./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product49.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 30e01a73 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product49.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash dcab8ddabad39d2c77c9d9341cfb89acc265e09aeb5bde0419f381c4b7bb75b6 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-30e01a7 [2023-11-23 21:13:58,612 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-23 21:13:58,727 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/config/svcomp-Reach-32bit-Taipan_Default.epf [2023-11-23 21:13:58,736 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-23 21:13:58,736 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-23 21:13:58,782 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-23 21:13:58,783 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-23 21:13:58,783 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-23 21:13:58,785 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-23 21:13:58,792 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-23 21:13:58,792 INFO L153 SettingsManager]: * User list type=DISABLED [2023-11-23 21:13:58,794 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-11-23 21:13:58,794 INFO L153 SettingsManager]: * Explicit value domain=true [2023-11-23 21:13:58,796 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-11-23 21:13:58,797 INFO L153 SettingsManager]: * Octagon Domain=false [2023-11-23 21:13:58,797 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-11-23 21:13:58,798 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-11-23 21:13:58,798 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-11-23 21:13:58,798 INFO L153 SettingsManager]: * Interval Domain=false [2023-11-23 21:13:58,799 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-11-23 21:13:58,799 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-11-23 21:13:58,800 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-11-23 21:13:58,801 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-23 21:13:58,802 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-23 21:13:58,802 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-23 21:13:58,803 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-23 21:13:58,803 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-23 21:13:58,804 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-23 21:13:58,804 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-23 21:13:58,804 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-23 21:13:58,806 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-23 21:13:58,806 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-23 21:13:58,806 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-23 21:13:58,807 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-23 21:13:58,807 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-23 21:13:58,807 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-23 21:13:58,808 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-23 21:13:58,809 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 21:13:58,809 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-23 21:13:58,809 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-23 21:13:58,809 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-23 21:13:58,810 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-11-23 21:13:58,810 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-23 21:13:58,810 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-23 21:13:58,811 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-23 21:13:58,811 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-11-23 21:13:58,812 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-23 21:13:58,812 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> dcab8ddabad39d2c77c9d9341cfb89acc265e09aeb5bde0419f381c4b7bb75b6 [2023-11-23 21:13:59,140 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-23 21:13:59,173 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-23 21:13:59,176 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-23 21:13:59,178 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-23 21:13:59,178 INFO L274 PluginConnector]: CDTParser initialized [2023-11-23 21:13:59,180 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/../../sv-benchmarks/c/product-lines/minepump_spec4_product49.cil.c [2023-11-23 21:14:02,440 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-23 21:14:02,704 INFO L384 CDTParser]: Found 1 translation units. [2023-11-23 21:14:02,705 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/sv-benchmarks/c/product-lines/minepump_spec4_product49.cil.c [2023-11-23 21:14:02,721 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/data/33c853aa5/37aaa60dc2c6432a8c2f34bf70cef619/FLAG9ed693cac [2023-11-23 21:14:02,742 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/data/33c853aa5/37aaa60dc2c6432a8c2f34bf70cef619 [2023-11-23 21:14:02,747 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-23 21:14:02,749 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-23 21:14:02,750 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-23 21:14:02,750 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-23 21:14:02,757 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-23 21:14:02,758 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:14:02" (1/1) ... [2023-11-23 21:14:02,759 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@697914ba and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:02, skipping insertion in model container [2023-11-23 21:14:02,759 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:14:02" (1/1) ... [2023-11-23 21:14:02,810 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-23 21:14:03,007 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/sv-benchmarks/c/product-lines/minepump_spec4_product49.cil.c[1605,1618] [2023-11-23 21:14:03,222 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 21:14:03,247 INFO L202 MainTranslator]: Completed pre-run [2023-11-23 21:14:03,260 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] [2023-11-23 21:14:03,262 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [58] [2023-11-23 21:14:03,262 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [169] [2023-11-23 21:14:03,262 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [271] [2023-11-23 21:14:03,263 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [472] [2023-11-23 21:14:03,263 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [537] [2023-11-23 21:14:03,263 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [572] [2023-11-23 21:14:03,263 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [598] [2023-11-23 21:14:03,277 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/sv-benchmarks/c/product-lines/minepump_spec4_product49.cil.c[1605,1618] [2023-11-23 21:14:03,330 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 21:14:03,351 INFO L206 MainTranslator]: Completed translation [2023-11-23 21:14:03,351 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:03 WrapperNode [2023-11-23 21:14:03,352 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-23 21:14:03,353 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-23 21:14:03,353 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-23 21:14:03,353 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-23 21:14:03,361 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:03" (1/1) ... [2023-11-23 21:14:03,378 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:03" (1/1) ... [2023-11-23 21:14:03,409 INFO L138 Inliner]: procedures = 55, calls = 98, calls flagged for inlining = 24, calls inlined = 20, statements flattened = 204 [2023-11-23 21:14:03,410 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-23 21:14:03,411 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-23 21:14:03,411 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-23 21:14:03,411 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-23 21:14:03,428 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:03" (1/1) ... [2023-11-23 21:14:03,429 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:03" (1/1) ... [2023-11-23 21:14:03,432 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:03" (1/1) ... [2023-11-23 21:14:03,432 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:03" (1/1) ... [2023-11-23 21:14:03,439 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:03" (1/1) ... [2023-11-23 21:14:03,450 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:03" (1/1) ... [2023-11-23 21:14:03,452 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:03" (1/1) ... [2023-11-23 21:14:03,453 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:03" (1/1) ... [2023-11-23 21:14:03,458 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-23 21:14:03,477 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-23 21:14:03,477 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-23 21:14:03,478 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-23 21:14:03,479 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:03" (1/1) ... [2023-11-23 21:14:03,504 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 21:14:03,531 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:03,549 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-23 21:14:03,583 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-23 21:14:03,598 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-23 21:14:03,598 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-23 21:14:03,598 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-23 21:14:03,598 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-23 21:14:03,598 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-23 21:14:03,599 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-23 21:14:03,599 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-23 21:14:03,600 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-23 21:14:03,600 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-23 21:14:03,600 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-23 21:14:03,600 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-23 21:14:03,600 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-23 21:14:03,601 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-23 21:14:03,601 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-23 21:14:03,602 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-23 21:14:03,603 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-23 21:14:03,739 INFO L241 CfgBuilder]: Building ICFG [2023-11-23 21:14:03,741 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-23 21:14:04,053 INFO L282 CfgBuilder]: Performing block encoding [2023-11-23 21:14:04,220 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-23 21:14:04,220 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-23 21:14:04,222 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:14:04 BoogieIcfgContainer [2023-11-23 21:14:04,222 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-23 21:14:04,225 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-23 21:14:04,225 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-23 21:14:04,229 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-23 21:14:04,229 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 09:14:02" (1/3) ... [2023-11-23 21:14:04,230 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1623417 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 09:14:04, skipping insertion in model container [2023-11-23 21:14:04,230 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:03" (2/3) ... [2023-11-23 21:14:04,230 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1623417 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 09:14:04, skipping insertion in model container [2023-11-23 21:14:04,231 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:14:04" (3/3) ... [2023-11-23 21:14:04,232 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product49.cil.c [2023-11-23 21:14:04,252 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-23 21:14:04,253 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-23 21:14:04,300 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-23 21:14:04,307 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2cbb64ee, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-23 21:14:04,308 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-23 21:14:04,312 INFO L276 IsEmpty]: Start isEmpty. Operand has 51 states, 33 states have (on average 1.4545454545454546) internal successors, (48), 41 states have internal predecessors, (48), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-23 21:14:04,322 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2023-11-23 21:14:04,322 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:04,323 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:04,327 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:04,335 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:04,335 INFO L85 PathProgramCache]: Analyzing trace with hash -1542876074, now seen corresponding path program 1 times [2023-11-23 21:14:04,345 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:04,346 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1446088896] [2023-11-23 21:14:04,346 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:04,348 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:04,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:04,557 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:04,558 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:04,558 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1446088896] [2023-11-23 21:14:04,559 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1446088896] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:04,559 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:04,560 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-23 21:14:04,561 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [999572442] [2023-11-23 21:14:04,562 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:04,567 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-23 21:14:04,567 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:04,598 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-23 21:14:04,599 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-23 21:14:04,601 INFO L87 Difference]: Start difference. First operand has 51 states, 33 states have (on average 1.4545454545454546) internal successors, (48), 41 states have internal predecessors, (48), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:04,684 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:04,685 INFO L93 Difference]: Finished difference Result 100 states and 137 transitions. [2023-11-23 21:14:04,687 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-23 21:14:04,688 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2023-11-23 21:14:04,689 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:04,699 INFO L225 Difference]: With dead ends: 100 [2023-11-23 21:14:04,700 INFO L226 Difference]: Without dead ends: 46 [2023-11-23 21:14:04,705 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-23 21:14:04,712 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 48 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:04,714 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 48 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 21:14:04,733 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2023-11-23 21:14:04,759 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 46. [2023-11-23 21:14:04,760 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 30 states have (on average 1.3333333333333333) internal successors, (40), 37 states have internal predecessors, (40), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-23 21:14:04,765 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 59 transitions. [2023-11-23 21:14:04,767 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 59 transitions. Word has length 12 [2023-11-23 21:14:04,767 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:04,768 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 59 transitions. [2023-11-23 21:14:04,768 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:04,769 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 59 transitions. [2023-11-23 21:14:04,771 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2023-11-23 21:14:04,771 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:04,771 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:04,772 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-23 21:14:04,772 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:04,773 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:04,773 INFO L85 PathProgramCache]: Analyzing trace with hash -1449178178, now seen corresponding path program 1 times [2023-11-23 21:14:04,774 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:04,774 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [100402989] [2023-11-23 21:14:04,774 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:04,775 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:04,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:04,964 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:04,965 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:04,966 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [100402989] [2023-11-23 21:14:04,967 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [100402989] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:04,967 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:04,967 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-23 21:14:04,968 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1949092521] [2023-11-23 21:14:04,968 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:04,970 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 21:14:04,970 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:04,973 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 21:14:04,974 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:14:04,975 INFO L87 Difference]: Start difference. First operand 46 states and 59 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:05,042 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:05,043 INFO L93 Difference]: Finished difference Result 69 states and 89 transitions. [2023-11-23 21:14:05,043 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 21:14:05,044 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2023-11-23 21:14:05,044 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:05,047 INFO L225 Difference]: With dead ends: 69 [2023-11-23 21:14:05,047 INFO L226 Difference]: Without dead ends: 38 [2023-11-23 21:14:05,054 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:14:05,057 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 7 mSDsluCounter, 25 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 59 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:05,059 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 59 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 21:14:05,061 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2023-11-23 21:14:05,066 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 38. [2023-11-23 21:14:05,067 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 25 states have (on average 1.36) internal successors, (34), 32 states have internal predecessors, (34), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2023-11-23 21:14:05,068 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 48 transitions. [2023-11-23 21:14:05,068 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 48 transitions. Word has length 13 [2023-11-23 21:14:05,068 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:05,069 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 48 transitions. [2023-11-23 21:14:05,069 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:05,069 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 48 transitions. [2023-11-23 21:14:05,070 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2023-11-23 21:14:05,070 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:05,070 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:05,071 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-23 21:14:05,071 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:05,072 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:05,072 INFO L85 PathProgramCache]: Analyzing trace with hash -11117430, now seen corresponding path program 1 times [2023-11-23 21:14:05,072 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:05,072 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1438464045] [2023-11-23 21:14:05,073 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:05,073 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:05,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:05,201 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:05,201 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:05,202 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1438464045] [2023-11-23 21:14:05,202 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1438464045] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:05,202 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:05,202 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-23 21:14:05,202 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [522067082] [2023-11-23 21:14:05,203 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:05,203 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 21:14:05,203 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:05,204 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 21:14:05,204 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:14:05,205 INFO L87 Difference]: Start difference. First operand 38 states and 48 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:05,239 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:05,239 INFO L93 Difference]: Finished difference Result 74 states and 95 transitions. [2023-11-23 21:14:05,239 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 21:14:05,240 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2023-11-23 21:14:05,240 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:05,241 INFO L225 Difference]: With dead ends: 74 [2023-11-23 21:14:05,241 INFO L226 Difference]: Without dead ends: 38 [2023-11-23 21:14:05,242 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:14:05,276 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 37 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 32 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:05,277 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 32 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 21:14:05,280 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2023-11-23 21:14:05,289 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 38. [2023-11-23 21:14:05,290 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 25 states have (on average 1.32) internal successors, (33), 32 states have internal predecessors, (33), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2023-11-23 21:14:05,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 47 transitions. [2023-11-23 21:14:05,291 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 47 transitions. Word has length 15 [2023-11-23 21:14:05,291 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:05,292 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 47 transitions. [2023-11-23 21:14:05,292 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:05,292 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 47 transitions. [2023-11-23 21:14:05,293 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-11-23 21:14:05,293 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:05,294 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:05,294 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-23 21:14:05,294 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:05,295 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:05,295 INFO L85 PathProgramCache]: Analyzing trace with hash -1438831890, now seen corresponding path program 1 times [2023-11-23 21:14:05,295 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:05,295 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1678029438] [2023-11-23 21:14:05,295 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:05,296 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:05,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:05,411 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:05,411 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:05,411 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1678029438] [2023-11-23 21:14:05,411 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1678029438] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:05,412 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:05,412 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-23 21:14:05,412 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1188056439] [2023-11-23 21:14:05,412 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:05,413 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 21:14:05,413 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:05,414 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 21:14:05,414 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:14:05,414 INFO L87 Difference]: Start difference. First operand 38 states and 47 transitions. Second operand has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:05,515 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:05,515 INFO L93 Difference]: Finished difference Result 104 states and 132 transitions. [2023-11-23 21:14:05,515 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 21:14:05,516 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2023-11-23 21:14:05,516 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:05,519 INFO L225 Difference]: With dead ends: 104 [2023-11-23 21:14:05,519 INFO L226 Difference]: Without dead ends: 68 [2023-11-23 21:14:05,522 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:14:05,528 INFO L413 NwaCegarLoop]: 41 mSDtfsCounter, 29 mSDsluCounter, 27 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 68 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:05,529 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [29 Valid, 68 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:14:05,529 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2023-11-23 21:14:05,549 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 66. [2023-11-23 21:14:05,549 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 45 states have (on average 1.2666666666666666) internal successors, (57), 52 states have internal predecessors, (57), 10 states have call successors, (10), 10 states have call predecessors, (10), 10 states have return successors, (14), 10 states have call predecessors, (14), 10 states have call successors, (14) [2023-11-23 21:14:05,551 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 81 transitions. [2023-11-23 21:14:05,552 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 81 transitions. Word has length 18 [2023-11-23 21:14:05,552 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:05,552 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 81 transitions. [2023-11-23 21:14:05,552 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:05,552 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 81 transitions. [2023-11-23 21:14:05,554 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-23 21:14:05,554 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:05,554 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:05,554 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-23 21:14:05,555 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:05,555 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:05,555 INFO L85 PathProgramCache]: Analyzing trace with hash -39174915, now seen corresponding path program 1 times [2023-11-23 21:14:05,555 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:05,555 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1351279655] [2023-11-23 21:14:05,556 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:05,556 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:05,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:05,823 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:05,824 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:05,824 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1351279655] [2023-11-23 21:14:05,824 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1351279655] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:05,824 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:05,824 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-23 21:14:05,825 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [817637209] [2023-11-23 21:14:05,825 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:05,825 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-23 21:14:05,826 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:05,826 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-23 21:14:05,827 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-23 21:14:05,827 INFO L87 Difference]: Start difference. First operand 66 states and 81 transitions. Second operand has 6 states, 6 states have (on average 3.3333333333333335) internal successors, (20), 6 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:14:05,996 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:05,996 INFO L93 Difference]: Finished difference Result 181 states and 224 transitions. [2023-11-23 21:14:05,997 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-23 21:14:05,997 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.3333333333333335) internal successors, (20), 6 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2023-11-23 21:14:05,997 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:05,999 INFO L225 Difference]: With dead ends: 181 [2023-11-23 21:14:05,999 INFO L226 Difference]: Without dead ends: 117 [2023-11-23 21:14:06,000 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=35, Invalid=55, Unknown=0, NotChecked=0, Total=90 [2023-11-23 21:14:06,001 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 58 mSDsluCounter, 125 mSDsCounter, 0 mSdLazyCounter, 96 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 157 SdHoareTripleChecker+Invalid, 126 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 96 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:06,001 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 157 Invalid, 126 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 96 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:14:06,002 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117 states. [2023-11-23 21:14:06,020 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117 to 100. [2023-11-23 21:14:06,021 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 69 states have (on average 1.2173913043478262) internal successors, (84), 78 states have internal predecessors, (84), 14 states have call successors, (14), 14 states have call predecessors, (14), 16 states have return successors, (20), 15 states have call predecessors, (20), 14 states have call successors, (20) [2023-11-23 21:14:06,022 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 118 transitions. [2023-11-23 21:14:06,023 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 118 transitions. Word has length 23 [2023-11-23 21:14:06,023 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:06,023 INFO L495 AbstractCegarLoop]: Abstraction has 100 states and 118 transitions. [2023-11-23 21:14:06,024 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.3333333333333335) internal successors, (20), 6 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:14:06,024 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 118 transitions. [2023-11-23 21:14:06,025 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-23 21:14:06,025 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:06,026 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:06,026 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-23 21:14:06,026 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:06,026 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:06,027 INFO L85 PathProgramCache]: Analyzing trace with hash 293691162, now seen corresponding path program 1 times [2023-11-23 21:14:06,027 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:06,027 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1244902778] [2023-11-23 21:14:06,027 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:06,028 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:06,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:06,294 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:06,294 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:06,295 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1244902778] [2023-11-23 21:14:06,295 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1244902778] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:06,296 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:06,302 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-23 21:14:06,303 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1677294593] [2023-11-23 21:14:06,303 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:06,304 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-23 21:14:06,304 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:06,305 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-23 21:14:06,306 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2023-11-23 21:14:06,306 INFO L87 Difference]: Start difference. First operand 100 states and 118 transitions. Second operand has 8 states, 7 states have (on average 3.0) internal successors, (21), 7 states have internal predecessors, (21), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-23 21:14:06,689 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:06,689 INFO L93 Difference]: Finished difference Result 232 states and 288 transitions. [2023-11-23 21:14:06,690 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2023-11-23 21:14:06,690 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.0) internal successors, (21), 7 states have internal predecessors, (21), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 26 [2023-11-23 21:14:06,690 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:06,695 INFO L225 Difference]: With dead ends: 232 [2023-11-23 21:14:06,696 INFO L226 Difference]: Without dead ends: 168 [2023-11-23 21:14:06,698 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=64, Invalid=92, Unknown=0, NotChecked=0, Total=156 [2023-11-23 21:14:06,700 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 162 mSDsluCounter, 72 mSDsCounter, 0 mSdLazyCounter, 141 mSolverCounterSat, 71 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 100 SdHoareTripleChecker+Invalid, 212 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 71 IncrementalHoareTripleChecker+Valid, 141 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:06,701 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [167 Valid, 100 Invalid, 212 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [71 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-23 21:14:06,702 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 168 states. [2023-11-23 21:14:06,754 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 168 to 137. [2023-11-23 21:14:06,756 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 137 states, 94 states have (on average 1.1914893617021276) internal successors, (112), 106 states have internal predecessors, (112), 19 states have call successors, (19), 19 states have call predecessors, (19), 23 states have return successors, (27), 21 states have call predecessors, (27), 19 states have call successors, (27) [2023-11-23 21:14:06,760 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 137 states to 137 states and 158 transitions. [2023-11-23 21:14:06,760 INFO L78 Accepts]: Start accepts. Automaton has 137 states and 158 transitions. Word has length 26 [2023-11-23 21:14:06,761 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:06,761 INFO L495 AbstractCegarLoop]: Abstraction has 137 states and 158 transitions. [2023-11-23 21:14:06,761 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.0) internal successors, (21), 7 states have internal predecessors, (21), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-23 21:14:06,761 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 158 transitions. [2023-11-23 21:14:06,770 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2023-11-23 21:14:06,770 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:06,770 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:06,771 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-23 21:14:06,771 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:06,771 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:06,772 INFO L85 PathProgramCache]: Analyzing trace with hash 1651835990, now seen corresponding path program 1 times [2023-11-23 21:14:06,772 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:06,772 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1886430142] [2023-11-23 21:14:06,772 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:06,772 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:06,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:06,867 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2023-11-23 21:14:06,867 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:06,867 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1886430142] [2023-11-23 21:14:06,867 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1886430142] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:06,867 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:06,867 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-23 21:14:06,868 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1336930440] [2023-11-23 21:14:06,868 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:06,868 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-23 21:14:06,868 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:06,869 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-23 21:14:06,869 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-23 21:14:06,870 INFO L87 Difference]: Start difference. First operand 137 states and 158 transitions. Second operand has 4 states, 4 states have (on average 6.5) internal successors, (26), 4 states have internal predecessors, (26), 1 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-23 21:14:06,949 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:06,949 INFO L93 Difference]: Finished difference Result 141 states and 161 transitions. [2023-11-23 21:14:06,950 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-23 21:14:06,950 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 6.5) internal successors, (26), 4 states have internal predecessors, (26), 1 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 39 [2023-11-23 21:14:06,950 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:06,954 INFO L225 Difference]: With dead ends: 141 [2023-11-23 21:14:06,954 INFO L226 Difference]: Without dead ends: 139 [2023-11-23 21:14:06,954 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-23 21:14:06,956 INFO L413 NwaCegarLoop]: 37 mSDtfsCounter, 36 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 50 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 100 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 50 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:06,956 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 100 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 50 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 21:14:06,958 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 139 states. [2023-11-23 21:14:06,983 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 139 to 137. [2023-11-23 21:14:06,984 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 137 states, 94 states have (on average 1.1808510638297873) internal successors, (111), 106 states have internal predecessors, (111), 19 states have call successors, (19), 19 states have call predecessors, (19), 23 states have return successors, (27), 21 states have call predecessors, (27), 19 states have call successors, (27) [2023-11-23 21:14:06,987 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 137 states to 137 states and 157 transitions. [2023-11-23 21:14:06,987 INFO L78 Accepts]: Start accepts. Automaton has 137 states and 157 transitions. Word has length 39 [2023-11-23 21:14:06,989 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:06,989 INFO L495 AbstractCegarLoop]: Abstraction has 137 states and 157 transitions. [2023-11-23 21:14:06,989 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 6.5) internal successors, (26), 4 states have internal predecessors, (26), 1 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-23 21:14:06,989 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 157 transitions. [2023-11-23 21:14:06,993 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-11-23 21:14:06,994 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:06,994 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:06,994 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-23 21:14:06,995 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:06,995 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:06,995 INFO L85 PathProgramCache]: Analyzing trace with hash -857078635, now seen corresponding path program 1 times [2023-11-23 21:14:06,995 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:06,995 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [120052946] [2023-11-23 21:14:06,995 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:06,996 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:07,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:07,188 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 6 proven. 10 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-23 21:14:07,188 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:07,188 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [120052946] [2023-11-23 21:14:07,188 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [120052946] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:07,188 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [851101163] [2023-11-23 21:14:07,189 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:07,189 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:07,189 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:07,196 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:07,223 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-23 21:14:07,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:07,302 INFO L262 TraceCheckSpWp]: Trace formula consists of 213 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-23 21:14:07,308 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:07,412 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:07,412 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-23 21:14:07,413 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [851101163] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:07,413 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-23 21:14:07,413 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 8 [2023-11-23 21:14:07,413 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1236441016] [2023-11-23 21:14:07,413 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:07,414 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 21:14:07,414 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:07,415 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 21:14:07,415 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2023-11-23 21:14:07,415 INFO L87 Difference]: Start difference. First operand 137 states and 157 transitions. Second operand has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-23 21:14:07,485 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:07,485 INFO L93 Difference]: Finished difference Result 201 states and 238 transitions. [2023-11-23 21:14:07,486 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 21:14:07,486 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 44 [2023-11-23 21:14:07,486 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:07,488 INFO L225 Difference]: With dead ends: 201 [2023-11-23 21:14:07,488 INFO L226 Difference]: Without dead ends: 137 [2023-11-23 21:14:07,489 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 45 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2023-11-23 21:14:07,490 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 21 mSDsluCounter, 25 mSDsCounter, 0 mSdLazyCounter, 34 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 74 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 34 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:07,491 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 74 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 34 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 21:14:07,493 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 137 states. [2023-11-23 21:14:07,511 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 137 to 137. [2023-11-23 21:14:07,512 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 137 states, 94 states have (on average 1.1595744680851063) internal successors, (109), 106 states have internal predecessors, (109), 19 states have call successors, (19), 19 states have call predecessors, (19), 23 states have return successors, (26), 21 states have call predecessors, (26), 19 states have call successors, (26) [2023-11-23 21:14:07,513 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 137 states to 137 states and 154 transitions. [2023-11-23 21:14:07,514 INFO L78 Accepts]: Start accepts. Automaton has 137 states and 154 transitions. Word has length 44 [2023-11-23 21:14:07,514 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:07,515 INFO L495 AbstractCegarLoop]: Abstraction has 137 states and 154 transitions. [2023-11-23 21:14:07,515 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-23 21:14:07,515 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 154 transitions. [2023-11-23 21:14:07,517 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2023-11-23 21:14:07,518 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:07,518 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:07,539 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2023-11-23 21:14:07,731 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:07,731 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:07,732 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:07,732 INFO L85 PathProgramCache]: Analyzing trace with hash -206135983, now seen corresponding path program 1 times [2023-11-23 21:14:07,732 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:07,732 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1084764423] [2023-11-23 21:14:07,732 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:07,732 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:07,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:08,032 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 13 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-23 21:14:08,032 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:08,032 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1084764423] [2023-11-23 21:14:08,032 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1084764423] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:08,033 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1088773626] [2023-11-23 21:14:08,033 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:08,033 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:08,033 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:08,034 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:08,053 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-23 21:14:08,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:08,126 INFO L262 TraceCheckSpWp]: Trace formula consists of 216 conjuncts, 14 conjunts are in the unsatisfiable core [2023-11-23 21:14:08,129 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:08,558 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:08,558 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-23 21:14:08,558 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1088773626] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:08,559 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-23 21:14:08,559 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [8] total 15 [2023-11-23 21:14:08,559 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1912399740] [2023-11-23 21:14:08,559 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:08,560 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-23 21:14:08,560 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:08,560 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-23 21:14:08,561 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=47, Invalid=163, Unknown=0, NotChecked=0, Total=210 [2023-11-23 21:14:08,561 INFO L87 Difference]: Start difference. First operand 137 states and 154 transitions. Second operand has 9 states, 9 states have (on average 4.222222222222222) internal successors, (38), 8 states have internal predecessors, (38), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-23 21:14:08,921 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:08,922 INFO L93 Difference]: Finished difference Result 271 states and 314 transitions. [2023-11-23 21:14:08,922 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2023-11-23 21:14:08,922 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.222222222222222) internal successors, (38), 8 states have internal predecessors, (38), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 47 [2023-11-23 21:14:08,923 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:08,924 INFO L225 Difference]: With dead ends: 271 [2023-11-23 21:14:08,925 INFO L226 Difference]: Without dead ends: 193 [2023-11-23 21:14:08,925 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 60 GetRequests, 40 SyntacticMatches, 2 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=86, Invalid=294, Unknown=0, NotChecked=0, Total=380 [2023-11-23 21:14:08,926 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 116 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 228 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 122 SdHoareTripleChecker+Valid, 128 SdHoareTripleChecker+Invalid, 269 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 228 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:08,927 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [122 Valid, 128 Invalid, 269 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 228 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-23 21:14:08,928 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 193 states. [2023-11-23 21:14:08,949 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 193 to 175. [2023-11-23 21:14:08,950 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 175 states, 123 states have (on average 1.1626016260162602) internal successors, (143), 134 states have internal predecessors, (143), 25 states have call successors, (25), 25 states have call predecessors, (25), 26 states have return successors, (30), 24 states have call predecessors, (30), 25 states have call successors, (30) [2023-11-23 21:14:08,952 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 175 states to 175 states and 198 transitions. [2023-11-23 21:14:08,952 INFO L78 Accepts]: Start accepts. Automaton has 175 states and 198 transitions. Word has length 47 [2023-11-23 21:14:08,952 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:08,953 INFO L495 AbstractCegarLoop]: Abstraction has 175 states and 198 transitions. [2023-11-23 21:14:08,953 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.222222222222222) internal successors, (38), 8 states have internal predecessors, (38), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-23 21:14:08,953 INFO L276 IsEmpty]: Start isEmpty. Operand 175 states and 198 transitions. [2023-11-23 21:14:08,954 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2023-11-23 21:14:08,954 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:08,954 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:08,980 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-23 21:14:09,174 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2023-11-23 21:14:09,174 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:09,174 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:09,174 INFO L85 PathProgramCache]: Analyzing trace with hash 373323886, now seen corresponding path program 1 times [2023-11-23 21:14:09,175 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:09,175 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [468825662] [2023-11-23 21:14:09,175 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:09,175 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:09,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:09,803 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-23 21:14:09,803 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:09,803 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [468825662] [2023-11-23 21:14:09,803 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [468825662] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:09,804 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1779879439] [2023-11-23 21:14:09,804 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:09,804 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:09,804 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:09,805 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:09,827 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-23 21:14:09,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:09,896 INFO L262 TraceCheckSpWp]: Trace formula consists of 222 conjuncts, 19 conjunts are in the unsatisfiable core [2023-11-23 21:14:09,899 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:10,311 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 4 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:10,312 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:14:10,861 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 4 proven. 5 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-23 21:14:10,861 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1779879439] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:14:10,862 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [440140920] [2023-11-23 21:14:10,886 INFO L159 IcfgInterpreter]: Started Sifa with 34 locations of interest [2023-11-23 21:14:10,886 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:14:10,890 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:14:10,895 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:14:10,896 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:14:14,596 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 136 for LOIs [2023-11-23 21:14:14,729 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 24 for LOIs [2023-11-23 21:14:14,909 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 34 for LOIs [2023-11-23 21:14:15,009 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 26 for LOIs [2023-11-23 21:14:15,015 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:14:17,763 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3712#(and (<= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 2147483647) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 0)) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1| 0) (<= 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 2147483648)) (= |timeShift_isPumpRunning_#res#1| ~pumpRunning~0) (= |timeShift_getWaterLevel_#res#1| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1|) (= ~waterLevel~0 0))' at error location [2023-11-23 21:14:17,763 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:14:17,763 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:14:17,764 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 12, 10] total 31 [2023-11-23 21:14:17,764 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1592056427] [2023-11-23 21:14:17,764 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:14:17,765 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2023-11-23 21:14:17,765 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:17,766 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2023-11-23 21:14:17,768 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=324, Invalid=2756, Unknown=0, NotChecked=0, Total=3080 [2023-11-23 21:14:17,768 INFO L87 Difference]: Start difference. First operand 175 states and 198 transitions. Second operand has 31 states, 28 states have (on average 3.142857142857143) internal successors, (88), 27 states have internal predecessors, (88), 12 states have call successors, (16), 10 states have call predecessors, (16), 9 states have return successors, (14), 10 states have call predecessors, (14), 11 states have call successors, (14) [2023-11-23 21:14:21,998 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:21,999 INFO L93 Difference]: Finished difference Result 586 states and 702 transitions. [2023-11-23 21:14:21,999 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 93 states. [2023-11-23 21:14:22,000 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 28 states have (on average 3.142857142857143) internal successors, (88), 27 states have internal predecessors, (88), 12 states have call successors, (16), 10 states have call predecessors, (16), 9 states have return successors, (14), 10 states have call predecessors, (14), 11 states have call successors, (14) Word has length 50 [2023-11-23 21:14:22,000 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:22,004 INFO L225 Difference]: With dead ends: 586 [2023-11-23 21:14:22,004 INFO L226 Difference]: Without dead ends: 491 [2023-11-23 21:14:22,014 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 256 GetRequests, 110 SyntacticMatches, 8 SemanticMatches, 138 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7258 ImplicationChecksByTransitivity, 6.1s TimeCoverageRelationStatistics Valid=2506, Invalid=16954, Unknown=0, NotChecked=0, Total=19460 [2023-11-23 21:14:22,015 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 764 mSDsluCounter, 541 mSDsCounter, 0 mSdLazyCounter, 1294 mSolverCounterSat, 416 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 772 SdHoareTripleChecker+Valid, 594 SdHoareTripleChecker+Invalid, 1710 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 416 IncrementalHoareTripleChecker+Valid, 1294 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:22,015 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [772 Valid, 594 Invalid, 1710 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [416 Valid, 1294 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2023-11-23 21:14:22,016 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 491 states. [2023-11-23 21:14:22,061 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 491 to 397. [2023-11-23 21:14:22,062 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 397 states, 278 states have (on average 1.1618705035971224) internal successors, (323), 307 states have internal predecessors, (323), 59 states have call successors, (59), 53 states have call predecessors, (59), 59 states have return successors, (78), 57 states have call predecessors, (78), 59 states have call successors, (78) [2023-11-23 21:14:22,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 397 states to 397 states and 460 transitions. [2023-11-23 21:14:22,066 INFO L78 Accepts]: Start accepts. Automaton has 397 states and 460 transitions. Word has length 50 [2023-11-23 21:14:22,066 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:22,066 INFO L495 AbstractCegarLoop]: Abstraction has 397 states and 460 transitions. [2023-11-23 21:14:22,067 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 28 states have (on average 3.142857142857143) internal successors, (88), 27 states have internal predecessors, (88), 12 states have call successors, (16), 10 states have call predecessors, (16), 9 states have return successors, (14), 10 states have call predecessors, (14), 11 states have call successors, (14) [2023-11-23 21:14:22,067 INFO L276 IsEmpty]: Start isEmpty. Operand 397 states and 460 transitions. [2023-11-23 21:14:22,068 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2023-11-23 21:14:22,068 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:22,069 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:22,092 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-23 21:14:22,292 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-23 21:14:22,292 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:22,293 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:22,293 INFO L85 PathProgramCache]: Analyzing trace with hash 950098655, now seen corresponding path program 1 times [2023-11-23 21:14:22,293 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:22,293 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [406714478] [2023-11-23 21:14:22,293 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:22,293 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:22,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:22,505 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 29 proven. 3 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2023-11-23 21:14:22,506 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:22,506 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [406714478] [2023-11-23 21:14:22,506 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [406714478] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:22,506 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2090165045] [2023-11-23 21:14:22,506 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:22,507 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:22,507 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:22,508 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:22,536 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-11-23 21:14:22,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:22,601 INFO L262 TraceCheckSpWp]: Trace formula consists of 266 conjuncts, 24 conjunts are in the unsatisfiable core [2023-11-23 21:14:22,605 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:22,968 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 5 proven. 39 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-23 21:14:22,968 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:14:23,546 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 5 proven. 29 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-11-23 21:14:23,547 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2090165045] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:14:23,547 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1548397243] [2023-11-23 21:14:23,557 INFO L159 IcfgInterpreter]: Started Sifa with 30 locations of interest [2023-11-23 21:14:23,557 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:14:23,557 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:14:23,558 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:14:23,558 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:14:26,000 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 138 for LOIs [2023-11-23 21:14:26,116 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 24 for LOIs [2023-11-23 21:14:26,257 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 25 for LOIs [2023-11-23 21:14:26,310 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:14:28,435 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5612#(and (<= ~pumpRunning~0 1) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 0)) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1| 0) (= |timeShift_isPumpRunning_#res#1| ~pumpRunning~0) (= |timeShift_getWaterLevel_#res#1| 0) (<= 0 ~pumpRunning~0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1|) (= ~waterLevel~0 0))' at error location [2023-11-23 21:14:28,435 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:14:28,435 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:14:28,435 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 13, 12] total 25 [2023-11-23 21:14:28,435 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2031474426] [2023-11-23 21:14:28,435 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:14:28,436 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2023-11-23 21:14:28,436 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:28,437 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2023-11-23 21:14:28,439 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=316, Invalid=2134, Unknown=0, NotChecked=0, Total=2450 [2023-11-23 21:14:28,440 INFO L87 Difference]: Start difference. First operand 397 states and 460 transitions. Second operand has 25 states, 23 states have (on average 4.6521739130434785) internal successors, (107), 23 states have internal predecessors, (107), 9 states have call successors, (15), 7 states have call predecessors, (15), 9 states have return successors, (15), 8 states have call predecessors, (15), 8 states have call successors, (15) [2023-11-23 21:14:30,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:30,816 INFO L93 Difference]: Finished difference Result 954 states and 1144 transitions. [2023-11-23 21:14:30,820 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 64 states. [2023-11-23 21:14:30,820 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 23 states have (on average 4.6521739130434785) internal successors, (107), 23 states have internal predecessors, (107), 9 states have call successors, (15), 7 states have call predecessors, (15), 9 states have return successors, (15), 8 states have call predecessors, (15), 8 states have call successors, (15) Word has length 63 [2023-11-23 21:14:30,821 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:30,825 INFO L225 Difference]: With dead ends: 954 [2023-11-23 21:14:30,825 INFO L226 Difference]: Without dead ends: 739 [2023-11-23 21:14:30,832 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 277 GetRequests, 167 SyntacticMatches, 7 SemanticMatches, 103 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4023 ImplicationChecksByTransitivity, 3.7s TimeCoverageRelationStatistics Valid=1708, Invalid=9212, Unknown=0, NotChecked=0, Total=10920 [2023-11-23 21:14:30,832 INFO L413 NwaCegarLoop]: 39 mSDtfsCounter, 581 mSDsluCounter, 420 mSDsCounter, 0 mSdLazyCounter, 904 mSolverCounterSat, 402 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 589 SdHoareTripleChecker+Valid, 459 SdHoareTripleChecker+Invalid, 1306 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 402 IncrementalHoareTripleChecker+Valid, 904 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:30,833 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [589 Valid, 459 Invalid, 1306 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [402 Valid, 904 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2023-11-23 21:14:30,835 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 739 states. [2023-11-23 21:14:30,916 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 739 to 621. [2023-11-23 21:14:30,918 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 621 states, 436 states have (on average 1.1559633027522935) internal successors, (504), 477 states have internal predecessors, (504), 91 states have call successors, (91), 85 states have call predecessors, (91), 93 states have return successors, (122), 89 states have call predecessors, (122), 91 states have call successors, (122) [2023-11-23 21:14:30,922 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 621 states to 621 states and 717 transitions. [2023-11-23 21:14:30,923 INFO L78 Accepts]: Start accepts. Automaton has 621 states and 717 transitions. Word has length 63 [2023-11-23 21:14:30,924 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:30,924 INFO L495 AbstractCegarLoop]: Abstraction has 621 states and 717 transitions. [2023-11-23 21:14:30,924 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 23 states have (on average 4.6521739130434785) internal successors, (107), 23 states have internal predecessors, (107), 9 states have call successors, (15), 7 states have call predecessors, (15), 9 states have return successors, (15), 8 states have call predecessors, (15), 8 states have call successors, (15) [2023-11-23 21:14:30,924 INFO L276 IsEmpty]: Start isEmpty. Operand 621 states and 717 transitions. [2023-11-23 21:14:30,926 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2023-11-23 21:14:30,927 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:30,927 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:30,948 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2023-11-23 21:14:31,148 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-11-23 21:14:31,148 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:31,149 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:31,149 INFO L85 PathProgramCache]: Analyzing trace with hash -1520577086, now seen corresponding path program 2 times [2023-11-23 21:14:31,149 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:31,149 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [349061133] [2023-11-23 21:14:31,149 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:31,149 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:31,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:31,698 INFO L134 CoverageAnalysis]: Checked inductivity of 58 backedges. 13 proven. 41 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-23 21:14:31,698 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:31,698 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [349061133] [2023-11-23 21:14:31,698 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [349061133] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:31,698 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [312979209] [2023-11-23 21:14:31,699 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-11-23 21:14:31,699 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:31,699 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:31,700 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:31,723 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2023-11-23 21:14:31,787 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2023-11-23 21:14:31,787 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-11-23 21:14:31,789 INFO L262 TraceCheckSpWp]: Trace formula consists of 219 conjuncts, 22 conjunts are in the unsatisfiable core [2023-11-23 21:14:31,792 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:31,887 INFO L134 CoverageAnalysis]: Checked inductivity of 58 backedges. 48 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2023-11-23 21:14:31,888 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-23 21:14:31,888 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [312979209] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:31,888 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-23 21:14:31,888 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [15] total 18 [2023-11-23 21:14:31,889 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [662594383] [2023-11-23 21:14:31,889 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:31,889 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-23 21:14:31,889 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:31,890 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-23 21:14:31,890 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=256, Unknown=0, NotChecked=0, Total=306 [2023-11-23 21:14:31,891 INFO L87 Difference]: Start difference. First operand 621 states and 717 transitions. Second operand has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-23 21:14:32,125 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:32,125 INFO L93 Difference]: Finished difference Result 1216 states and 1425 transitions. [2023-11-23 21:14:32,125 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-23 21:14:32,126 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 74 [2023-11-23 21:14:32,126 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:32,131 INFO L225 Difference]: With dead ends: 1216 [2023-11-23 21:14:32,131 INFO L226 Difference]: Without dead ends: 642 [2023-11-23 21:14:32,133 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 75 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 70 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=54, Invalid=288, Unknown=0, NotChecked=0, Total=342 [2023-11-23 21:14:32,134 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 36 mSDsluCounter, 82 mSDsCounter, 0 mSdLazyCounter, 109 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 139 SdHoareTripleChecker+Invalid, 111 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 109 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:32,135 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 139 Invalid, 111 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 109 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:14:32,136 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 642 states. [2023-11-23 21:14:32,207 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 642 to 419. [2023-11-23 21:14:32,209 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 419 states, 301 states have (on average 1.1561461794019934) internal successors, (348), 324 states have internal predecessors, (348), 58 states have call successors, (58), 58 states have call predecessors, (58), 59 states have return successors, (76), 57 states have call predecessors, (76), 58 states have call successors, (76) [2023-11-23 21:14:32,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 419 states to 419 states and 482 transitions. [2023-11-23 21:14:32,213 INFO L78 Accepts]: Start accepts. Automaton has 419 states and 482 transitions. Word has length 74 [2023-11-23 21:14:32,214 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:32,215 INFO L495 AbstractCegarLoop]: Abstraction has 419 states and 482 transitions. [2023-11-23 21:14:32,215 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-23 21:14:32,215 INFO L276 IsEmpty]: Start isEmpty. Operand 419 states and 482 transitions. [2023-11-23 21:14:32,217 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2023-11-23 21:14:32,217 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:32,217 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:32,243 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2023-11-23 21:14:32,434 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2023-11-23 21:14:32,436 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:32,436 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:32,436 INFO L85 PathProgramCache]: Analyzing trace with hash -1526024909, now seen corresponding path program 1 times [2023-11-23 21:14:32,436 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:32,437 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1560393793] [2023-11-23 21:14:32,437 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:32,437 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:32,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:33,446 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 41 proven. 48 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2023-11-23 21:14:33,446 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:33,447 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1560393793] [2023-11-23 21:14:33,447 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1560393793] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:33,447 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1569618858] [2023-11-23 21:14:33,447 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:33,447 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:33,447 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:33,452 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:33,455 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2023-11-23 21:14:33,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:33,560 INFO L262 TraceCheckSpWp]: Trace formula consists of 326 conjuncts, 33 conjunts are in the unsatisfiable core [2023-11-23 21:14:33,566 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:34,282 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 48 proven. 51 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:34,283 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:14:35,162 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 65 proven. 26 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-23 21:14:35,162 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1569618858] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:14:35,162 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [772419584] [2023-11-23 21:14:35,165 INFO L159 IcfgInterpreter]: Started Sifa with 34 locations of interest [2023-11-23 21:14:35,165 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:14:35,166 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:14:35,166 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:14:35,166 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:14:37,169 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 136 for LOIs [2023-11-23 21:14:37,277 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 24 for LOIs [2023-11-23 21:14:37,427 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 34 for LOIs [2023-11-23 21:14:37,508 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 26 for LOIs [2023-11-23 21:14:37,512 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:14:40,028 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10826#(and (<= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 2147483647) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 0)) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1| 0) (<= 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 2147483648)) (= |timeShift_isPumpRunning_#res#1| ~pumpRunning~0) (= |timeShift_getWaterLevel_#res#1| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1|) (= ~waterLevel~0 0))' at error location [2023-11-23 21:14:40,029 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:14:40,029 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:14:40,029 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 18, 17] total 46 [2023-11-23 21:14:40,029 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [877342406] [2023-11-23 21:14:40,029 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:14:40,030 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 46 states [2023-11-23 21:14:40,030 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:40,031 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 46 interpolants. [2023-11-23 21:14:40,034 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=617, Invalid=4353, Unknown=0, NotChecked=0, Total=4970 [2023-11-23 21:14:40,034 INFO L87 Difference]: Start difference. First operand 419 states and 482 transitions. Second operand has 46 states, 44 states have (on average 3.727272727272727) internal successors, (164), 42 states have internal predecessors, (164), 19 states have call successors, (23), 11 states have call predecessors, (23), 17 states have return successors, (22), 17 states have call predecessors, (22), 19 states have call successors, (22) [2023-11-23 21:14:40,887 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:40,887 INFO L93 Difference]: Finished difference Result 509 states and 587 transitions. [2023-11-23 21:14:40,888 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2023-11-23 21:14:40,889 INFO L78 Accepts]: Start accepts. Automaton has has 46 states, 44 states have (on average 3.727272727272727) internal successors, (164), 42 states have internal predecessors, (164), 19 states have call successors, (23), 11 states have call predecessors, (23), 17 states have return successors, (22), 17 states have call predecessors, (22), 19 states have call successors, (22) Word has length 87 [2023-11-23 21:14:40,889 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:40,890 INFO L225 Difference]: With dead ends: 509 [2023-11-23 21:14:40,890 INFO L226 Difference]: Without dead ends: 0 [2023-11-23 21:14:40,893 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 294 GetRequests, 207 SyntacticMatches, 7 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2838 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=992, Invalid=5650, Unknown=0, NotChecked=0, Total=6642 [2023-11-23 21:14:40,894 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 301 mSDsluCounter, 244 mSDsCounter, 0 mSdLazyCounter, 639 mSolverCounterSat, 196 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 303 SdHoareTripleChecker+Valid, 275 SdHoareTripleChecker+Invalid, 835 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 196 IncrementalHoareTripleChecker+Valid, 639 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:40,895 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [303 Valid, 275 Invalid, 835 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [196 Valid, 639 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-23 21:14:40,895 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-23 21:14:40,895 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-23 21:14:40,896 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:40,896 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-23 21:14:40,896 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 87 [2023-11-23 21:14:40,896 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:40,896 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-23 21:14:40,897 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 46 states, 44 states have (on average 3.727272727272727) internal successors, (164), 42 states have internal predecessors, (164), 19 states have call successors, (23), 11 states have call predecessors, (23), 17 states have return successors, (22), 17 states have call predecessors, (22), 19 states have call successors, (22) [2023-11-23 21:14:40,897 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-23 21:14:40,897 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-23 21:14:40,900 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-23 21:14:40,929 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2023-11-23 21:14:41,123 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2023-11-23 21:14:41,125 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-23 21:14:42,430 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 303 309) no Hoare annotation was computed. [2023-11-23 21:14:42,431 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 303 309) the Hoare annotation is: true [2023-11-23 21:14:42,431 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 93 104) the Hoare annotation is: true [2023-11-23 21:14:42,431 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 93 104) no Hoare annotation was computed. [2023-11-23 21:14:42,431 INFO L899 garLoopResultBuilder]: For program point L283-1(lines 282 301) no Hoare annotation was computed. [2023-11-23 21:14:42,431 INFO L899 garLoopResultBuilder]: For program point L345(lines 345 353) no Hoare annotation was computed. [2023-11-23 21:14:42,431 INFO L899 garLoopResultBuilder]: For program point L341(lines 341 358) no Hoare annotation was computed. [2023-11-23 21:14:42,431 INFO L899 garLoopResultBuilder]: For program point L585(lines 585 591) no Hoare annotation was computed. [2023-11-23 21:14:42,431 INFO L899 garLoopResultBuilder]: For program point L581(lines 581 594) no Hoare annotation was computed. [2023-11-23 21:14:42,432 INFO L899 garLoopResultBuilder]: For program point L581-1(lines 573 597) no Hoare annotation was computed. [2023-11-23 21:14:42,432 INFO L895 garLoopResultBuilder]: At program point L351(line 351) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or .cse2 .cse0 .cse1) (or .cse2 (not (= |old(~waterLevel~0)| 1)) .cse0))) [2023-11-23 21:14:42,432 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2023-11-23 21:14:42,432 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 279 302) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse3 (= 2 ~waterLevel~0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse2 (= ~waterLevel~0 1))) (or .cse0 .cse1 (and .cse2 .cse3) .cse4) (or .cse1 (not (= |old(~pumpRunning~0)| 1)) .cse4 (and .cse3 (= ~pumpRunning~0 1))))) [2023-11-23 21:14:42,432 INFO L895 garLoopResultBuilder]: At program point L356(line 356) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (= ~pumpRunning~0 0)) (.cse1 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or .cse2 (not (= |old(~waterLevel~0)| 1)) .cse0 (and .cse3 (= ~waterLevel~0 1))) (or .cse2 .cse0 (and .cse3 (= 2 ~waterLevel~0)) .cse1))) [2023-11-23 21:14:42,432 INFO L899 garLoopResultBuilder]: For program point L356-1(lines 337 361) no Hoare annotation was computed. [2023-11-23 21:14:42,433 INFO L899 garLoopResultBuilder]: For program point L290-1(lines 290 296) no Hoare annotation was computed. [2023-11-23 21:14:42,433 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 279 302) no Hoare annotation was computed. [2023-11-23 21:14:42,433 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2023-11-23 21:14:42,433 INFO L899 garLoopResultBuilder]: For program point L193(line 193) no Hoare annotation was computed. [2023-11-23 21:14:42,433 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 172 201) no Hoare annotation was computed. [2023-11-23 21:14:42,433 INFO L899 garLoopResultBuilder]: For program point L186(lines 186 190) no Hoare annotation was computed. [2023-11-23 21:14:42,433 INFO L902 garLoopResultBuilder]: At program point L186-1(lines 186 190) the Hoare annotation is: true [2023-11-23 21:14:42,434 INFO L902 garLoopResultBuilder]: At program point L182-2(lines 182 196) the Hoare annotation is: true [2023-11-23 21:14:42,434 INFO L902 garLoopResultBuilder]: At program point L178(line 178) the Hoare annotation is: true [2023-11-23 21:14:42,434 INFO L899 garLoopResultBuilder]: For program point L178-1(line 178) no Hoare annotation was computed. [2023-11-23 21:14:42,434 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 172 201) the Hoare annotation is: true [2023-11-23 21:14:42,434 INFO L899 garLoopResultBuilder]: For program point L197(lines 172 201) no Hoare annotation was computed. [2023-11-23 21:14:42,434 INFO L899 garLoopResultBuilder]: For program point L258-2(lines 258 265) no Hoare annotation was computed. [2023-11-23 21:14:42,435 INFO L895 garLoopResultBuilder]: At program point L519-2(lines 513 524) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse3 (= 2 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1)) (and .cse0 .cse3 .cse1 .cse2) (and .cse3 .cse1 .cse2 (= ~pumpRunning~0 1)))) [2023-11-23 21:14:42,435 INFO L899 garLoopResultBuilder]: For program point L503(lines 503 509) no Hoare annotation was computed. [2023-11-23 21:14:42,435 INFO L899 garLoopResultBuilder]: For program point L503-1(lines 503 509) no Hoare annotation was computed. [2023-11-23 21:14:42,435 INFO L899 garLoopResultBuilder]: For program point L532(lines 473 536) no Hoare annotation was computed. [2023-11-23 21:14:42,435 INFO L895 garLoopResultBuilder]: At program point L495(line 495) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1)) (and (= 2 ~waterLevel~0) .cse0 .cse1 (= ~pumpRunning~0 1)))) [2023-11-23 21:14:42,435 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-23 21:14:42,436 INFO L895 garLoopResultBuilder]: At program point L529(lines 482 530) the Hoare annotation is: false [2023-11-23 21:14:42,436 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-23 21:14:42,436 INFO L899 garLoopResultBuilder]: For program point L484(lines 483 528) no Hoare annotation was computed. [2023-11-23 21:14:42,436 INFO L895 garLoopResultBuilder]: At program point L505(line 505) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse3 (= 2 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1)) (and .cse0 .cse3 .cse1 .cse2) (and .cse3 .cse1 .cse2 (= ~pumpRunning~0 1)))) [2023-11-23 21:14:42,436 INFO L895 garLoopResultBuilder]: At program point L526(lines 483 528) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1)) (and (= 2 ~waterLevel~0) .cse0 .cse1 (= ~pumpRunning~0 1)))) [2023-11-23 21:14:42,436 INFO L899 garLoopResultBuilder]: For program point L493(lines 493 499) no Hoare annotation was computed. [2023-11-23 21:14:42,437 INFO L899 garLoopResultBuilder]: For program point L493-1(lines 493 499) no Hoare annotation was computed. [2023-11-23 21:14:42,437 INFO L899 garLoopResultBuilder]: For program point L258(lines 258 265) no Hoare annotation was computed. [2023-11-23 21:14:42,437 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 311 335) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (not (= ~waterLevel~0 ~systemActive~0))) (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0))))) [2023-11-23 21:14:42,437 INFO L895 garLoopResultBuilder]: At program point L325(line 325) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0))) (or .cse0 .cse1 (not (= ~waterLevel~0 ~systemActive~0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))))) [2023-11-23 21:14:42,437 INFO L899 garLoopResultBuilder]: For program point L319(lines 319 327) no Hoare annotation was computed. [2023-11-23 21:14:42,437 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 311 335) no Hoare annotation was computed. [2023-11-23 21:14:42,438 INFO L899 garLoopResultBuilder]: For program point L315(lines 315 332) no Hoare annotation was computed. [2023-11-23 21:14:42,438 INFO L895 garLoopResultBuilder]: At program point L330(line 330) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0))) (or (not (= ~waterLevel~0 1)) .cse0 .cse1))) [2023-11-23 21:14:42,438 INFO L899 garLoopResultBuilder]: For program point L330-1(lines 311 335) no Hoare annotation was computed. [2023-11-23 21:14:42,438 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 81 92) no Hoare annotation was computed. [2023-11-23 21:14:42,438 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 81 92) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= ~pumpRunning~0 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (= ~waterLevel~0 1)) (or (= 2 ~waterLevel~0) .cse0 (not (= ~pumpRunning~0 1)) (not (= |old(~waterLevel~0)| 2))))) [2023-11-23 21:14:42,441 INFO L445 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:42,443 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-23 21:14:42,464 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 09:14:42 BoogieIcfgContainer [2023-11-23 21:14:42,464 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-23 21:14:42,464 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-23 21:14:42,464 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-23 21:14:42,465 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-23 21:14:42,465 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:14:04" (3/4) ... [2023-11-23 21:14:42,468 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-23 21:14:42,471 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-23 21:14:42,471 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-23 21:14:42,472 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-23 21:14:42,472 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-23 21:14:42,472 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-23 21:14:42,472 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-23 21:14:42,481 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 44 nodes and edges [2023-11-23 21:14:42,482 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2023-11-23 21:14:42,482 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-23 21:14:42,483 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-23 21:14:42,484 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-23 21:14:42,514 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2)))) && (((!((1 == systemActive)) || !((\old(pumpRunning) == 1))) || !((\old(waterLevel) == 2))) || ((2 == waterLevel) && (pumpRunning == 1)))) [2023-11-23 21:14:42,550 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2)))) && (((!((1 == systemActive)) || !((\old(pumpRunning) == 1))) || !((\old(waterLevel) == 2))) || ((2 == waterLevel) && (pumpRunning == 1)))) [2023-11-23 21:14:42,604 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/witness.graphml [2023-11-23 21:14:42,605 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/witness.yml [2023-11-23 21:14:42,605 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-23 21:14:42,606 INFO L158 Benchmark]: Toolchain (without parser) took 39857.48ms. Allocated memory was 151.0MB in the beginning and 830.5MB in the end (delta: 679.5MB). Free memory was 104.1MB in the beginning and 373.5MB in the end (delta: -269.5MB). Peak memory consumption was 412.1MB. Max. memory is 16.1GB. [2023-11-23 21:14:42,606 INFO L158 Benchmark]: CDTParser took 0.28ms. Allocated memory is still 115.3MB. Free memory is still 66.1MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-23 21:14:42,607 INFO L158 Benchmark]: CACSL2BoogieTranslator took 602.06ms. Allocated memory is still 151.0MB. Free memory was 104.1MB in the beginning and 84.6MB in the end (delta: 19.4MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-23 21:14:42,607 INFO L158 Benchmark]: Boogie Procedure Inliner took 57.33ms. Allocated memory is still 151.0MB. Free memory was 84.6MB in the beginning and 82.3MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-23 21:14:42,608 INFO L158 Benchmark]: Boogie Preprocessor took 47.31ms. Allocated memory is still 151.0MB. Free memory was 82.3MB in the beginning and 81.0MB in the end (delta: 1.3MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-23 21:14:42,608 INFO L158 Benchmark]: RCFGBuilder took 745.29ms. Allocated memory is still 151.0MB. Free memory was 121.7MB in the beginning and 95.7MB in the end (delta: 26.0MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. [2023-11-23 21:14:42,609 INFO L158 Benchmark]: TraceAbstraction took 38238.82ms. Allocated memory was 151.0MB in the beginning and 830.5MB in the end (delta: 679.5MB). Free memory was 94.4MB in the beginning and 380.9MB in the end (delta: -286.5MB). Peak memory consumption was 392.8MB. Max. memory is 16.1GB. [2023-11-23 21:14:42,609 INFO L158 Benchmark]: Witness Printer took 140.99ms. Allocated memory is still 830.5MB. Free memory was 380.9MB in the beginning and 373.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-23 21:14:42,611 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.28ms. Allocated memory is still 115.3MB. Free memory is still 66.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 602.06ms. Allocated memory is still 151.0MB. Free memory was 104.1MB in the beginning and 84.6MB in the end (delta: 19.4MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 57.33ms. Allocated memory is still 151.0MB. Free memory was 84.6MB in the beginning and 82.3MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 47.31ms. Allocated memory is still 151.0MB. Free memory was 82.3MB in the beginning and 81.0MB in the end (delta: 1.3MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 745.29ms. Allocated memory is still 151.0MB. Free memory was 121.7MB in the beginning and 95.7MB in the end (delta: 26.0MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. * TraceAbstraction took 38238.82ms. Allocated memory was 151.0MB in the beginning and 830.5MB in the end (delta: 679.5MB). Free memory was 94.4MB in the beginning and 380.9MB in the end (delta: -286.5MB). Peak memory consumption was 392.8MB. Max. memory is 16.1GB. * Witness Printer took 140.99ms. Allocated memory is still 830.5MB. Free memory was 380.9MB in the beginning and 373.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] - GenericResultAtLocation [Line: 58]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [58] - GenericResultAtLocation [Line: 169]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [169] - GenericResultAtLocation [Line: 271]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [271] - GenericResultAtLocation [Line: 472]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [472] - GenericResultAtLocation [Line: 537]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [537] - GenericResultAtLocation [Line: 572]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [572] - GenericResultAtLocation [Line: 598]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [598] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 51 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 38.2s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 9.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2180 SdHoareTripleChecker+Valid, 3.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2148 mSDsluCounter, 2233 SdHoareTripleChecker+Invalid, 2.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1719 mSDsCounter, 1168 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3581 IncrementalHoareTripleChecker+Invalid, 4749 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1168 mSolverCounterUnsat, 514 mSDtfsCounter, 3581 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1074 GetRequests, 663 SyntacticMatches, 24 SemanticMatches, 387 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14274 ImplicationChecksByTransitivity, 14.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=621occurred in iteration=11, InterpolantAutomatonStates: 230, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 13 MinimizatonAttempts, 505 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 18 LocationsWithAnnotation, 544 PreInvPairs, 560 NumberOfFragments, 423 HoareAnnotationTreeSize, 544 FomulaSimplifications, 18589 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 18 FomulaSimplificationsInter, 8927 FormulaSimplificationTreeSizeReductionInter, 1.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 7.8s InterpolantComputationTime, 876 NumberOfCodeBlocks, 852 NumberOfCodeBlocksAsserted, 20 NumberOfCheckSat, 1054 ConstructedInterpolants, 0 QuantifiedInterpolants, 4617 SizeOfPredicates, 35 NumberOfNonLiveVariables, 1462 ConjunctsInSsa, 116 ConjunctsInUnsatCore, 22 InterpolantComputations, 10 PerfectInterpolantSequences, 408/690 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 482]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 182]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 483]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel == 1)) || ((((2 == waterLevel) && (1 == systemActive)) && (splverifierCounter == 0)) && (pumpRunning == 1))) - InvariantResult [Line: 279]: Loop Invariant Derived loop invariant: (((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2)))) && (((!((1 == systemActive)) || !((\old(pumpRunning) == 1))) || !((\old(waterLevel) == 2))) || ((2 == waterLevel) && (pumpRunning == 1)))) RESULT: Ultimate proved your program to be correct! [2023-11-23 21:14:42,650 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4d7cb867-fd3b-42c8-8873-523ee16e0703/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE