./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product50.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 30e01a73 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product50.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9cfe95aaca007f6467395901a9efc89e5ad27f0fc32ae7ae8a1fe4e27a1f35c1 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-30e01a7 [2023-11-23 21:14:49,951 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-23 21:14:50,032 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/config/svcomp-Reach-32bit-Taipan_Default.epf [2023-11-23 21:14:50,038 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-23 21:14:50,039 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-23 21:14:50,067 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-23 21:14:50,068 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-23 21:14:50,069 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-23 21:14:50,070 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-23 21:14:50,070 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-23 21:14:50,071 INFO L153 SettingsManager]: * User list type=DISABLED [2023-11-23 21:14:50,072 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-11-23 21:14:50,072 INFO L153 SettingsManager]: * Explicit value domain=true [2023-11-23 21:14:50,073 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-11-23 21:14:50,074 INFO L153 SettingsManager]: * Octagon Domain=false [2023-11-23 21:14:50,074 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-11-23 21:14:50,075 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-11-23 21:14:50,075 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-11-23 21:14:50,076 INFO L153 SettingsManager]: * Interval Domain=false [2023-11-23 21:14:50,077 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-11-23 21:14:50,077 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-11-23 21:14:50,078 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-11-23 21:14:50,079 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-23 21:14:50,080 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-23 21:14:50,080 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-23 21:14:50,081 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-23 21:14:50,081 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-23 21:14:50,082 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-23 21:14:50,083 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-23 21:14:50,083 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-23 21:14:50,083 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-23 21:14:50,084 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-23 21:14:50,084 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-23 21:14:50,085 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-23 21:14:50,085 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-23 21:14:50,086 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-23 21:14:50,086 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-23 21:14:50,086 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 21:14:50,087 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-23 21:14:50,087 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-23 21:14:50,088 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-23 21:14:50,089 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-11-23 21:14:50,089 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-23 21:14:50,089 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-23 21:14:50,090 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-23 21:14:50,090 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-11-23 21:14:50,091 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-23 21:14:50,091 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9cfe95aaca007f6467395901a9efc89e5ad27f0fc32ae7ae8a1fe4e27a1f35c1 [2023-11-23 21:14:50,428 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-23 21:14:50,456 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-23 21:14:50,459 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-23 21:14:50,460 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-23 21:14:50,466 INFO L274 PluginConnector]: CDTParser initialized [2023-11-23 21:14:50,467 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/../../sv-benchmarks/c/product-lines/minepump_spec5_product50.cil.c [2023-11-23 21:14:53,800 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-23 21:14:54,066 INFO L384 CDTParser]: Found 1 translation units. [2023-11-23 21:14:54,066 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/sv-benchmarks/c/product-lines/minepump_spec5_product50.cil.c [2023-11-23 21:14:54,082 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/data/60c474aad/a1486f37571045e2bd4bbb8c12a9d793/FLAG515ae0ebe [2023-11-23 21:14:54,099 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/data/60c474aad/a1486f37571045e2bd4bbb8c12a9d793 [2023-11-23 21:14:54,102 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-23 21:14:54,106 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-23 21:14:54,107 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-23 21:14:54,108 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-23 21:14:54,113 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-23 21:14:54,114 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:14:54" (1/1) ... [2023-11-23 21:14:54,116 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@445677bc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:54, skipping insertion in model container [2023-11-23 21:14:54,116 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:14:54" (1/1) ... [2023-11-23 21:14:54,193 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-23 21:14:54,373 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/sv-benchmarks/c/product-lines/minepump_spec5_product50.cil.c[1605,1618] [2023-11-23 21:14:54,592 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 21:14:54,611 INFO L202 MainTranslator]: Completed pre-run [2023-11-23 21:14:54,622 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] [2023-11-23 21:14:54,624 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [58] [2023-11-23 21:14:54,625 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [279] [2023-11-23 21:14:54,625 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [349] [2023-11-23 21:14:54,625 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [453] [2023-11-23 21:14:54,626 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [819] [2023-11-23 21:14:54,626 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [868] [2023-11-23 21:14:54,626 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [906] [2023-11-23 21:14:54,630 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/sv-benchmarks/c/product-lines/minepump_spec5_product50.cil.c[1605,1618] [2023-11-23 21:14:54,704 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 21:14:54,730 INFO L206 MainTranslator]: Completed translation [2023-11-23 21:14:54,731 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:54 WrapperNode [2023-11-23 21:14:54,731 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-23 21:14:54,733 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-23 21:14:54,733 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-23 21:14:54,733 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-23 21:14:54,740 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:54" (1/1) ... [2023-11-23 21:14:54,755 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:54" (1/1) ... [2023-11-23 21:14:54,789 INFO L138 Inliner]: procedures = 58, calls = 102, calls flagged for inlining = 26, calls inlined = 22, statements flattened = 212 [2023-11-23 21:14:54,789 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-23 21:14:54,790 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-23 21:14:54,790 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-23 21:14:54,791 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-23 21:14:54,801 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:54" (1/1) ... [2023-11-23 21:14:54,802 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:54" (1/1) ... [2023-11-23 21:14:54,805 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:54" (1/1) ... [2023-11-23 21:14:54,805 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:54" (1/1) ... [2023-11-23 21:14:54,811 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:54" (1/1) ... [2023-11-23 21:14:54,816 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:54" (1/1) ... [2023-11-23 21:14:54,818 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:54" (1/1) ... [2023-11-23 21:14:54,820 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:54" (1/1) ... [2023-11-23 21:14:54,823 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-23 21:14:54,824 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-23 21:14:54,825 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-23 21:14:54,825 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-23 21:14:54,826 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:54" (1/1) ... [2023-11-23 21:14:54,832 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 21:14:54,849 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:54,870 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-23 21:14:54,908 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-23 21:14:54,932 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-23 21:14:54,933 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-23 21:14:54,933 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-23 21:14:54,933 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-23 21:14:54,933 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-23 21:14:54,934 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-23 21:14:54,935 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-23 21:14:54,935 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-23 21:14:54,936 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-23 21:14:54,936 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-23 21:14:54,936 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-23 21:14:54,936 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-23 21:14:54,936 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-23 21:14:54,936 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-23 21:14:54,939 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-23 21:14:54,939 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-23 21:14:54,939 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-23 21:14:54,939 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-23 21:14:55,017 INFO L241 CfgBuilder]: Building ICFG [2023-11-23 21:14:55,019 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-23 21:14:55,374 INFO L282 CfgBuilder]: Performing block encoding [2023-11-23 21:14:55,542 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-23 21:14:55,542 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-23 21:14:55,544 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:14:55 BoogieIcfgContainer [2023-11-23 21:14:55,545 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-23 21:14:55,547 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-23 21:14:55,548 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-23 21:14:55,551 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-23 21:14:55,552 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 09:14:54" (1/3) ... [2023-11-23 21:14:55,552 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@669b4a5f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 09:14:55, skipping insertion in model container [2023-11-23 21:14:55,553 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:54" (2/3) ... [2023-11-23 21:14:55,553 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@669b4a5f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 09:14:55, skipping insertion in model container [2023-11-23 21:14:55,553 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:14:55" (3/3) ... [2023-11-23 21:14:55,555 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product50.cil.c [2023-11-23 21:14:55,576 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-23 21:14:55,576 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-23 21:14:55,630 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-23 21:14:55,635 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@20e578ee, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-23 21:14:55,636 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-23 21:14:55,639 INFO L276 IsEmpty]: Start isEmpty. Operand has 58 states, 37 states have (on average 1.4324324324324325) internal successors, (53), 45 states have internal predecessors, (53), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-23 21:14:55,648 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-23 21:14:55,649 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:55,649 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:55,650 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:55,654 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:55,655 INFO L85 PathProgramCache]: Analyzing trace with hash -1895487654, now seen corresponding path program 1 times [2023-11-23 21:14:55,663 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:55,664 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1388820940] [2023-11-23 21:14:55,664 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:55,665 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:55,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:55,936 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-23 21:14:55,936 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:55,937 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1388820940] [2023-11-23 21:14:55,938 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1388820940] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:55,938 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:55,938 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-23 21:14:55,940 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [431088712] [2023-11-23 21:14:55,941 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:55,954 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-23 21:14:55,955 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:56,003 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-23 21:14:56,007 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-23 21:14:56,010 INFO L87 Difference]: Start difference. First operand has 58 states, 37 states have (on average 1.4324324324324325) internal successors, (53), 45 states have internal predecessors, (53), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-23 21:14:56,136 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:56,137 INFO L93 Difference]: Finished difference Result 114 states and 155 transitions. [2023-11-23 21:14:56,138 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-23 21:14:56,139 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 21 [2023-11-23 21:14:56,140 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:56,151 INFO L225 Difference]: With dead ends: 114 [2023-11-23 21:14:56,151 INFO L226 Difference]: Without dead ends: 53 [2023-11-23 21:14:56,157 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-23 21:14:56,162 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 57 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:56,163 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 57 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:14:56,183 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2023-11-23 21:14:56,218 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2023-11-23 21:14:56,220 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 41 states have internal predecessors, (45), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-23 21:14:56,227 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 68 transitions. [2023-11-23 21:14:56,228 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 68 transitions. Word has length 21 [2023-11-23 21:14:56,229 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:56,229 INFO L495 AbstractCegarLoop]: Abstraction has 53 states and 68 transitions. [2023-11-23 21:14:56,230 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-23 21:14:56,231 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 68 transitions. [2023-11-23 21:14:56,236 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2023-11-23 21:14:56,236 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:56,237 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:56,237 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-23 21:14:56,237 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:56,238 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:56,239 INFO L85 PathProgramCache]: Analyzing trace with hash -1077094405, now seen corresponding path program 1 times [2023-11-23 21:14:56,239 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:56,239 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1539583928] [2023-11-23 21:14:56,239 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:56,240 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:56,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:56,391 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-23 21:14:56,391 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:56,392 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1539583928] [2023-11-23 21:14:56,392 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1539583928] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:56,392 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:56,392 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-23 21:14:56,393 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1526381764] [2023-11-23 21:14:56,393 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:56,395 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 21:14:56,395 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:56,396 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 21:14:56,396 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:14:56,397 INFO L87 Difference]: Start difference. First operand 53 states and 68 transitions. Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-23 21:14:56,454 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:56,455 INFO L93 Difference]: Finished difference Result 83 states and 107 transitions. [2023-11-23 21:14:56,455 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 21:14:56,455 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 22 [2023-11-23 21:14:56,456 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:56,459 INFO L225 Difference]: With dead ends: 83 [2023-11-23 21:14:56,459 INFO L226 Difference]: Without dead ends: 45 [2023-11-23 21:14:56,465 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:14:56,468 INFO L413 NwaCegarLoop]: 43 mSDtfsCounter, 7 mSDsluCounter, 34 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 77 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:56,468 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 77 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 21:14:56,472 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2023-11-23 21:14:56,486 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2023-11-23 21:14:56,486 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 29 states have (on average 1.3448275862068966) internal successors, (39), 36 states have internal predecessors, (39), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-23 21:14:56,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 57 transitions. [2023-11-23 21:14:56,494 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 57 transitions. Word has length 22 [2023-11-23 21:14:56,494 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:56,495 INFO L495 AbstractCegarLoop]: Abstraction has 45 states and 57 transitions. [2023-11-23 21:14:56,495 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-23 21:14:56,495 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 57 transitions. [2023-11-23 21:14:56,497 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-11-23 21:14:56,497 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:56,498 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:56,498 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-23 21:14:56,498 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:56,499 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:56,499 INFO L85 PathProgramCache]: Analyzing trace with hash 704334258, now seen corresponding path program 1 times [2023-11-23 21:14:56,499 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:56,501 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1060025588] [2023-11-23 21:14:56,502 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:56,504 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:56,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:56,815 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-23 21:14:56,815 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:56,816 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1060025588] [2023-11-23 21:14:56,817 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1060025588] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:56,818 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:56,819 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-23 21:14:56,819 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [234334815] [2023-11-23 21:14:56,820 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:56,821 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-23 21:14:56,821 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:56,822 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-23 21:14:56,822 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-23 21:14:56,823 INFO L87 Difference]: Start difference. First operand 45 states and 57 transitions. Second operand has 6 states, 5 states have (on average 3.8) internal successors, (19), 5 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-23 21:14:57,046 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:57,046 INFO L93 Difference]: Finished difference Result 124 states and 161 transitions. [2023-11-23 21:14:57,047 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-23 21:14:57,047 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 3.8) internal successors, (19), 5 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 24 [2023-11-23 21:14:57,048 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:57,051 INFO L225 Difference]: With dead ends: 124 [2023-11-23 21:14:57,051 INFO L226 Difference]: Without dead ends: 81 [2023-11-23 21:14:57,057 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-23 21:14:57,059 INFO L413 NwaCegarLoop]: 47 mSDtfsCounter, 30 mSDsluCounter, 153 mSDsCounter, 0 mSdLazyCounter, 108 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 31 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 114 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 108 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:57,060 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [31 Valid, 200 Invalid, 114 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:14:57,061 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2023-11-23 21:14:57,074 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 79. [2023-11-23 21:14:57,075 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 79 states, 52 states have (on average 1.2692307692307692) internal successors, (66), 59 states have internal predecessors, (66), 14 states have call successors, (14), 12 states have call predecessors, (14), 12 states have return successors, (18), 14 states have call predecessors, (18), 14 states have call successors, (18) [2023-11-23 21:14:57,076 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 98 transitions. [2023-11-23 21:14:57,077 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 98 transitions. Word has length 24 [2023-11-23 21:14:57,077 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:57,077 INFO L495 AbstractCegarLoop]: Abstraction has 79 states and 98 transitions. [2023-11-23 21:14:57,078 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 3.8) internal successors, (19), 5 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-23 21:14:57,078 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 98 transitions. [2023-11-23 21:14:57,079 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-23 21:14:57,079 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:57,080 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:57,080 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-23 21:14:57,080 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:57,080 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:57,081 INFO L85 PathProgramCache]: Analyzing trace with hash 1050857119, now seen corresponding path program 1 times [2023-11-23 21:14:57,081 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:57,081 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [285085331] [2023-11-23 21:14:57,081 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:57,082 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:57,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:57,431 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-23 21:14:57,431 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:57,431 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [285085331] [2023-11-23 21:14:57,431 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [285085331] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:57,432 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:57,432 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-23 21:14:57,432 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [833694487] [2023-11-23 21:14:57,432 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:57,433 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-23 21:14:57,433 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:57,433 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-23 21:14:57,433 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2023-11-23 21:14:57,434 INFO L87 Difference]: Start difference. First operand 79 states and 98 transitions. Second operand has 6 states, 6 states have (on average 4.0) internal successors, (24), 6 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-23 21:14:57,585 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:57,585 INFO L93 Difference]: Finished difference Result 235 states and 293 transitions. [2023-11-23 21:14:57,586 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-23 21:14:57,586 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 6 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 32 [2023-11-23 21:14:57,586 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:57,588 INFO L225 Difference]: With dead ends: 235 [2023-11-23 21:14:57,589 INFO L226 Difference]: Without dead ends: 158 [2023-11-23 21:14:57,589 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=26, Unknown=0, NotChecked=0, Total=42 [2023-11-23 21:14:57,590 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 89 mSDsluCounter, 113 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 90 SdHoareTripleChecker+Valid, 182 SdHoareTripleChecker+Invalid, 141 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:57,591 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [90 Valid, 182 Invalid, 141 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:14:57,592 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 158 states. [2023-11-23 21:14:57,613 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 158 to 152. [2023-11-23 21:14:57,614 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 152 states, 99 states have (on average 1.2424242424242424) internal successors, (123), 110 states have internal predecessors, (123), 28 states have call successors, (28), 24 states have call predecessors, (28), 24 states have return successors, (37), 26 states have call predecessors, (37), 28 states have call successors, (37) [2023-11-23 21:14:57,616 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 188 transitions. [2023-11-23 21:14:57,616 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 188 transitions. Word has length 32 [2023-11-23 21:14:57,616 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:57,616 INFO L495 AbstractCegarLoop]: Abstraction has 152 states and 188 transitions. [2023-11-23 21:14:57,617 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 6 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-23 21:14:57,617 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 188 transitions. [2023-11-23 21:14:57,618 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2023-11-23 21:14:57,619 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:57,619 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:57,619 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-23 21:14:57,619 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:57,620 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:57,620 INFO L85 PathProgramCache]: Analyzing trace with hash 650227895, now seen corresponding path program 1 times [2023-11-23 21:14:57,620 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:57,620 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1417186499] [2023-11-23 21:14:57,620 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:57,621 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:57,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:57,882 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-23 21:14:57,882 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:57,882 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1417186499] [2023-11-23 21:14:57,883 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1417186499] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:57,883 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:57,884 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-23 21:14:57,885 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [181284499] [2023-11-23 21:14:57,886 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:57,887 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-23 21:14:57,887 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:57,888 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-23 21:14:57,888 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2023-11-23 21:14:57,888 INFO L87 Difference]: Start difference. First operand 152 states and 188 transitions. Second operand has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-23 21:14:58,308 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:58,308 INFO L93 Difference]: Finished difference Result 364 states and 461 transitions. [2023-11-23 21:14:58,309 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2023-11-23 21:14:58,309 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 35 [2023-11-23 21:14:58,309 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:58,312 INFO L225 Difference]: With dead ends: 364 [2023-11-23 21:14:58,313 INFO L226 Difference]: Without dead ends: 262 [2023-11-23 21:14:58,313 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 30 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2023-11-23 21:14:58,314 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 219 mSDsluCounter, 126 mSDsCounter, 0 mSdLazyCounter, 208 mSolverCounterSat, 95 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 224 SdHoareTripleChecker+Valid, 183 SdHoareTripleChecker+Invalid, 303 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 95 IncrementalHoareTripleChecker+Valid, 208 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:58,315 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [224 Valid, 183 Invalid, 303 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [95 Valid, 208 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-23 21:14:58,316 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 262 states. [2023-11-23 21:14:58,347 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 262 to 228. [2023-11-23 21:14:58,348 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 228 states, 153 states have (on average 1.2549019607843137) internal successors, (192), 169 states have internal predecessors, (192), 39 states have call successors, (39), 30 states have call predecessors, (39), 35 states have return successors, (54), 41 states have call predecessors, (54), 39 states have call successors, (54) [2023-11-23 21:14:58,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 228 states to 228 states and 285 transitions. [2023-11-23 21:14:58,351 INFO L78 Accepts]: Start accepts. Automaton has 228 states and 285 transitions. Word has length 35 [2023-11-23 21:14:58,351 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:58,351 INFO L495 AbstractCegarLoop]: Abstraction has 228 states and 285 transitions. [2023-11-23 21:14:58,352 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-23 21:14:58,352 INFO L276 IsEmpty]: Start isEmpty. Operand 228 states and 285 transitions. [2023-11-23 21:14:58,354 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2023-11-23 21:14:58,354 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:58,355 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:58,355 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-23 21:14:58,355 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:58,356 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:58,356 INFO L85 PathProgramCache]: Analyzing trace with hash 285664101, now seen corresponding path program 1 times [2023-11-23 21:14:58,356 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:58,356 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1954050750] [2023-11-23 21:14:58,356 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:58,357 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:58,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:58,465 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-23 21:14:58,465 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:58,466 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1954050750] [2023-11-23 21:14:58,466 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1954050750] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:58,466 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:58,466 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-23 21:14:58,467 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1872028017] [2023-11-23 21:14:58,467 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:58,467 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-23 21:14:58,467 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:58,468 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-23 21:14:58,468 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-23 21:14:58,469 INFO L87 Difference]: Start difference. First operand 228 states and 285 transitions. Second operand has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2023-11-23 21:14:58,544 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:58,544 INFO L93 Difference]: Finished difference Result 454 states and 574 transitions. [2023-11-23 21:14:58,545 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-23 21:14:58,545 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 52 [2023-11-23 21:14:58,546 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:58,548 INFO L225 Difference]: With dead ends: 454 [2023-11-23 21:14:58,548 INFO L226 Difference]: Without dead ends: 228 [2023-11-23 21:14:58,549 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-23 21:14:58,550 INFO L413 NwaCegarLoop]: 38 mSDtfsCounter, 44 mSDsluCounter, 32 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 70 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:58,551 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 70 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 21:14:58,552 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 228 states. [2023-11-23 21:14:58,582 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 228 to 228. [2023-11-23 21:14:58,584 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 228 states, 153 states have (on average 1.2222222222222223) internal successors, (187), 169 states have internal predecessors, (187), 39 states have call successors, (39), 30 states have call predecessors, (39), 35 states have return successors, (54), 41 states have call predecessors, (54), 39 states have call successors, (54) [2023-11-23 21:14:58,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 228 states to 228 states and 280 transitions. [2023-11-23 21:14:58,586 INFO L78 Accepts]: Start accepts. Automaton has 228 states and 280 transitions. Word has length 52 [2023-11-23 21:14:58,587 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:58,587 INFO L495 AbstractCegarLoop]: Abstraction has 228 states and 280 transitions. [2023-11-23 21:14:58,587 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2023-11-23 21:14:58,588 INFO L276 IsEmpty]: Start isEmpty. Operand 228 states and 280 transitions. [2023-11-23 21:14:58,590 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2023-11-23 21:14:58,590 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:58,590 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:58,591 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-23 21:14:58,591 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:58,591 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:58,592 INFO L85 PathProgramCache]: Analyzing trace with hash 2094990674, now seen corresponding path program 1 times [2023-11-23 21:14:58,592 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:58,592 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [453588022] [2023-11-23 21:14:58,592 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:58,592 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:58,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:58,723 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 16 proven. 2 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-23 21:14:58,724 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:58,724 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [453588022] [2023-11-23 21:14:58,724 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [453588022] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:58,724 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [884018614] [2023-11-23 21:14:58,725 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:58,725 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:58,725 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:58,728 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:58,762 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-23 21:14:58,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:58,871 INFO L262 TraceCheckSpWp]: Trace formula consists of 268 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-23 21:14:58,878 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:58,991 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:58,991 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-23 21:14:58,992 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [884018614] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:58,992 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-23 21:14:58,992 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5] total 6 [2023-11-23 21:14:58,992 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1191172981] [2023-11-23 21:14:58,993 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:58,993 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 21:14:58,994 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:58,994 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 21:14:58,994 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2023-11-23 21:14:58,995 INFO L87 Difference]: Start difference. First operand 228 states and 280 transitions. Second operand has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-23 21:14:59,060 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:59,061 INFO L93 Difference]: Finished difference Result 338 states and 420 transitions. [2023-11-23 21:14:59,061 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 21:14:59,062 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 60 [2023-11-23 21:14:59,062 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:59,064 INFO L225 Difference]: With dead ends: 338 [2023-11-23 21:14:59,064 INFO L226 Difference]: Without dead ends: 218 [2023-11-23 21:14:59,065 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 62 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2023-11-23 21:14:59,066 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 26 mSDsluCounter, 32 mSDsCounter, 0 mSdLazyCounter, 34 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 34 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:59,066 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 97 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 34 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 21:14:59,067 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 218 states. [2023-11-23 21:14:59,098 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 218 to 218. [2023-11-23 21:14:59,099 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 218 states, 146 states have (on average 1.1917808219178083) internal successors, (174), 161 states have internal predecessors, (174), 37 states have call successors, (37), 30 states have call predecessors, (37), 34 states have return successors, (44), 38 states have call predecessors, (44), 37 states have call successors, (44) [2023-11-23 21:14:59,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 218 states to 218 states and 255 transitions. [2023-11-23 21:14:59,101 INFO L78 Accepts]: Start accepts. Automaton has 218 states and 255 transitions. Word has length 60 [2023-11-23 21:14:59,102 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:59,102 INFO L495 AbstractCegarLoop]: Abstraction has 218 states and 255 transitions. [2023-11-23 21:14:59,102 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-23 21:14:59,102 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 255 transitions. [2023-11-23 21:14:59,104 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2023-11-23 21:14:59,104 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:59,104 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:59,126 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-23 21:14:59,320 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2023-11-23 21:14:59,321 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:14:59,321 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:59,321 INFO L85 PathProgramCache]: Analyzing trace with hash 1382605716, now seen corresponding path program 1 times [2023-11-23 21:14:59,321 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:59,322 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [451084443] [2023-11-23 21:14:59,322 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:59,322 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:59,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:59,468 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 13 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-23 21:14:59,468 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:59,469 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [451084443] [2023-11-23 21:14:59,469 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [451084443] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:59,469 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1097457703] [2023-11-23 21:14:59,469 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:59,469 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:59,469 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:59,470 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:59,497 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-23 21:14:59,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:59,575 INFO L262 TraceCheckSpWp]: Trace formula consists of 271 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-23 21:14:59,578 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:59,699 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 18 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:59,700 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:14:59,859 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 13 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-23 21:14:59,859 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1097457703] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:14:59,860 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [162328576] [2023-11-23 21:14:59,889 INFO L159 IcfgInterpreter]: Started Sifa with 41 locations of interest [2023-11-23 21:14:59,890 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:14:59,899 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:14:59,905 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:14:59,905 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:15:07,702 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 140 for LOIs [2023-11-23 21:15:07,850 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 31 for LOIs [2023-11-23 21:15:08,141 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 34 for LOIs [2023-11-23 21:15:08,150 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 50 for LOIs [2023-11-23 21:15:08,289 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 37 for LOIs [2023-11-23 21:15:08,298 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:15:11,470 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4334#(and (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (<= ~pumpRunning~0 2147483647) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~8#1| 2)) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~8#1| |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1| 0)) (<= |old(~pumpRunning~0)| 2147483647) (<= 0 (+ 2147483648 |timeShift_getWaterLevel_#res#1|)) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~8#1| 2147483647) (<= 0 (+ ~pumpRunning~0 2147483648)) (= ~switchedOnBeforeTS~0 0) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1|))' at error location [2023-11-23 21:15:11,471 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:15:11,471 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:15:11,471 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 6, 6] total 13 [2023-11-23 21:15:11,472 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [923420216] [2023-11-23 21:15:11,472 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:15:11,473 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2023-11-23 21:15:11,473 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:15:11,474 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2023-11-23 21:15:11,475 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=174, Invalid=1806, Unknown=0, NotChecked=0, Total=1980 [2023-11-23 21:15:11,475 INFO L87 Difference]: Start difference. First operand 218 states and 255 transitions. Second operand has 13 states, 10 states have (on average 7.6) internal successors, (76), 11 states have internal predecessors, (76), 5 states have call successors, (17), 4 states have call predecessors, (17), 7 states have return successors, (17), 8 states have call predecessors, (17), 5 states have call successors, (17) [2023-11-23 21:15:12,197 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:15:12,197 INFO L93 Difference]: Finished difference Result 306 states and 367 transitions. [2023-11-23 21:15:12,198 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2023-11-23 21:15:12,198 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 10 states have (on average 7.6) internal successors, (76), 11 states have internal predecessors, (76), 5 states have call successors, (17), 4 states have call predecessors, (17), 7 states have return successors, (17), 8 states have call predecessors, (17), 5 states have call successors, (17) Word has length 63 [2023-11-23 21:15:12,199 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:15:12,202 INFO L225 Difference]: With dead ends: 306 [2023-11-23 21:15:12,202 INFO L226 Difference]: Without dead ends: 304 [2023-11-23 21:15:12,205 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 219 GetRequests, 154 SyntacticMatches, 7 SemanticMatches, 58 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1121 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=303, Invalid=3237, Unknown=0, NotChecked=0, Total=3540 [2023-11-23 21:15:12,207 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 135 mSDsluCounter, 428 mSDsCounter, 0 mSdLazyCounter, 430 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 528 SdHoareTripleChecker+Invalid, 483 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 430 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-23 21:15:12,207 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [142 Valid, 528 Invalid, 483 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 430 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-23 21:15:12,208 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 304 states. [2023-11-23 21:15:12,240 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 304 to 262. [2023-11-23 21:15:12,241 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 262 states, 173 states have (on average 1.1791907514450868) internal successors, (204), 193 states have internal predecessors, (204), 46 states have call successors, (46), 38 states have call predecessors, (46), 42 states have return successors, (57), 45 states have call predecessors, (57), 46 states have call successors, (57) [2023-11-23 21:15:12,242 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 262 states to 262 states and 307 transitions. [2023-11-23 21:15:12,243 INFO L78 Accepts]: Start accepts. Automaton has 262 states and 307 transitions. Word has length 63 [2023-11-23 21:15:12,243 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:15:12,243 INFO L495 AbstractCegarLoop]: Abstraction has 262 states and 307 transitions. [2023-11-23 21:15:12,244 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 10 states have (on average 7.6) internal successors, (76), 11 states have internal predecessors, (76), 5 states have call successors, (17), 4 states have call predecessors, (17), 7 states have return successors, (17), 8 states have call predecessors, (17), 5 states have call successors, (17) [2023-11-23 21:15:12,244 INFO L276 IsEmpty]: Start isEmpty. Operand 262 states and 307 transitions. [2023-11-23 21:15:12,248 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2023-11-23 21:15:12,248 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:15:12,248 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:15:12,266 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-23 21:15:12,460 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2023-11-23 21:15:12,461 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:15:12,461 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:15:12,461 INFO L85 PathProgramCache]: Analyzing trace with hash 97848414, now seen corresponding path program 1 times [2023-11-23 21:15:12,461 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:15:12,462 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [809674625] [2023-11-23 21:15:12,462 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:15:12,462 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:15:12,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:15:12,679 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 33 proven. 3 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2023-11-23 21:15:12,680 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:15:12,680 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [809674625] [2023-11-23 21:15:12,680 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [809674625] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:15:12,680 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [4638795] [2023-11-23 21:15:12,680 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:15:12,680 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:15:12,680 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:15:12,681 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:15:12,713 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-23 21:15:12,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:15:12,790 INFO L262 TraceCheckSpWp]: Trace formula consists of 334 conjuncts, 15 conjunts are in the unsatisfiable core [2023-11-23 21:15:12,794 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:15:12,983 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 58 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-23 21:15:12,983 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:15:13,277 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 45 proven. 3 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2023-11-23 21:15:13,278 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [4638795] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:15:13,278 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [545266780] [2023-11-23 21:15:13,285 INFO L159 IcfgInterpreter]: Started Sifa with 37 locations of interest [2023-11-23 21:15:13,285 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:15:13,286 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:15:13,286 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:15:13,286 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:15:15,266 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 18 for LOIs [2023-11-23 21:15:15,272 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 31 for LOIs [2023-11-23 21:15:15,549 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 37 for LOIs [2023-11-23 21:15:15,561 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 30 for LOIs [2023-11-23 21:15:15,633 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:15:18,017 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5669#(and (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (<= ~pumpRunning~0 1) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~8#1| 2)) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp~8#1| 2147483648)) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~8#1| |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1| 0)) (<= |old(~pumpRunning~0)| 2147483647) (<= |timeShift_getWaterLevel_#res#1| 2147483647) (<= 0 ~pumpRunning~0) (= ~switchedOnBeforeTS~0 0) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1|))' at error location [2023-11-23 21:15:18,017 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:15:18,018 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:15:18,018 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 9, 9] total 20 [2023-11-23 21:15:18,018 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [257121447] [2023-11-23 21:15:18,018 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:15:18,019 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2023-11-23 21:15:18,019 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:15:18,022 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2023-11-23 21:15:18,024 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=260, Invalid=2190, Unknown=0, NotChecked=0, Total=2450 [2023-11-23 21:15:18,024 INFO L87 Difference]: Start difference. First operand 262 states and 307 transitions. Second operand has 20 states, 20 states have (on average 5.0) internal successors, (100), 20 states have internal predecessors, (100), 7 states have call successors, (18), 5 states have call predecessors, (18), 7 states have return successors, (19), 7 states have call predecessors, (19), 7 states have call successors, (19) [2023-11-23 21:15:19,545 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:15:19,546 INFO L93 Difference]: Finished difference Result 776 states and 1003 transitions. [2023-11-23 21:15:19,546 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2023-11-23 21:15:19,546 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 5.0) internal successors, (100), 20 states have internal predecessors, (100), 7 states have call successors, (18), 5 states have call predecessors, (18), 7 states have return successors, (19), 7 states have call predecessors, (19), 7 states have call successors, (19) Word has length 80 [2023-11-23 21:15:19,547 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:15:19,551 INFO L225 Difference]: With dead ends: 776 [2023-11-23 21:15:19,551 INFO L226 Difference]: Without dead ends: 508 [2023-11-23 21:15:19,554 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 293 GetRequests, 212 SyntacticMatches, 4 SemanticMatches, 77 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2023 ImplicationChecksByTransitivity, 3.2s TimeCoverageRelationStatistics Valid=675, Invalid=5487, Unknown=0, NotChecked=0, Total=6162 [2023-11-23 21:15:19,555 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 382 mSDsluCounter, 358 mSDsCounter, 0 mSdLazyCounter, 891 mSolverCounterSat, 260 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 385 SdHoareTripleChecker+Valid, 414 SdHoareTripleChecker+Invalid, 1151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 260 IncrementalHoareTripleChecker+Valid, 891 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2023-11-23 21:15:19,555 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [385 Valid, 414 Invalid, 1151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [260 Valid, 891 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2023-11-23 21:15:19,557 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 508 states. [2023-11-23 21:15:19,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 508 to 324. [2023-11-23 21:15:19,597 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 324 states, 214 states have (on average 1.1401869158878504) internal successors, (244), 236 states have internal predecessors, (244), 54 states have call successors, (54), 49 states have call predecessors, (54), 55 states have return successors, (69), 55 states have call predecessors, (69), 54 states have call successors, (69) [2023-11-23 21:15:19,599 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 324 states to 324 states and 367 transitions. [2023-11-23 21:15:19,599 INFO L78 Accepts]: Start accepts. Automaton has 324 states and 367 transitions. Word has length 80 [2023-11-23 21:15:19,618 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:15:19,619 INFO L495 AbstractCegarLoop]: Abstraction has 324 states and 367 transitions. [2023-11-23 21:15:19,619 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 5.0) internal successors, (100), 20 states have internal predecessors, (100), 7 states have call successors, (18), 5 states have call predecessors, (18), 7 states have return successors, (19), 7 states have call predecessors, (19), 7 states have call successors, (19) [2023-11-23 21:15:19,619 INFO L276 IsEmpty]: Start isEmpty. Operand 324 states and 367 transitions. [2023-11-23 21:15:19,621 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2023-11-23 21:15:19,621 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:15:19,621 INFO L195 NwaCegarLoop]: trace histogram [5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:15:19,636 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-23 21:15:19,824 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2023-11-23 21:15:19,825 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:15:19,825 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:15:19,825 INFO L85 PathProgramCache]: Analyzing trace with hash 2071870669, now seen corresponding path program 1 times [2023-11-23 21:15:19,826 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:15:19,826 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1651538149] [2023-11-23 21:15:19,826 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:15:19,826 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:15:19,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:15:20,903 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 14 proven. 37 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2023-11-23 21:15:20,904 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:15:20,904 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1651538149] [2023-11-23 21:15:20,904 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1651538149] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:15:20,904 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [786930306] [2023-11-23 21:15:20,904 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:15:20,905 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:15:20,905 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:15:20,906 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:15:20,932 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-11-23 21:15:21,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:15:21,010 INFO L262 TraceCheckSpWp]: Trace formula consists of 348 conjuncts, 29 conjunts are in the unsatisfiable core [2023-11-23 21:15:21,014 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:15:21,448 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 53 proven. 17 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-23 21:15:21,449 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:15:22,152 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 49 proven. 5 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2023-11-23 21:15:22,152 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [786930306] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:15:22,152 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1825959093] [2023-11-23 21:15:22,157 INFO L159 IcfgInterpreter]: Started Sifa with 37 locations of interest [2023-11-23 21:15:22,157 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:15:22,158 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:15:22,158 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:15:22,158 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:15:27,278 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 18 for LOIs [2023-11-23 21:15:27,282 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 32 for LOIs [2023-11-23 21:15:27,478 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 37 for LOIs [2023-11-23 21:15:27,487 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 30 for LOIs [2023-11-23 21:15:27,527 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:15:30,177 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7809#(and (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (<= 0 |old(~pumpRunning~0)|) (<= ~pumpRunning~0 1) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~8#1| 2)) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~8#1| |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1| 0)) (<= |old(~pumpRunning~0)| 2147483647) (<= 0 (+ ~waterLevel~0 2147483648)) (<= ~waterLevel~0 2147483647) (<= 0 ~pumpRunning~0) (= ~switchedOnBeforeTS~0 0) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1|))' at error location [2023-11-23 21:15:30,177 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:15:30,177 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:15:30,178 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 12, 11] total 35 [2023-11-23 21:15:30,178 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1043661326] [2023-11-23 21:15:30,178 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:15:30,179 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2023-11-23 21:15:30,179 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:15:30,180 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2023-11-23 21:15:30,182 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=475, Invalid=3685, Unknown=0, NotChecked=0, Total=4160 [2023-11-23 21:15:30,182 INFO L87 Difference]: Start difference. First operand 324 states and 367 transitions. Second operand has 35 states, 34 states have (on average 4.088235294117647) internal successors, (139), 34 states have internal predecessors, (139), 16 states have call successors, (25), 7 states have call predecessors, (25), 12 states have return successors, (24), 16 states have call predecessors, (24), 15 states have call successors, (24) [2023-11-23 21:15:32,645 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:15:32,645 INFO L93 Difference]: Finished difference Result 839 states and 981 transitions. [2023-11-23 21:15:32,646 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2023-11-23 21:15:32,646 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 34 states have (on average 4.088235294117647) internal successors, (139), 34 states have internal predecessors, (139), 16 states have call successors, (25), 7 states have call predecessors, (25), 12 states have return successors, (24), 16 states have call predecessors, (24), 15 states have call successors, (24) Word has length 85 [2023-11-23 21:15:32,647 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:15:32,647 INFO L225 Difference]: With dead ends: 839 [2023-11-23 21:15:32,647 INFO L226 Difference]: Without dead ends: 0 [2023-11-23 21:15:32,658 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 328 GetRequests, 230 SyntacticMatches, 5 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3439 ImplicationChecksByTransitivity, 4.1s TimeCoverageRelationStatistics Valid=1106, Invalid=7824, Unknown=0, NotChecked=0, Total=8930 [2023-11-23 21:15:32,659 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 879 mSDsluCounter, 801 mSDsCounter, 0 mSdLazyCounter, 1780 mSolverCounterSat, 695 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 884 SdHoareTripleChecker+Valid, 905 SdHoareTripleChecker+Invalid, 2475 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 695 IncrementalHoareTripleChecker+Valid, 1780 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2023-11-23 21:15:32,659 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [884 Valid, 905 Invalid, 2475 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [695 Valid, 1780 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2023-11-23 21:15:32,661 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-23 21:15:32,661 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-23 21:15:32,661 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:15:32,661 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-23 21:15:32,662 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 85 [2023-11-23 21:15:32,663 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:15:32,663 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-23 21:15:32,663 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 34 states have (on average 4.088235294117647) internal successors, (139), 34 states have internal predecessors, (139), 16 states have call successors, (25), 7 states have call predecessors, (25), 12 states have return successors, (24), 16 states have call predecessors, (24), 15 states have call successors, (24) [2023-11-23 21:15:32,664 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-23 21:15:32,664 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-23 21:15:32,667 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-23 21:15:32,695 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2023-11-23 21:15:32,890 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-23 21:15:32,891 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-23 21:15:35,863 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 102 108) no Hoare annotation was computed. [2023-11-23 21:15:35,863 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 102 108) the Hoare annotation is: true [2023-11-23 21:15:35,863 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 377 388) the Hoare annotation is: true [2023-11-23 21:15:35,863 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 377 388) no Hoare annotation was computed. [2023-11-23 21:15:35,863 INFO L899 garLoopResultBuilder]: For program point L929(line 929) no Hoare annotation was computed. [2023-11-23 21:15:35,863 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 908 937) no Hoare annotation was computed. [2023-11-23 21:15:35,863 INFO L899 garLoopResultBuilder]: For program point L922(lines 922 926) no Hoare annotation was computed. [2023-11-23 21:15:35,864 INFO L902 garLoopResultBuilder]: At program point L922-1(lines 922 926) the Hoare annotation is: true [2023-11-23 21:15:35,864 INFO L902 garLoopResultBuilder]: At program point L918-2(lines 918 932) the Hoare annotation is: true [2023-11-23 21:15:35,864 INFO L902 garLoopResultBuilder]: At program point L914(line 914) the Hoare annotation is: true [2023-11-23 21:15:35,864 INFO L899 garLoopResultBuilder]: For program point L914-1(line 914) no Hoare annotation was computed. [2023-11-23 21:15:35,864 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 908 937) the Hoare annotation is: true [2023-11-23 21:15:35,864 INFO L899 garLoopResultBuilder]: For program point L933(lines 908 937) no Hoare annotation was computed. [2023-11-23 21:15:35,864 INFO L895 garLoopResultBuilder]: At program point L155(line 155) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse2 (not (= |old(~waterLevel~0)| 2)) .cse0) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse2 .cse0 .cse1))) [2023-11-23 21:15:35,864 INFO L899 garLoopResultBuilder]: For program point L155-1(lines 136 160) no Hoare annotation was computed. [2023-11-23 21:15:35,864 INFO L899 garLoopResultBuilder]: For program point L89-1(lines 89 95) no Hoare annotation was computed. [2023-11-23 21:15:35,865 INFO L895 garLoopResultBuilder]: At program point L849(line 849) the Hoare annotation is: (let ((.cse4 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse0 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~8#1| ~waterLevel~0)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse5 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 1)) (.cse6 (= 0 ~systemActive~0))) (and (or (and .cse0 .cse1 .cse2 .cse3) .cse4 (< 0 |old(~waterLevel~0)|) .cse5 .cse6 (and .cse7 .cse0 .cse1 .cse2)) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse7 (<= ~waterLevel~0 1) .cse0 .cse1) .cse6 (< 2 |old(~waterLevel~0)|)) (let ((.cse8 (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |old(~waterLevel~0)|)) (and (<= |old(~waterLevel~0)| 0) .cse1)))) (or (and .cse7 .cse8 .cse0 .cse2) (not (= |old(~waterLevel~0)| 1)) .cse4 .cse5 .cse6 (and .cse8 .cse0 .cse2 .cse3))) (let ((.cse9 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~8#1| 1)) (.cse10 (= ~waterLevel~0 1))) (or (and .cse7 .cse9 .cse10 .cse2) .cse5 (and .cse9 .cse10 .cse2 .cse3) (not (= |old(~waterLevel~0)| 2)) .cse6)))) [2023-11-23 21:15:35,865 INFO L899 garLoopResultBuilder]: For program point L849-1(line 849) no Hoare annotation was computed. [2023-11-23 21:15:35,865 INFO L899 garLoopResultBuilder]: For program point L82-2(lines 78 100) no Hoare annotation was computed. [2023-11-23 21:15:35,865 INFO L899 garLoopResultBuilder]: For program point L144(lines 144 152) no Hoare annotation was computed. [2023-11-23 21:15:35,865 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 157) no Hoare annotation was computed. [2023-11-23 21:15:35,865 INFO L895 garLoopResultBuilder]: At program point L834(line 834) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (< 2 |old(~waterLevel~0)|)) (.cse7 (not (= |old(~waterLevel~0)| 2))) (.cse1 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= 0 ~systemActive~0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 (and (= ~pumpRunning~0 0) .cse5) .cse2 .cse4) (or .cse6 .cse7 .cse2 (and (= 2 ~waterLevel~0) .cse8)) (or .cse1 .cse6 .cse7 .cse2 .cse3) (or (< 1 |old(~waterLevel~0)|) .cse1 .cse6 .cse2 (and .cse5 .cse3 .cse8)))) [2023-11-23 21:15:35,865 INFO L899 garLoopResultBuilder]: For program point L834-1(line 834) no Hoare annotation was computed. [2023-11-23 21:15:35,865 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2023-11-23 21:15:35,865 INFO L899 garLoopResultBuilder]: For program point L851(lines 851 861) no Hoare annotation was computed. [2023-11-23 21:15:35,866 INFO L899 garLoopResultBuilder]: For program point L847(lines 847 864) no Hoare annotation was computed. [2023-11-23 21:15:35,866 INFO L899 garLoopResultBuilder]: For program point L847-1(lines 839 867) no Hoare annotation was computed. [2023-11-23 21:15:35,866 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 75 101) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (< 2 |old(~waterLevel~0)|)) (.cse7 (not (= |old(~waterLevel~0)| 2))) (.cse1 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= 0 ~systemActive~0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 (and (= ~pumpRunning~0 0) .cse5) .cse2 .cse4) (or .cse6 .cse7 .cse2 (and (= 2 ~waterLevel~0) .cse8)) (or .cse1 .cse6 .cse7 .cse2 .cse3) (or (< 1 |old(~waterLevel~0)|) .cse1 .cse6 .cse2 (and .cse5 .cse3 .cse8)))) [2023-11-23 21:15:35,866 INFO L895 garLoopResultBuilder]: At program point L150(line 150) the Hoare annotation is: (let ((.cse1 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (= ~pumpRunning~0 1)) (.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (< 2 |old(~waterLevel~0)|)) (or .cse1 (< 0 |old(~waterLevel~0)|) .cse2 .cse0 (and (= |old(~waterLevel~0)| ~waterLevel~0) .cse3 .cse4)) (or (not (= |old(~waterLevel~0)| 1)) .cse1 (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse3 .cse4) .cse2 .cse0) (or .cse2 (and (= ~waterLevel~0 1) .cse3 .cse4) (not (= |old(~waterLevel~0)| 2)) .cse0))) [2023-11-23 21:15:35,866 INFO L899 garLoopResultBuilder]: For program point L852(lines 852 858) no Hoare annotation was computed. [2023-11-23 21:15:35,866 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 75 101) no Hoare annotation was computed. [2023-11-23 21:15:35,866 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2023-11-23 21:15:35,866 INFO L895 garLoopResultBuilder]: At program point L341(lines 292 342) the Hoare annotation is: false [2023-11-23 21:15:35,867 INFO L899 garLoopResultBuilder]: For program point L990(lines 990 997) no Hoare annotation was computed. [2023-11-23 21:15:35,867 INFO L899 garLoopResultBuilder]: For program point L990-2(lines 990 997) no Hoare annotation was computed. [2023-11-23 21:15:35,867 INFO L899 garLoopResultBuilder]: For program point L313(lines 313 319) no Hoare annotation was computed. [2023-11-23 21:15:35,867 INFO L899 garLoopResultBuilder]: For program point L313-1(lines 313 319) no Hoare annotation was computed. [2023-11-23 21:15:35,867 INFO L895 garLoopResultBuilder]: At program point L338(lines 293 340) the Hoare annotation is: (let ((.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (= |ULTIMATE.start_main_~tmp~9#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0))) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 (= ~waterLevel~0 1) .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= ~waterLevel~0 0) .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= ~waterLevel~0 2) .cse3) (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse3 .cse4))) [2023-11-23 21:15:35,867 INFO L895 garLoopResultBuilder]: At program point L305(line 305) the Hoare annotation is: (let ((.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (= |ULTIMATE.start_main_~tmp~9#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0))) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 (= ~waterLevel~0 1) .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= ~waterLevel~0 0) .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= ~waterLevel~0 2) .cse3) (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse3 .cse4))) [2023-11-23 21:15:35,867 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-23 21:15:35,867 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-23 21:15:35,867 INFO L895 garLoopResultBuilder]: At program point L331-2(lines 323 336) the Hoare annotation is: (let ((.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (= |ULTIMATE.start_main_~tmp~9#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0))) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 (= ~waterLevel~0 1) .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= ~waterLevel~0 0) .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= ~waterLevel~0 2) .cse3) (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse3 .cse4))) [2023-11-23 21:15:35,868 INFO L899 garLoopResultBuilder]: For program point L294(lines 293 340) no Hoare annotation was computed. [2023-11-23 21:15:35,868 INFO L895 garLoopResultBuilder]: At program point L315(line 315) the Hoare annotation is: (let ((.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (= |ULTIMATE.start_main_~tmp~9#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0))) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 (= ~waterLevel~0 1) .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= ~waterLevel~0 0) .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= ~waterLevel~0 2) .cse3) (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse3 .cse4))) [2023-11-23 21:15:35,868 INFO L899 garLoopResultBuilder]: For program point L344(lines 283 348) no Hoare annotation was computed. [2023-11-23 21:15:35,868 INFO L899 garLoopResultBuilder]: For program point L303(lines 303 309) no Hoare annotation was computed. [2023-11-23 21:15:35,868 INFO L899 garLoopResultBuilder]: For program point L303-1(lines 303 309) no Hoare annotation was computed. [2023-11-23 21:15:35,868 INFO L895 garLoopResultBuilder]: At program point L124(line 124) the Hoare annotation is: (let ((.cse0 (< ~switchedOnBeforeTS~0 1)) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse2 (and (= ~pumpRunning~0 0) (or (= 2 ~waterLevel~0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)))) (or (< 0 ~waterLevel~0) .cse0 .cse1 .cse2))) [2023-11-23 21:15:35,868 INFO L899 garLoopResultBuilder]: For program point L118(lines 118 126) no Hoare annotation was computed. [2023-11-23 21:15:35,868 INFO L899 garLoopResultBuilder]: For program point L114(lines 114 131) no Hoare annotation was computed. [2023-11-23 21:15:35,868 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 110 134) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (< ~switchedOnBeforeTS~0 1)) (.cse4 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= 0 ~systemActive~0)) (.cse5 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) (or (not (= ~waterLevel~0 1)) .cse3 .cse4 .cse2 .cse5) (or .cse0 .cse1 (< 1 ~waterLevel~0) .cse2) (or (< 0 ~waterLevel~0) .cse3 .cse4 .cse2 .cse5))) [2023-11-23 21:15:35,869 INFO L895 garLoopResultBuilder]: At program point L129(line 129) the Hoare annotation is: (let ((.cse1 (< ~switchedOnBeforeTS~0 1)) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (= 0 ~systemActive~0)) (.cse3 (= ~pumpRunning~0 1))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (not (= ~waterLevel~0 1)) .cse1 .cse2 .cse0 .cse3) (or (< 0 ~waterLevel~0) .cse1 .cse2 .cse0 .cse3))) [2023-11-23 21:15:35,869 INFO L899 garLoopResultBuilder]: For program point L129-1(lines 110 134) no Hoare annotation was computed. [2023-11-23 21:15:35,869 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 110 134) no Hoare annotation was computed. [2023-11-23 21:15:35,869 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 365 376) no Hoare annotation was computed. [2023-11-23 21:15:35,869 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 365 376) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= ~pumpRunning~0 0))) (.cse4 (= 2 ~waterLevel~0)) (.cse0 (not (= ~pumpRunning~0 1))) (.cse5 (not (= |old(~waterLevel~0)| 2))) (.cse2 (= 0 ~systemActive~0))) (and (or (< ~switchedOnBeforeTS~0 1) .cse0 .cse1 .cse2 (< 2 |old(~waterLevel~0)|)) (or (< 1 |old(~waterLevel~0)|) .cse3 .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse2) (or .cse4 .cse0 .cse5 .cse2))) [2023-11-23 21:15:35,869 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 188 196) no Hoare annotation was computed. [2023-11-23 21:15:35,869 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 188 196) the Hoare annotation is: true [2023-11-23 21:15:35,872 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:15:35,877 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-23 21:15:35,895 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 09:15:35 BoogieIcfgContainer [2023-11-23 21:15:35,896 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-23 21:15:35,896 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-23 21:15:35,896 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-23 21:15:35,897 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-23 21:15:35,897 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:14:55" (3/4) ... [2023-11-23 21:15:35,901 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-23 21:15:35,904 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-23 21:15:35,904 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-23 21:15:35,904 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-23 21:15:35,905 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-23 21:15:35,905 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-23 21:15:35,905 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-23 21:15:35,905 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-23 21:15:35,923 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 47 nodes and edges [2023-11-23 21:15:35,924 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2023-11-23 21:15:35,925 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-23 21:15:35,926 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-23 21:15:35,926 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-23 21:15:36,074 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/witness.graphml [2023-11-23 21:15:36,075 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/witness.yml [2023-11-23 21:15:36,075 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-23 21:15:36,076 INFO L158 Benchmark]: Toolchain (without parser) took 41970.07ms. Allocated memory was 184.5MB in the beginning and 1.1GB in the end (delta: 929.0MB). Free memory was 137.3MB in the beginning and 443.2MB in the end (delta: -305.9MB). Peak memory consumption was 624.8MB. Max. memory is 16.1GB. [2023-11-23 21:15:36,076 INFO L158 Benchmark]: CDTParser took 0.36ms. Allocated memory is still 134.2MB. Free memory is still 79.3MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-23 21:15:36,077 INFO L158 Benchmark]: CACSL2BoogieTranslator took 624.47ms. Allocated memory is still 184.5MB. Free memory was 137.3MB in the beginning and 117.7MB in the end (delta: 19.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-23 21:15:36,077 INFO L158 Benchmark]: Boogie Procedure Inliner took 56.92ms. Allocated memory is still 184.5MB. Free memory was 117.7MB in the beginning and 115.2MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-23 21:15:36,077 INFO L158 Benchmark]: Boogie Preprocessor took 33.42ms. Allocated memory is still 184.5MB. Free memory was 115.2MB in the beginning and 113.5MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-23 21:15:36,078 INFO L158 Benchmark]: RCFGBuilder took 720.41ms. Allocated memory is still 184.5MB. Free memory was 113.5MB in the beginning and 134.6MB in the end (delta: -21.1MB). Peak memory consumption was 11.7MB. Max. memory is 16.1GB. [2023-11-23 21:15:36,079 INFO L158 Benchmark]: TraceAbstraction took 40348.29ms. Allocated memory was 184.5MB in the beginning and 1.1GB in the end (delta: 929.0MB). Free memory was 133.6MB in the beginning and 450.5MB in the end (delta: -316.9MB). Peak memory consumption was 613.2MB. Max. memory is 16.1GB. [2023-11-23 21:15:36,079 INFO L158 Benchmark]: Witness Printer took 178.62ms. Allocated memory is still 1.1GB. Free memory was 450.5MB in the beginning and 443.2MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-23 21:15:36,082 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.36ms. Allocated memory is still 134.2MB. Free memory is still 79.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 624.47ms. Allocated memory is still 184.5MB. Free memory was 137.3MB in the beginning and 117.7MB in the end (delta: 19.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 56.92ms. Allocated memory is still 184.5MB. Free memory was 117.7MB in the beginning and 115.2MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 33.42ms. Allocated memory is still 184.5MB. Free memory was 115.2MB in the beginning and 113.5MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 720.41ms. Allocated memory is still 184.5MB. Free memory was 113.5MB in the beginning and 134.6MB in the end (delta: -21.1MB). Peak memory consumption was 11.7MB. Max. memory is 16.1GB. * TraceAbstraction took 40348.29ms. Allocated memory was 184.5MB in the beginning and 1.1GB in the end (delta: 929.0MB). Free memory was 133.6MB in the beginning and 450.5MB in the end (delta: -316.9MB). Peak memory consumption was 613.2MB. Max. memory is 16.1GB. * Witness Printer took 178.62ms. Allocated memory is still 1.1GB. Free memory was 450.5MB in the beginning and 443.2MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] - GenericResultAtLocation [Line: 58]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [58] - GenericResultAtLocation [Line: 279]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [279] - GenericResultAtLocation [Line: 349]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [349] - GenericResultAtLocation [Line: 453]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [453] - GenericResultAtLocation [Line: 819]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [819] - GenericResultAtLocation [Line: 868]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [868] - GenericResultAtLocation [Line: 906]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [906] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 58 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 40.3s, OverallIterations: 10, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 6.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1836 SdHoareTripleChecker+Valid, 3.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1811 mSDsluCounter, 2713 SdHoareTripleChecker+Invalid, 2.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2077 mSDsCounter, 1137 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3643 IncrementalHoareTripleChecker+Invalid, 4780 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1137 mSolverCounterUnsat, 636 mSDtfsCounter, 3643 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 957 GetRequests, 680 SyntacticMatches, 16 SemanticMatches, 261 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6618 ImplicationChecksByTransitivity, 11.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=324occurred in iteration=9, InterpolantAutomatonStates: 135, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 10 MinimizatonAttempts, 268 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 21 LocationsWithAnnotation, 629 PreInvPairs, 724 NumberOfFragments, 1030 HoareAnnotationTreeSize, 629 FomulaSimplifications, 8631 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 21 FomulaSimplificationsInter, 8268 FormulaSimplificationTreeSizeReductionInter, 2.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 4.7s InterpolantComputationTime, 762 NumberOfCodeBlocks, 762 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 973 ConstructedInterpolants, 0 QuantifiedInterpolants, 3053 SizeOfPredicates, 19 NumberOfNonLiveVariables, 1221 ConjunctsInSsa, 56 ConjunctsInUnsatCore, 17 InterpolantComputations, 7 PerfectInterpolantSequences, 492/581 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 293]: Loop Invariant Derived loop invariant: (((((((((tmp == 1) && (splverifierCounter == 0)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))) && (pumpRunning == 1)) || ((((((tmp == 1) && (splverifierCounter == 0)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))) && (pumpRunning == 1))) || (((((pumpRunning == 0) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive)))) || (((((2 == waterLevel) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) && (pumpRunning == 1))) - InvariantResult [Line: 292]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 918]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-23 21:15:36,123 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5507b6a7-91ee-46c2-ba21-25153efee813/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE