 576 590) the Hoare annotation is: true [2022-11-19 06:51:57,397 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 566 595) the Hoare annotation is: true [2022-11-19 06:51:57,397 INFO L902 garLoopResultBuilder]: At program point L572(line 572) the Hoare annotation is: true [2022-11-19 06:51:57,397 INFO L899 garLoopResultBuilder]: For program point L572-1(line 572) no Hoare annotation was computed. [2022-11-19 06:51:57,397 INFO L902 garLoopResultBuilder]: At program point L591(lines 566 595) the Hoare annotation is: true [2022-11-19 06:51:57,398 INFO L899 garLoopResultBuilder]: For program point L587(line 587) no Hoare annotation was computed. [2022-11-19 06:51:57,398 INFO L899 garLoopResultBuilder]: For program point L580(lines 580 584) no Hoare annotation was computed. [2022-11-19 06:51:57,398 INFO L902 garLoopResultBuilder]: At program point L580-1(lines 580 584) the Hoare annotation is: true [2022-11-19 06:51:57,398 INFO L895 garLoopResultBuilder]: At program point L985(lines 936 986) the Hoare annotation is: false [2022-11-19 06:51:57,398 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-19 06:51:57,399 INFO L899 garLoopResultBuilder]: For program point L957(lines 957 963) no Hoare annotation was computed. [2022-11-19 06:51:57,399 INFO L895 garLoopResultBuilder]: At program point L957-1(lines 957 963) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1)))) [2022-11-19 06:51:57,399 INFO L895 garLoopResultBuilder]: At program point L982(lines 937 984) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1)))) [2022-11-19 06:51:57,399 INFO L895 garLoopResultBuilder]: At program point L949(line 949) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1)))) [2022-11-19 06:51:57,400 INFO L895 garLoopResultBuilder]: At program point L652(lines 652 659) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_main_~tmp~4#1| 1) (= ~waterLevel~0 1)) [2022-11-19 06:51:57,400 INFO L902 garLoopResultBuilder]: At program point L652-2(lines 652 659) the Hoare annotation is: true [2022-11-19 06:51:57,400 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-19 06:51:57,400 INFO L895 garLoopResultBuilder]: At program point L975-2(lines 967 980) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1)))) [2022-11-19 06:51:57,400 INFO L899 garLoopResultBuilder]: For program point L938(lines 937 984) no Hoare annotation was computed. [2022-11-19 06:51:57,401 INFO L895 garLoopResultBuilder]: At program point L959(line 959) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1)))) [2022-11-19 06:51:57,401 INFO L902 garLoopResultBuilder]: At program point L988(lines 927 992) the Hoare annotation is: true [2022-11-19 06:51:57,401 INFO L899 garLoopResultBuilder]: For program point L947(lines 947 953) no Hoare annotation was computed. [2022-11-19 06:51:57,401 INFO L899 garLoopResultBuilder]: For program point L947-1(lines 947 953) no Hoare annotation was computed. [2022-11-19 06:51:57,402 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 739 763) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (and (not (= |old(~pumpRunning~0)| 0)) (or (not (<= ~waterLevel~0 0)) (not (< 0 (+ ~waterLevel~0 1))))))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2))) [2022-11-19 06:51:57,402 INFO L895 garLoopResultBuilder]: At program point L758(line 758) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0))) (or (not (= ~waterLevel~0 1)) .cse0 .cse1))) [2022-11-19 06:51:57,402 INFO L899 garLoopResultBuilder]: For program point L758-1(lines 739 763) no Hoare annotation was computed. [2022-11-19 06:51:57,402 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 739 763) no Hoare annotation was computed. [2022-11-19 06:51:57,402 INFO L895 garLoopResultBuilder]: At program point L753(line 753) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0))) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0))))) [2022-11-19 06:51:57,403 INFO L895 garLoopResultBuilder]: At program point L747(lines 747 755) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 1))) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0))))) [2022-11-19 06:51:57,403 INFO L895 garLoopResultBuilder]: At program point L743(lines 743 760) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (and (not (= |old(~pumpRunning~0)| 0)) (or (not (<= ~waterLevel~0 0)) (not (< 0 (+ ~waterLevel~0 1))))))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2))) [2022-11-19 06:51:57,403 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 475 486) no Hoare annotation was computed. [2022-11-19 06:51:57,403 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 475 486) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (or (not (= ~pumpRunning~0 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (= ~waterLevel~0 1)))) [2022-11-19 06:51:57,407 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:51:57,410 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-19 06:51:57,436 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 06:51:57 BoogieIcfgContainer [2022-11-19 06:51:57,437 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-19 06:51:57,437 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-19 06:51:57,438 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-19 06:51:57,438 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-19 06:51:57,438 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 06:51:09" (3/4) ... [2022-11-19 06:51:57,442 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-19 06:51:57,449 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-19 06:51:57,449 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-19 06:51:57,449 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-19 06:51:57,450 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-19 06:51:57,450 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 06:51:57,450 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-19 06:51:57,458 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2022-11-19 06:51:57,459 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 14 nodes and edges [2022-11-19 06:51:57,460 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-19 06:51:57,460 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-19 06:51:57,461 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-19 06:51:57,492 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-11-19 06:51:57,492 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) && waterLevel == 1) || !(1 == systemActive)) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) [2022-11-19 06:51:57,493 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && ((pumpRunning == 0 && \old(waterLevel) == waterLevel) || (!(pumpRunning == 0) && \old(waterLevel) == waterLevel + 1)))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-11-19 06:51:57,493 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) && waterLevel == 1) || !(1 == systemActive)) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) [2022-11-19 06:51:57,494 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(waterLevel == 1) || pumpRunning == 0) || !(1 == systemActive)) || (!(\old(pumpRunning) == 0) && (!(waterLevel <= 0) || !(0 < waterLevel + 1)))) && (((pumpRunning == 0 || !(1 == systemActive)) || !(2 == waterLevel)) || (!(\old(pumpRunning) == 0) && (!(waterLevel <= 0) || !(0 < waterLevel + 1)))) [2022-11-19 06:51:57,495 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((tmp == 1 && pumpRunning == 0) && waterLevel == 1)) && ((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) && !(tmp == 0)) && waterLevel == 1) || !(1 == systemActive)) || (2 == tmp && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-11-19 06:51:57,495 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((tmp == 1 && pumpRunning == 0) && waterLevel == 1)) && ((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) && !(tmp == 0)) && waterLevel == 1) || !(1 == systemActive)) || (2 == tmp && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-11-19 06:51:57,496 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) && ((!(1 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-11-19 06:51:57,496 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((\old(waterLevel) < 2 || ((!(\old(waterLevel) == 1) || !(1 == systemActive)) && ((!(\old(pumpRunning) == 0) && (!(0 < \old(waterLevel) + 1) || !(\old(waterLevel) <= 0))) || !(1 == systemActive)))) || !(\old(waterLevel) <= 2)) && (((((pumpRunning == \old(pumpRunning) && 1 <= tmp) && waterLevel == 1) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((!(\old(waterLevel) == 1) || !(1 == systemActive)) && ((!(\old(pumpRunning) == 0) && (!(0 < \old(waterLevel) + 1) || !(\old(waterLevel) <= 0))) || !(1 == systemActive)))) [2022-11-19 06:51:57,496 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 == waterLevel)) || (pumpRunning == 0 && tmp == 1)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && tmp == 0)) [2022-11-19 06:51:57,526 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/witness.graphml [2022-11-19 06:51:57,526 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-19 06:51:57,527 INFO L158 Benchmark]: Toolchain (without parser) took 49897.91ms. Allocated memory was 119.5MB in the beginning and 664.8MB in the end (delta: 545.3MB). Free memory was 76.2MB in the beginning and 492.2MB in the end (delta: -416.0MB). Peak memory consumption was 128.4MB. Max. memory is 16.1GB. [2022-11-19 06:51:57,528 INFO L158 Benchmark]: CDTParser took 0.36ms. Allocated memory is still 119.5MB. Free memory is still 94.2MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-19 06:51:57,528 INFO L158 Benchmark]: CACSL2BoogieTranslator took 586.87ms. Allocated memory is still 119.5MB. Free memory was 76.0MB in the beginning and 86.4MB in the end (delta: -10.4MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-11-19 06:51:57,528 INFO L158 Benchmark]: Boogie Procedure Inliner took 84.29ms. Allocated memory is still 119.5MB. Free memory was 86.4MB in the beginning and 84.1MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-19 06:51:57,529 INFO L158 Benchmark]: Boogie Preprocessor took 63.52ms. Allocated memory is still 119.5MB. Free memory was 83.7MB in the beginning and 82.3MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-19 06:51:57,529 INFO L158 Benchmark]: RCFGBuilder took 866.16ms. Allocated memory is still 119.5MB. Free memory was 82.3MB in the beginning and 55.9MB in the end (delta: 26.3MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. [2022-11-19 06:51:57,530 INFO L158 Benchmark]: TraceAbstraction took 48197.49ms. Allocated memory was 119.5MB in the beginning and 664.8MB in the end (delta: 545.3MB). Free memory was 55.3MB in the beginning and 497.4MB in the end (delta: -442.1MB). Peak memory consumption was 367.6MB. Max. memory is 16.1GB. [2022-11-19 06:51:57,530 INFO L158 Benchmark]: Witness Printer took 89.11ms. Allocated memory is still 664.8MB. Free memory was 497.4MB in the beginning and 492.2MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-19 06:51:57,533 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.36ms. Allocated memory is still 119.5MB. Free memory is still 94.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 586.87ms. Allocated memory is still 119.5MB. Free memory was 76.0MB in the beginning and 86.4MB in the end (delta: -10.4MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 84.29ms. Allocated memory is still 119.5MB. Free memory was 86.4MB in the beginning and 84.1MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 63.52ms. Allocated memory is still 119.5MB. Free memory was 83.7MB in the beginning and 82.3MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 866.16ms. Allocated memory is still 119.5MB. Free memory was 82.3MB in the beginning and 55.9MB in the end (delta: 26.3MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. * TraceAbstraction took 48197.49ms. Allocated memory was 119.5MB in the beginning and 664.8MB in the end (delta: 545.3MB). Free memory was 55.3MB in the beginning and 497.4MB in the end (delta: -442.1MB). Peak memory consumption was 367.6MB. Max. memory is 16.1GB. * Witness Printer took 89.11ms. Allocated memory is still 664.8MB. Free memory was 497.4MB in the beginning and 492.2MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 449]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 51 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 48.1s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 11.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2355 SdHoareTripleChecker+Valid, 5.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2329 mSDsluCounter, 2487 SdHoareTripleChecker+Invalid, 4.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1913 mSDsCounter, 1653 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4491 IncrementalHoareTripleChecker+Invalid, 6144 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1653 mSolverCounterUnsat, 574 mSDtfsCounter, 4491 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 781 GetRequests, 497 SyntacticMatches, 14 SemanticMatches, 270 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8620 ImplicationChecksByTransitivity, 16.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=894occurred in iteration=10, InterpolantAutomatonStates: 178, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.0s AutomataMinimizationTime, 12 MinimizatonAttempts, 957 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 33 LocationsWithAnnotation, 1956 PreInvPairs, 2019 NumberOfFragments, 920 HoareAnnotationTreeSize, 1956 FomulaSimplifications, 18426 FormulaSimplificationTreeSizeReduction, 1.3s HoareSimplificationTime, 33 FomulaSimplificationsInter, 31241 FormulaSimplificationTreeSizeReductionInter, 4.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 7.2s InterpolantComputationTime, 684 NumberOfCodeBlocks, 660 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 803 ConstructedInterpolants, 0 QuantifiedInterpolants, 3015 SizeOfPredicates, 37 NumberOfNonLiveVariables, 1211 ConjunctsInSsa, 99 ConjunctsInUnsatCore, 18 InterpolantComputations, 10 PerfectInterpolantSequences, 354/509 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 419]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((tmp == 1 && pumpRunning == 0) && waterLevel == 1)) && ((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) && !(tmp == 0)) && waterLevel == 1) || !(1 == systemActive)) || (2 == tmp && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 773]: Loop Invariant Derived loop invariant: (((\old(waterLevel) < 2 || ((!(\old(waterLevel) == 1) || !(1 == systemActive)) && ((!(\old(pumpRunning) == 0) && (!(0 < \old(waterLevel) + 1) || !(\old(waterLevel) <= 0))) || !(1 == systemActive)))) || !(\old(waterLevel) <= 2)) && (((((pumpRunning == \old(pumpRunning) && 1 <= tmp) && waterLevel == 1) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((!(\old(waterLevel) == 1) || !(1 == systemActive)) && ((!(\old(pumpRunning) == 0) && (!(0 < \old(waterLevel) + 1) || !(\old(waterLevel) <= 0))) || !(1 == systemActive)))) - InvariantResult [Line: 718]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) && waterLevel == 1) || !(1 == systemActive)) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: ((2 == waterLevel && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) - InvariantResult [Line: 927]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 707]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 743]: Loop Invariant Derived loop invariant: (((!(waterLevel == 1) || pumpRunning == 0) || !(1 == systemActive)) || (!(\old(pumpRunning) == 0) && (!(waterLevel <= 0) || !(0 < waterLevel + 1)))) && (((pumpRunning == 0 || !(1 == systemActive)) || !(2 == waterLevel)) || (!(\old(pumpRunning) == 0) && (!(waterLevel <= 0) || !(0 < waterLevel + 1)))) - InvariantResult [Line: 957]: Loop Invariant Derived loop invariant: ((2 == waterLevel && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 652]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 765]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) && waterLevel == 1) || !(1 == systemActive)) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) - InvariantResult [Line: 769]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && ((pumpRunning == 0 && \old(waterLevel) == waterLevel) || (!(pumpRunning == 0) && \old(waterLevel) == waterLevel + 1)))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) && ((!(1 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 652]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && 1 == systemActive) && tmp == 1) && waterLevel == 1 - InvariantResult [Line: 747]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 == waterLevel)) || (pumpRunning == 0 && tmp == 1)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && tmp == 0)) - InvariantResult [Line: 936]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 566]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 427]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((tmp == 1 && pumpRunning == 0) && waterLevel == 1)) && ((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) && !(tmp == 0)) && waterLevel == 1) || !(1 == systemActive)) || (2 == tmp && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2022-11-19 06:51:57,578 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0c9d97a8-2a3c-4950-9eaf-2fb3e66a88f1/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE