./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aef121e0 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 242c9b24ea8c293cca4af0028144a97f9048375edcd4379fb21e62564563d3d5 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-aef121e [2021-11-23 02:22:01,473 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-23 02:22:01,475 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-23 02:22:01,524 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-23 02:22:01,525 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-23 02:22:01,529 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-23 02:22:01,531 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-23 02:22:01,534 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-23 02:22:01,537 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-23 02:22:01,542 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-23 02:22:01,543 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-23 02:22:01,545 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-23 02:22:01,545 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-23 02:22:01,548 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-23 02:22:01,550 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-23 02:22:01,556 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-23 02:22:01,558 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-23 02:22:01,559 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-23 02:22:01,561 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-23 02:22:01,568 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-23 02:22:01,570 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-23 02:22:01,571 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-23 02:22:01,574 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-23 02:22:01,575 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-23 02:22:01,584 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-23 02:22:01,584 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-23 02:22:01,585 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-23 02:22:01,586 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-23 02:22:01,587 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-23 02:22:01,588 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-23 02:22:01,589 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-23 02:22:01,589 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-23 02:22:01,591 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-23 02:22:01,592 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-23 02:22:01,594 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-23 02:22:01,594 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-23 02:22:01,594 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-23 02:22:01,595 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-23 02:22:01,595 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-23 02:22:01,596 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-23 02:22:01,596 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-23 02:22:01,598 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-32bit-Taipan_Default.epf [2021-11-23 02:22:01,643 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-23 02:22:01,643 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-23 02:22:01,644 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-23 02:22:01,644 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-23 02:22:01,645 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-23 02:22:01,645 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-23 02:22:01,645 INFO L138 SettingsManager]: * User list type=DISABLED [2021-11-23 02:22:01,646 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2021-11-23 02:22:01,646 INFO L138 SettingsManager]: * Explicit value domain=true [2021-11-23 02:22:01,646 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2021-11-23 02:22:01,646 INFO L138 SettingsManager]: * Octagon Domain=false [2021-11-23 02:22:01,647 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2021-11-23 02:22:01,647 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2021-11-23 02:22:01,647 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2021-11-23 02:22:01,647 INFO L138 SettingsManager]: * Interval Domain=false [2021-11-23 02:22:01,648 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2021-11-23 02:22:01,648 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2021-11-23 02:22:01,648 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2021-11-23 02:22:01,649 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-23 02:22:01,649 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-23 02:22:01,649 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-23 02:22:01,650 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-23 02:22:01,650 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-23 02:22:01,650 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-23 02:22:01,650 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-23 02:22:01,651 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-23 02:22:01,651 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-23 02:22:01,651 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-23 02:22:01,651 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-23 02:22:01,652 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-23 02:22:01,652 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-23 02:22:01,652 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-23 02:22:01,652 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 02:22:01,653 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-23 02:22:01,653 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-23 02:22:01,653 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-23 02:22:01,654 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2021-11-23 02:22:01,654 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-23 02:22:01,654 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-23 02:22:01,654 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-23 02:22:01,655 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-23 02:22:01,655 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 242c9b24ea8c293cca4af0028144a97f9048375edcd4379fb21e62564563d3d5 [2021-11-23 02:22:01,900 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-23 02:22:01,921 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-23 02:22:01,923 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-23 02:22:01,925 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-23 02:22:01,926 INFO L275 PluginConnector]: CDTParser initialized [2021-11-23 02:22:01,927 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/../../sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c [2021-11-23 02:22:02,000 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/data/f970dbe07/f546e590ddea4fa3b7c28332b1d2a7dd/FLAG7851b50ec [2021-11-23 02:22:02,489 INFO L306 CDTParser]: Found 1 translation units. [2021-11-23 02:22:02,489 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c [2021-11-23 02:22:02,514 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/data/f970dbe07/f546e590ddea4fa3b7c28332b1d2a7dd/FLAG7851b50ec [2021-11-23 02:22:02,846 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/data/f970dbe07/f546e590ddea4fa3b7c28332b1d2a7dd [2021-11-23 02:22:02,848 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-23 02:22:02,849 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-23 02:22:02,850 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-23 02:22:02,850 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-23 02:22:02,854 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-23 02:22:02,855 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:22:02" (1/1) ... [2021-11-23 02:22:02,856 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6654de61 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:22:02, skipping insertion in model container [2021-11-23 02:22:02,856 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:22:02" (1/1) ... [2021-11-23 02:22:02,862 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-23 02:22:02,913 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-23 02:22:03,134 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c[9329,9342] [2021-11-23 02:22:03,182 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 02:22:03,190 INFO L203 MainTranslator]: Completed pre-run [2021-11-23 02:22:03,231 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c[9329,9342] [2021-11-23 02:22:03,264 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 02:22:03,282 INFO L208 MainTranslator]: Completed translation [2021-11-23 02:22:03,283 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:22:03 WrapperNode [2021-11-23 02:22:03,283 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-23 02:22:03,284 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-23 02:22:03,284 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-23 02:22:03,284 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-23 02:22:03,292 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:22:03" (1/1) ... [2021-11-23 02:22:03,322 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:22:03" (1/1) ... [2021-11-23 02:22:03,370 INFO L137 Inliner]: procedures = 57, calls = 157, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 262 [2021-11-23 02:22:03,370 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-23 02:22:03,371 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-23 02:22:03,371 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-23 02:22:03,371 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-23 02:22:03,395 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:22:03" (1/1) ... [2021-11-23 02:22:03,396 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:22:03" (1/1) ... [2021-11-23 02:22:03,399 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:22:03" (1/1) ... [2021-11-23 02:22:03,399 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:22:03" (1/1) ... [2021-11-23 02:22:03,407 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:22:03" (1/1) ... [2021-11-23 02:22:03,414 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:22:03" (1/1) ... [2021-11-23 02:22:03,416 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:22:03" (1/1) ... [2021-11-23 02:22:03,419 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-23 02:22:03,420 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-23 02:22:03,420 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-23 02:22:03,420 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-23 02:22:03,421 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:22:03" (1/1) ... [2021-11-23 02:22:03,442 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 02:22:03,454 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 02:22:03,466 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-23 02:22:03,492 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-23 02:22:03,508 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-23 02:22:03,509 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-23 02:22:03,509 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-23 02:22:03,509 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-11-23 02:22:03,509 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-11-23 02:22:03,510 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-23 02:22:03,510 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-23 02:22:03,510 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-23 02:22:03,510 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-23 02:22:03,510 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 02:22:03,511 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 02:22:03,511 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-23 02:22:03,511 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-23 02:22:03,511 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-11-23 02:22:03,511 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-11-23 02:22:03,511 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-23 02:22:03,512 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-23 02:22:03,512 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-23 02:22:03,512 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-23 02:22:03,512 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-23 02:22:03,623 INFO L236 CfgBuilder]: Building ICFG [2021-11-23 02:22:03,645 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-23 02:22:03,922 INFO L277 CfgBuilder]: Performing block encoding [2021-11-23 02:22:04,026 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-23 02:22:04,026 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-23 02:22:04,030 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:22:04 BoogieIcfgContainer [2021-11-23 02:22:04,031 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-23 02:22:04,035 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-23 02:22:04,035 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-23 02:22:04,038 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-23 02:22:04,057 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 02:22:02" (1/3) ... [2021-11-23 02:22:04,057 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@67990add and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 02:22:04, skipping insertion in model container [2021-11-23 02:22:04,057 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:22:03" (2/3) ... [2021-11-23 02:22:04,058 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@67990add and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 02:22:04, skipping insertion in model container [2021-11-23 02:22:04,058 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:22:04" (3/3) ... [2021-11-23 02:22:04,059 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product51.cil.c [2021-11-23 02:22:04,064 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-23 02:22:04,064 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-23 02:22:04,130 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-23 02:22:04,137 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-23 02:22:04,137 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-23 02:22:04,155 INFO L276 IsEmpty]: Start isEmpty. Operand has 64 states, 41 states have (on average 1.4634146341463414) internal successors, (60), 50 states have internal predecessors, (60), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2021-11-23 02:22:04,161 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2021-11-23 02:22:04,162 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:22:04,163 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:22:04,163 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:22:04,168 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:22:04,169 INFO L85 PathProgramCache]: Analyzing trace with hash -582250377, now seen corresponding path program 1 times [2021-11-23 02:22:04,177 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:22:04,177 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1651369385] [2021-11-23 02:22:04,178 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:22:04,179 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:22:04,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:22:04,396 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 02:22:04,397 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:22:04,397 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1651369385] [2021-11-23 02:22:04,399 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1651369385] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 02:22:04,399 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:22:04,399 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-23 02:22:04,401 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1773135012] [2021-11-23 02:22:04,402 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:22:04,406 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-23 02:22:04,406 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:22:04,439 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-23 02:22:04,441 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-23 02:22:04,443 INFO L87 Difference]: Start difference. First operand has 64 states, 41 states have (on average 1.4634146341463414) internal successors, (60), 50 states have internal predecessors, (60), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-23 02:22:04,540 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:22:04,540 INFO L93 Difference]: Finished difference Result 126 states and 173 transitions. [2021-11-23 02:22:04,543 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-23 02:22:04,544 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2021-11-23 02:22:04,545 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:22:04,556 INFO L225 Difference]: With dead ends: 126 [2021-11-23 02:22:04,556 INFO L226 Difference]: Without dead ends: 59 [2021-11-23 02:22:04,563 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-23 02:22:04,568 INFO L933 BasicCegarLoop]: 66 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 66 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-23 02:22:04,569 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 66 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-23 02:22:04,586 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2021-11-23 02:22:04,625 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 59. [2021-11-23 02:22:04,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 38 states have (on average 1.368421052631579) internal successors, (52), 46 states have internal predecessors, (52), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2021-11-23 02:22:04,629 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 77 transitions. [2021-11-23 02:22:04,630 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 77 transitions. Word has length 17 [2021-11-23 02:22:04,630 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:22:04,631 INFO L470 AbstractCegarLoop]: Abstraction has 59 states and 77 transitions. [2021-11-23 02:22:04,631 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-23 02:22:04,631 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 77 transitions. [2021-11-23 02:22:04,633 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2021-11-23 02:22:04,634 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:22:04,634 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:22:04,634 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-23 02:22:04,634 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:22:04,635 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:22:04,635 INFO L85 PathProgramCache]: Analyzing trace with hash 133290525, now seen corresponding path program 1 times [2021-11-23 02:22:04,636 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:22:04,636 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [205964519] [2021-11-23 02:22:04,636 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:22:04,637 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:22:04,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:22:04,715 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 02:22:04,716 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:22:04,716 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [205964519] [2021-11-23 02:22:04,717 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [205964519] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 02:22:04,717 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:22:04,717 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 02:22:04,718 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1714715646] [2021-11-23 02:22:04,718 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:22:04,721 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 02:22:04,721 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:22:04,722 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 02:22:04,723 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 02:22:04,725 INFO L87 Difference]: Start difference. First operand 59 states and 77 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-23 02:22:04,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:22:04,795 INFO L93 Difference]: Finished difference Result 90 states and 116 transitions. [2021-11-23 02:22:04,804 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 02:22:04,804 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2021-11-23 02:22:04,804 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:22:04,806 INFO L225 Difference]: With dead ends: 90 [2021-11-23 02:22:04,806 INFO L226 Difference]: Without dead ends: 51 [2021-11-23 02:22:04,807 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 02:22:04,808 INFO L933 BasicCegarLoop]: 52 mSDtfsCounter, 14 mSDsluCounter, 46 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 02:22:04,809 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [18 Valid, 87 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 02:22:04,810 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51 states. [2021-11-23 02:22:04,823 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51. [2021-11-23 02:22:04,824 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 33 states have (on average 1.393939393939394) internal successors, (46), 41 states have internal predecessors, (46), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 7 states have call predecessors, (10), 10 states have call successors, (10) [2021-11-23 02:22:04,829 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 66 transitions. [2021-11-23 02:22:04,829 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 66 transitions. Word has length 18 [2021-11-23 02:22:04,829 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:22:04,830 INFO L470 AbstractCegarLoop]: Abstraction has 51 states and 66 transitions. [2021-11-23 02:22:04,830 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-23 02:22:04,830 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 66 transitions. [2021-11-23 02:22:04,831 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2021-11-23 02:22:04,831 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:22:04,832 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:22:04,832 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-23 02:22:04,832 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:22:04,833 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:22:04,833 INFO L85 PathProgramCache]: Analyzing trace with hash -1388733443, now seen corresponding path program 1 times [2021-11-23 02:22:04,833 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:22:04,833 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [698291590] [2021-11-23 02:22:04,833 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:22:04,834 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:22:04,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:22:04,944 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 02:22:04,944 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:22:04,944 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [698291590] [2021-11-23 02:22:04,945 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [698291590] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 02:22:04,945 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:22:04,945 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 02:22:04,945 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1517849659] [2021-11-23 02:22:04,946 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:22:04,946 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-23 02:22:04,946 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:22:04,947 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 02:22:04,947 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 02:22:04,947 INFO L87 Difference]: Start difference. First operand 51 states and 66 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-23 02:22:05,100 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:22:05,100 INFO L93 Difference]: Finished difference Result 148 states and 198 transitions. [2021-11-23 02:22:05,101 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-23 02:22:05,101 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2021-11-23 02:22:05,101 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:22:05,103 INFO L225 Difference]: With dead ends: 148 [2021-11-23 02:22:05,103 INFO L226 Difference]: Without dead ends: 99 [2021-11-23 02:22:05,104 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-23 02:22:05,105 INFO L933 BasicCegarLoop]: 66 mSDtfsCounter, 80 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 71 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 80 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 71 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 02:22:05,106 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [80 Valid, 154 Invalid, 80 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 71 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 02:22:05,107 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 99 states. [2021-11-23 02:22:05,150 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 99 to 82. [2021-11-23 02:22:05,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 54 states have (on average 1.3888888888888888) internal successors, (75), 65 states have internal predecessors, (75), 15 states have call successors, (15), 12 states have call predecessors, (15), 12 states have return successors, (16), 11 states have call predecessors, (16), 15 states have call successors, (16) [2021-11-23 02:22:05,153 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 106 transitions. [2021-11-23 02:22:05,153 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 106 transitions. Word has length 21 [2021-11-23 02:22:05,153 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:22:05,153 INFO L470 AbstractCegarLoop]: Abstraction has 82 states and 106 transitions. [2021-11-23 02:22:05,153 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-23 02:22:05,154 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 106 transitions. [2021-11-23 02:22:05,155 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-11-23 02:22:05,155 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:22:05,155 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:22:05,156 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-23 02:22:05,156 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:22:05,156 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:22:05,157 INFO L85 PathProgramCache]: Analyzing trace with hash 409171719, now seen corresponding path program 1 times [2021-11-23 02:22:05,157 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:22:05,157 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [727589773] [2021-11-23 02:22:05,157 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:22:05,158 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:22:05,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:22:05,243 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 02:22:05,243 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:22:05,244 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [727589773] [2021-11-23 02:22:05,244 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [727589773] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 02:22:05,244 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:22:05,244 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-23 02:22:05,245 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [44445713] [2021-11-23 02:22:05,245 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:22:05,245 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-23 02:22:05,246 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:22:05,246 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-23 02:22:05,246 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-23 02:22:05,247 INFO L87 Difference]: Start difference. First operand 82 states and 106 transitions. Second operand has 6 states, 5 states have (on average 4.2) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-23 02:22:05,404 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:22:05,405 INFO L93 Difference]: Finished difference Result 238 states and 313 transitions. [2021-11-23 02:22:05,405 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-23 02:22:05,405 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.2) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2021-11-23 02:22:05,406 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:22:05,413 INFO L225 Difference]: With dead ends: 238 [2021-11-23 02:22:05,414 INFO L226 Difference]: Without dead ends: 158 [2021-11-23 02:22:05,418 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-11-23 02:22:05,421 INFO L933 BasicCegarLoop]: 60 mSDtfsCounter, 42 mSDsluCounter, 252 mSDsCounter, 0 mSdLazyCounter, 98 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 268 SdHoareTripleChecker+Invalid, 100 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 98 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 02:22:05,422 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [44 Valid, 268 Invalid, 100 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 98 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 02:22:05,423 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 158 states. [2021-11-23 02:22:05,456 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 158 to 150. [2021-11-23 02:22:05,457 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 150 states, 99 states have (on average 1.3636363636363635) internal successors, (135), 118 states have internal predecessors, (135), 28 states have call successors, (28), 22 states have call predecessors, (28), 22 states have return successors, (30), 20 states have call predecessors, (30), 28 states have call successors, (30) [2021-11-23 02:22:05,458 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 150 states to 150 states and 193 transitions. [2021-11-23 02:22:05,458 INFO L78 Accepts]: Start accepts. Automaton has 150 states and 193 transitions. Word has length 24 [2021-11-23 02:22:05,459 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:22:05,459 INFO L470 AbstractCegarLoop]: Abstraction has 150 states and 193 transitions. [2021-11-23 02:22:05,459 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.2) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-23 02:22:05,459 INFO L276 IsEmpty]: Start isEmpty. Operand 150 states and 193 transitions. [2021-11-23 02:22:05,461 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2021-11-23 02:22:05,461 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:22:05,461 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:22:05,461 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-23 02:22:05,462 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:22:05,462 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:22:05,462 INFO L85 PathProgramCache]: Analyzing trace with hash -1367692917, now seen corresponding path program 1 times [2021-11-23 02:22:05,462 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:22:05,463 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1539215976] [2021-11-23 02:22:05,463 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:22:05,463 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:22:05,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:22:05,542 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 02:22:05,542 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:22:05,542 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1539215976] [2021-11-23 02:22:05,542 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1539215976] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 02:22:05,542 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:22:05,543 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 02:22:05,543 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [488869478] [2021-11-23 02:22:05,543 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:22:05,543 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 02:22:05,544 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:22:05,544 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 02:22:05,544 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 02:22:05,545 INFO L87 Difference]: Start difference. First operand 150 states and 193 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 02:22:05,628 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:22:05,629 INFO L93 Difference]: Finished difference Result 230 states and 303 transitions. [2021-11-23 02:22:05,630 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 02:22:05,630 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 27 [2021-11-23 02:22:05,630 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:22:05,633 INFO L225 Difference]: With dead ends: 230 [2021-11-23 02:22:05,633 INFO L226 Difference]: Without dead ends: 228 [2021-11-23 02:22:05,634 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 02:22:05,635 INFO L933 BasicCegarLoop]: 61 mSDtfsCounter, 41 mSDsluCounter, 61 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 110 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 02:22:05,635 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [41 Valid, 110 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 02:22:05,636 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 228 states. [2021-11-23 02:22:05,683 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 228 to 228. [2021-11-23 02:22:05,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 228 states, 150 states have (on average 1.3666666666666667) internal successors, (205), 179 states have internal predecessors, (205), 43 states have call successors, (43), 34 states have call predecessors, (43), 34 states have return successors, (52), 31 states have call predecessors, (52), 43 states have call successors, (52) [2021-11-23 02:22:05,687 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 228 states to 228 states and 300 transitions. [2021-11-23 02:22:05,687 INFO L78 Accepts]: Start accepts. Automaton has 228 states and 300 transitions. Word has length 27 [2021-11-23 02:22:05,687 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:22:05,688 INFO L470 AbstractCegarLoop]: Abstraction has 228 states and 300 transitions. [2021-11-23 02:22:05,691 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 02:22:05,691 INFO L276 IsEmpty]: Start isEmpty. Operand 228 states and 300 transitions. [2021-11-23 02:22:05,702 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-11-23 02:22:05,702 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:22:05,702 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:22:05,703 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-23 02:22:05,703 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:22:05,704 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:22:05,704 INFO L85 PathProgramCache]: Analyzing trace with hash 105517168, now seen corresponding path program 1 times [2021-11-23 02:22:05,704 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:22:05,704 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1310567445] [2021-11-23 02:22:05,704 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:22:05,705 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:22:05,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:22:05,825 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 02:22:05,826 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:22:05,826 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1310567445] [2021-11-23 02:22:05,826 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1310567445] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 02:22:05,826 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:22:05,826 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-23 02:22:05,827 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1318293585] [2021-11-23 02:22:05,827 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:22:05,827 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-23 02:22:05,828 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:22:05,828 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-23 02:22:05,828 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-11-23 02:22:05,828 INFO L87 Difference]: Start difference. First operand 228 states and 300 transitions. Second operand has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-23 02:22:06,118 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:22:06,119 INFO L93 Difference]: Finished difference Result 603 states and 817 transitions. [2021-11-23 02:22:06,119 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-23 02:22:06,119 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 47 [2021-11-23 02:22:06,132 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:22:06,136 INFO L225 Difference]: With dead ends: 603 [2021-11-23 02:22:06,136 INFO L226 Difference]: Without dead ends: 377 [2021-11-23 02:22:06,138 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2021-11-23 02:22:06,139 INFO L933 BasicCegarLoop]: 70 mSDtfsCounter, 126 mSDsluCounter, 121 mSDsCounter, 0 mSdLazyCounter, 131 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 127 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 189 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 131 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-23 02:22:06,139 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [127 Valid, 173 Invalid, 189 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 131 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-23 02:22:06,141 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 377 states. [2021-11-23 02:22:06,203 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 377 to 355. [2021-11-23 02:22:06,204 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 355 states, 242 states have (on average 1.2644628099173554) internal successors, (306), 265 states have internal predecessors, (306), 54 states have call successors, (54), 51 states have call predecessors, (54), 58 states have return successors, (85), 55 states have call predecessors, (85), 54 states have call successors, (85) [2021-11-23 02:22:06,208 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 355 states to 355 states and 445 transitions. [2021-11-23 02:22:06,208 INFO L78 Accepts]: Start accepts. Automaton has 355 states and 445 transitions. Word has length 47 [2021-11-23 02:22:06,209 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:22:06,209 INFO L470 AbstractCegarLoop]: Abstraction has 355 states and 445 transitions. [2021-11-23 02:22:06,209 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-23 02:22:06,209 INFO L276 IsEmpty]: Start isEmpty. Operand 355 states and 445 transitions. [2021-11-23 02:22:06,212 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-11-23 02:22:06,213 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:22:06,213 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:22:06,214 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-23 02:22:06,214 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:22:06,215 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:22:06,215 INFO L85 PathProgramCache]: Analyzing trace with hash 962647073, now seen corresponding path program 1 times [2021-11-23 02:22:06,215 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:22:06,215 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [643844785] [2021-11-23 02:22:06,215 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:22:06,216 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:22:06,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:22:06,289 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 02:22:06,290 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:22:06,290 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [643844785] [2021-11-23 02:22:06,290 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [643844785] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 02:22:06,290 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:22:06,290 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 02:22:06,291 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1386180094] [2021-11-23 02:22:06,291 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:22:06,291 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-23 02:22:06,291 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:22:06,292 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 02:22:06,292 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 02:22:06,293 INFO L87 Difference]: Start difference. First operand 355 states and 445 transitions. Second operand has 4 states, 3 states have (on average 15.666666666666666) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2021-11-23 02:22:06,406 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:22:06,406 INFO L93 Difference]: Finished difference Result 712 states and 892 transitions. [2021-11-23 02:22:06,406 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-23 02:22:06,407 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 15.666666666666666) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 61 [2021-11-23 02:22:06,408 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:22:06,418 INFO L225 Difference]: With dead ends: 712 [2021-11-23 02:22:06,418 INFO L226 Difference]: Without dead ends: 286 [2021-11-23 02:22:06,421 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 02:22:06,427 INFO L933 BasicCegarLoop]: 74 mSDtfsCounter, 84 mSDsluCounter, 65 mSDsCounter, 0 mSdLazyCounter, 76 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 78 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 76 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 02:22:06,429 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [84 Valid, 120 Invalid, 78 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 76 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 02:22:06,430 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 286 states. [2021-11-23 02:22:06,471 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 286 to 286. [2021-11-23 02:22:06,473 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 286 states, 194 states have (on average 1.2216494845360826) internal successors, (237), 211 states have internal predecessors, (237), 43 states have call successors, (43), 40 states have call predecessors, (43), 48 states have return successors, (66), 45 states have call predecessors, (66), 43 states have call successors, (66) [2021-11-23 02:22:06,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 286 states to 286 states and 346 transitions. [2021-11-23 02:22:06,478 INFO L78 Accepts]: Start accepts. Automaton has 286 states and 346 transitions. Word has length 61 [2021-11-23 02:22:06,478 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:22:06,479 INFO L470 AbstractCegarLoop]: Abstraction has 286 states and 346 transitions. [2021-11-23 02:22:06,479 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 15.666666666666666) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2021-11-23 02:22:06,479 INFO L276 IsEmpty]: Start isEmpty. Operand 286 states and 346 transitions. [2021-11-23 02:22:06,483 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-11-23 02:22:06,483 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:22:06,484 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:22:06,484 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-23 02:22:06,484 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:22:06,489 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:22:06,489 INFO L85 PathProgramCache]: Analyzing trace with hash -959699185, now seen corresponding path program 1 times [2021-11-23 02:22:06,489 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:22:06,489 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [542930307] [2021-11-23 02:22:06,489 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:22:06,489 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:22:06,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:22:06,635 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 02:22:06,635 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:22:06,635 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [542930307] [2021-11-23 02:22:06,635 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [542930307] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 02:22:06,636 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:22:06,636 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-11-23 02:22:06,640 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1853121524] [2021-11-23 02:22:06,640 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:22:06,641 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-11-23 02:22:06,642 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:22:06,642 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-11-23 02:22:06,643 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-11-23 02:22:06,643 INFO L87 Difference]: Start difference. First operand 286 states and 346 transitions. Second operand has 9 states, 9 states have (on average 4.888888888888889) internal successors, (44), 8 states have internal predecessors, (44), 4 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2021-11-23 02:22:07,050 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:22:07,050 INFO L93 Difference]: Finished difference Result 796 states and 994 transitions. [2021-11-23 02:22:07,051 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-23 02:22:07,051 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.888888888888889) internal successors, (44), 8 states have internal predecessors, (44), 4 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 58 [2021-11-23 02:22:07,052 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:22:07,056 INFO L225 Difference]: With dead ends: 796 [2021-11-23 02:22:07,056 INFO L226 Difference]: Without dead ends: 512 [2021-11-23 02:22:07,059 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=60, Invalid=150, Unknown=0, NotChecked=0, Total=210 [2021-11-23 02:22:07,062 INFO L933 BasicCegarLoop]: 68 mSDtfsCounter, 182 mSDsluCounter, 141 mSDsCounter, 0 mSdLazyCounter, 223 mSolverCounterSat, 106 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 192 SdHoareTripleChecker+Valid, 196 SdHoareTripleChecker+Invalid, 329 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 106 IncrementalHoareTripleChecker+Valid, 223 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-23 02:22:07,063 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [192 Valid, 196 Invalid, 329 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [106 Valid, 223 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-23 02:22:07,065 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 512 states. [2021-11-23 02:22:07,117 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 512 to 469. [2021-11-23 02:22:07,119 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 469 states, 323 states have (on average 1.2352941176470589) internal successors, (399), 350 states have internal predecessors, (399), 75 states have call successors, (75), 60 states have call predecessors, (75), 70 states have return successors, (114), 76 states have call predecessors, (114), 75 states have call successors, (114) [2021-11-23 02:22:07,122 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 469 states to 469 states and 588 transitions. [2021-11-23 02:22:07,123 INFO L78 Accepts]: Start accepts. Automaton has 469 states and 588 transitions. Word has length 58 [2021-11-23 02:22:07,124 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:22:07,124 INFO L470 AbstractCegarLoop]: Abstraction has 469 states and 588 transitions. [2021-11-23 02:22:07,127 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.888888888888889) internal successors, (44), 8 states have internal predecessors, (44), 4 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2021-11-23 02:22:07,127 INFO L276 IsEmpty]: Start isEmpty. Operand 469 states and 588 transitions. [2021-11-23 02:22:07,129 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-11-23 02:22:07,129 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:22:07,130 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:22:07,130 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-23 02:22:07,130 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:22:07,131 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:22:07,131 INFO L85 PathProgramCache]: Analyzing trace with hash 1400233666, now seen corresponding path program 1 times [2021-11-23 02:22:07,131 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:22:07,131 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [90746581] [2021-11-23 02:22:07,131 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:22:07,132 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:22:07,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:22:07,220 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-11-23 02:22:07,220 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:22:07,220 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [90746581] [2021-11-23 02:22:07,220 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [90746581] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 02:22:07,221 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:22:07,221 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 02:22:07,221 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1302360780] [2021-11-23 02:22:07,221 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:22:07,222 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-23 02:22:07,222 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:22:07,223 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 02:22:07,223 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 02:22:07,223 INFO L87 Difference]: Start difference. First operand 469 states and 588 transitions. Second operand has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (7), 1 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-11-23 02:22:07,313 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:22:07,313 INFO L93 Difference]: Finished difference Result 747 states and 965 transitions. [2021-11-23 02:22:07,313 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-23 02:22:07,314 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (7), 1 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 61 [2021-11-23 02:22:07,315 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:22:07,318 INFO L225 Difference]: With dead ends: 747 [2021-11-23 02:22:07,318 INFO L226 Difference]: Without dead ends: 459 [2021-11-23 02:22:07,320 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-23 02:22:07,322 INFO L933 BasicCegarLoop]: 60 mSDtfsCounter, 40 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 50 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 40 SdHoareTripleChecker+Valid, 158 SdHoareTripleChecker+Invalid, 53 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 50 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-23 02:22:07,322 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [40 Valid, 158 Invalid, 53 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 50 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-23 02:22:07,324 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 459 states. [2021-11-23 02:22:07,378 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 459 to 314. [2021-11-23 02:22:07,382 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 314 states, 215 states have (on average 1.2) internal successors, (258), 231 states have internal predecessors, (258), 46 states have call successors, (46), 44 states have call predecessors, (46), 52 states have return successors, (65), 48 states have call predecessors, (65), 46 states have call successors, (65) [2021-11-23 02:22:07,384 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 314 states to 314 states and 369 transitions. [2021-11-23 02:22:07,384 INFO L78 Accepts]: Start accepts. Automaton has 314 states and 369 transitions. Word has length 61 [2021-11-23 02:22:07,387 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:22:07,387 INFO L470 AbstractCegarLoop]: Abstraction has 314 states and 369 transitions. [2021-11-23 02:22:07,388 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (7), 1 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-11-23 02:22:07,388 INFO L276 IsEmpty]: Start isEmpty. Operand 314 states and 369 transitions. [2021-11-23 02:22:07,389 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-11-23 02:22:07,390 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:22:07,390 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:22:07,390 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-11-23 02:22:07,390 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:22:07,391 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:22:07,391 INFO L85 PathProgramCache]: Analyzing trace with hash -1982639529, now seen corresponding path program 1 times [2021-11-23 02:22:07,391 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:22:07,391 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2143976428] [2021-11-23 02:22:07,391 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:22:07,392 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:22:07,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:22:07,456 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 19 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-11-23 02:22:07,456 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:22:07,456 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2143976428] [2021-11-23 02:22:07,456 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2143976428] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 02:22:07,457 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1283797250] [2021-11-23 02:22:07,457 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:22:07,457 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 02:22:07,457 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 02:22:07,459 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 02:22:07,470 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-23 02:22:07,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:22:07,575 INFO L263 TraceCheckSpWp]: Trace formula consists of 436 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-23 02:22:07,582 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:22:07,734 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 02:22:07,735 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-23 02:22:07,735 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1283797250] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 02:22:07,735 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-23 02:22:07,735 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5] total 6 [2021-11-23 02:22:07,735 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [592567372] [2021-11-23 02:22:07,736 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:22:07,736 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 02:22:07,736 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:22:07,737 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 02:22:07,737 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2021-11-23 02:22:07,737 INFO L87 Difference]: Start difference. First operand 314 states and 369 transitions. Second operand has 3 states, 3 states have (on average 16.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2021-11-23 02:22:07,793 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:22:07,808 INFO L93 Difference]: Finished difference Result 542 states and 641 transitions. [2021-11-23 02:22:07,812 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 02:22:07,812 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 16.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 63 [2021-11-23 02:22:07,813 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:22:07,814 INFO L225 Difference]: With dead ends: 542 [2021-11-23 02:22:07,815 INFO L226 Difference]: Without dead ends: 294 [2021-11-23 02:22:07,815 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 69 GetRequests, 65 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2021-11-23 02:22:07,816 INFO L933 BasicCegarLoop]: 65 mSDtfsCounter, 25 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 99 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-23 02:22:07,821 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [25 Valid, 99 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-23 02:22:07,822 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2021-11-23 02:22:07,867 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 294. [2021-11-23 02:22:07,871 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 294 states, 202 states have (on average 1.1782178217821782) internal successors, (238), 217 states have internal predecessors, (238), 43 states have call successors, (43), 41 states have call predecessors, (43), 48 states have return successors, (53), 45 states have call predecessors, (53), 43 states have call successors, (53) [2021-11-23 02:22:07,873 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294 states to 294 states and 334 transitions. [2021-11-23 02:22:07,873 INFO L78 Accepts]: Start accepts. Automaton has 294 states and 334 transitions. Word has length 63 [2021-11-23 02:22:07,888 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:22:07,888 INFO L470 AbstractCegarLoop]: Abstraction has 294 states and 334 transitions. [2021-11-23 02:22:07,888 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 16.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2021-11-23 02:22:07,889 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 334 transitions. [2021-11-23 02:22:07,890 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2021-11-23 02:22:07,890 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:22:07,890 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:22:07,949 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-23 02:22:08,091 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 02:22:08,091 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:22:08,092 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:22:08,092 INFO L85 PathProgramCache]: Analyzing trace with hash -1052650222, now seen corresponding path program 1 times [2021-11-23 02:22:08,092 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:22:08,092 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1986921791] [2021-11-23 02:22:08,092 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:22:08,092 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:22:08,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:22:08,349 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 7 proven. 13 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-11-23 02:22:08,349 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:22:08,349 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1986921791] [2021-11-23 02:22:08,349 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1986921791] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 02:22:08,349 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [532766455] [2021-11-23 02:22:08,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:22:08,350 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 02:22:08,350 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 02:22:08,351 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 02:22:08,371 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-23 02:22:08,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:22:08,452 INFO L263 TraceCheckSpWp]: Trace formula consists of 441 conjuncts, 34 conjunts are in the unsatisfiable core [2021-11-23 02:22:08,456 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:22:09,101 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 13 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 02:22:09,101 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 02:22:09,854 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 15 proven. 3 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2021-11-23 02:22:09,855 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [532766455] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 02:22:09,855 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1731157152] [2021-11-23 02:22:09,876 INFO L159 IcfgInterpreter]: Started Sifa with 43 locations of interest [2021-11-23 02:22:09,876 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 02:22:09,881 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 02:22:09,887 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 02:22:09,887 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 02:22:15,927 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 50 for LOIs [2021-11-23 02:22:15,940 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 46 for LOIs [2021-11-23 02:22:16,357 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 22 for LOIs [2021-11-23 02:22:16,427 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 34 for LOIs [2021-11-23 02:22:16,431 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 24 for LOIs [2021-11-23 02:22:16,435 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 25 for LOIs [2021-11-23 02:22:16,438 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 02:22:21,170 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10505#(and (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|) (= ~head~0.offset 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= |timeShift_isPumpRunning_#res#1| 2147483647) (<= |#NULL.offset| 0) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= 0 ~methAndRunningLastTime~0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 2147483647) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)) (<= 0 |old(~methAndRunningLastTime~0)|) (<= 0 ~head~0.base) (<= ~head~0.base 0) (<= 0 |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1|) (<= 0 (+ |timeShift_isPumpRunning_#res#1| 2147483648)) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| ~methaneLevelCritical~0) (<= 0 |#NULL.offset|) (not (= ~methAndRunningLastTime~0 0)) (<= 0 |#StackHeapBarrier|) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 0)) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2021-11-23 02:22:21,171 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 02:22:21,171 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 02:22:21,171 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 11, 14] total 35 [2021-11-23 02:22:21,171 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [936748157] [2021-11-23 02:22:21,171 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 02:22:21,172 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2021-11-23 02:22:21,172 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:22:21,172 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2021-11-23 02:22:21,174 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=444, Invalid=3588, Unknown=0, NotChecked=0, Total=4032 [2021-11-23 02:22:21,175 INFO L87 Difference]: Start difference. First operand 294 states and 334 transitions. Second operand has 35 states, 32 states have (on average 3.5625) internal successors, (114), 29 states have internal predecessors, (114), 14 states have call successors, (24), 13 states have call predecessors, (24), 11 states have return successors, (21), 10 states have call predecessors, (21), 12 states have call successors, (21) [2021-11-23 02:22:23,467 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:22:23,467 INFO L93 Difference]: Finished difference Result 909 states and 1066 transitions. [2021-11-23 02:22:23,468 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2021-11-23 02:22:23,468 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 32 states have (on average 3.5625) internal successors, (114), 29 states have internal predecessors, (114), 14 states have call successors, (24), 13 states have call predecessors, (24), 11 states have return successors, (21), 10 states have call predecessors, (21), 12 states have call successors, (21) Word has length 66 [2021-11-23 02:22:23,469 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:22:23,473 INFO L225 Difference]: With dead ends: 909 [2021-11-23 02:22:23,473 INFO L226 Difference]: Without dead ends: 681 [2021-11-23 02:22:23,479 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 254 GetRequests, 151 SyntacticMatches, 7 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3698 ImplicationChecksByTransitivity, 6.3s TimeCoverageRelationStatistics Valid=1143, Invalid=8363, Unknown=0, NotChecked=0, Total=9506 [2021-11-23 02:22:23,480 INFO L933 BasicCegarLoop]: 121 mSDtfsCounter, 1026 mSDsluCounter, 1157 mSDsCounter, 0 mSdLazyCounter, 1538 mSolverCounterSat, 576 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1029 SdHoareTripleChecker+Valid, 1155 SdHoareTripleChecker+Invalid, 2114 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 576 IncrementalHoareTripleChecker+Valid, 1538 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2021-11-23 02:22:23,480 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1029 Valid, 1155 Invalid, 2114 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [576 Valid, 1538 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2021-11-23 02:22:23,481 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 681 states. [2021-11-23 02:22:23,525 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 681 to 543. [2021-11-23 02:22:23,526 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 543 states, 378 states have (on average 1.17989417989418) internal successors, (446), 402 states have internal predecessors, (446), 76 states have call successors, (76), 72 states have call predecessors, (76), 88 states have return successors, (95), 85 states have call predecessors, (95), 76 states have call successors, (95) [2021-11-23 02:22:23,529 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 543 states to 543 states and 617 transitions. [2021-11-23 02:22:23,530 INFO L78 Accepts]: Start accepts. Automaton has 543 states and 617 transitions. Word has length 66 [2021-11-23 02:22:23,530 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:22:23,530 INFO L470 AbstractCegarLoop]: Abstraction has 543 states and 617 transitions. [2021-11-23 02:22:23,531 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 32 states have (on average 3.5625) internal successors, (114), 29 states have internal predecessors, (114), 14 states have call successors, (24), 13 states have call predecessors, (24), 11 states have return successors, (21), 10 states have call predecessors, (21), 12 states have call successors, (21) [2021-11-23 02:22:23,531 INFO L276 IsEmpty]: Start isEmpty. Operand 543 states and 617 transitions. [2021-11-23 02:22:23,533 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2021-11-23 02:22:23,533 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:22:23,533 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:22:23,572 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-23 02:22:23,752 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 02:22:23,752 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:22:23,753 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:22:23,753 INFO L85 PathProgramCache]: Analyzing trace with hash 1231448645, now seen corresponding path program 1 times [2021-11-23 02:22:23,753 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:22:23,753 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [884586016] [2021-11-23 02:22:23,753 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:22:23,753 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:22:23,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:22:23,875 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 51 proven. 11 refuted. 0 times theorem prover too weak. 69 trivial. 0 not checked. [2021-11-23 02:22:23,876 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:22:23,876 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [884586016] [2021-11-23 02:22:23,876 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [884586016] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 02:22:23,876 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [923572736] [2021-11-23 02:22:23,876 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:22:23,876 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 02:22:23,877 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 02:22:23,877 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 02:22:23,889 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-11-23 02:22:24,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:22:24,003 INFO L263 TraceCheckSpWp]: Trace formula consists of 607 conjuncts, 24 conjunts are in the unsatisfiable core [2021-11-23 02:22:24,009 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:22:24,425 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 87 proven. 18 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2021-11-23 02:22:24,425 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 02:22:24,960 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 63 proven. 28 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2021-11-23 02:22:24,960 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [923572736] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 02:22:24,960 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2036318547] [2021-11-23 02:22:24,964 INFO L159 IcfgInterpreter]: Started Sifa with 46 locations of interest [2021-11-23 02:22:24,964 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 02:22:24,965 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 02:22:24,965 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 02:22:24,965 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 02:22:28,946 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 28 for LOIs [2021-11-23 02:22:28,951 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 46 for LOIs [2021-11-23 02:22:29,596 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 22 for LOIs [2021-11-23 02:22:29,655 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 38 for LOIs [2021-11-23 02:22:29,663 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 24 for LOIs [2021-11-23 02:22:29,667 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 25 for LOIs [2021-11-23 02:22:29,670 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 47 for LOIs [2021-11-23 02:22:29,680 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 02:22:34,459 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13485#(and (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|) (= ~head~0.offset 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= |timeShift_isPumpRunning_#res#1| 2147483647) (<= |#NULL.offset| 0) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= 0 ~methAndRunningLastTime~0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 2147483647) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)) (<= 0 |old(~methAndRunningLastTime~0)|) (<= 0 ~head~0.base) (<= ~head~0.base 0) (<= 0 |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1|) (<= 0 (+ |timeShift_isPumpRunning_#res#1| 2147483648)) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| ~methaneLevelCritical~0) (<= 0 |#NULL.offset|) (not (= ~methAndRunningLastTime~0 0)) (<= 0 |#StackHeapBarrier|) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 0)) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2021-11-23 02:22:34,459 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 02:22:34,459 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 02:22:34,459 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 9, 12] total 26 [2021-11-23 02:22:34,459 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1550116993] [2021-11-23 02:22:34,460 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 02:22:34,460 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2021-11-23 02:22:34,460 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:22:34,461 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2021-11-23 02:22:34,462 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=325, Invalid=2981, Unknown=0, NotChecked=0, Total=3306 [2021-11-23 02:22:34,463 INFO L87 Difference]: Start difference. First operand 543 states and 617 transitions. Second operand has 26 states, 20 states have (on average 6.5) internal successors, (130), 20 states have internal predecessors, (130), 10 states have call successors, (28), 8 states have call predecessors, (28), 13 states have return successors, (30), 13 states have call predecessors, (30), 10 states have call successors, (30) [2021-11-23 02:22:35,225 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:22:35,225 INFO L93 Difference]: Finished difference Result 1131 states and 1328 transitions. [2021-11-23 02:22:35,226 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-11-23 02:22:35,226 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 20 states have (on average 6.5) internal successors, (130), 20 states have internal predecessors, (130), 10 states have call successors, (28), 8 states have call predecessors, (28), 13 states have return successors, (30), 13 states have call predecessors, (30), 10 states have call successors, (30) Word has length 116 [2021-11-23 02:22:35,227 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:22:35,236 INFO L225 Difference]: With dead ends: 1131 [2021-11-23 02:22:35,237 INFO L226 Difference]: Without dead ends: 821 [2021-11-23 02:22:35,239 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 371 GetRequests, 292 SyntacticMatches, 12 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1940 ImplicationChecksByTransitivity, 5.2s TimeCoverageRelationStatistics Valid=474, Invalid=4218, Unknown=0, NotChecked=0, Total=4692 [2021-11-23 02:22:35,240 INFO L933 BasicCegarLoop]: 63 mSDtfsCounter, 447 mSDsluCounter, 176 mSDsCounter, 0 mSdLazyCounter, 762 mSolverCounterSat, 252 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 450 SdHoareTripleChecker+Valid, 223 SdHoareTripleChecker+Invalid, 1014 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 252 IncrementalHoareTripleChecker+Valid, 762 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-11-23 02:22:35,241 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [450 Valid, 223 Invalid, 1014 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [252 Valid, 762 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-11-23 02:22:35,243 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 821 states. [2021-11-23 02:22:35,294 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 821 to 558. [2021-11-23 02:22:35,295 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 558 states, 383 states have (on average 1.1488250652741514) internal successors, (440), 412 states have internal predecessors, (440), 81 states have call successors, (81), 77 states have call predecessors, (81), 93 states have return successors, (100), 90 states have call predecessors, (100), 81 states have call successors, (100) [2021-11-23 02:22:35,298 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 558 states to 558 states and 621 transitions. [2021-11-23 02:22:35,299 INFO L78 Accepts]: Start accepts. Automaton has 558 states and 621 transitions. Word has length 116 [2021-11-23 02:22:35,299 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:22:35,299 INFO L470 AbstractCegarLoop]: Abstraction has 558 states and 621 transitions. [2021-11-23 02:22:35,300 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 20 states have (on average 6.5) internal successors, (130), 20 states have internal predecessors, (130), 10 states have call successors, (28), 8 states have call predecessors, (28), 13 states have return successors, (30), 13 states have call predecessors, (30), 10 states have call successors, (30) [2021-11-23 02:22:35,300 INFO L276 IsEmpty]: Start isEmpty. Operand 558 states and 621 transitions. [2021-11-23 02:22:35,303 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2021-11-23 02:22:35,303 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:22:35,304 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:22:35,338 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2021-11-23 02:22:35,520 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-11-23 02:22:35,520 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:22:35,521 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:22:35,521 INFO L85 PathProgramCache]: Analyzing trace with hash 693269375, now seen corresponding path program 2 times [2021-11-23 02:22:35,521 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:22:35,521 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1369245221] [2021-11-23 02:22:35,521 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:22:35,521 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:22:35,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:22:35,908 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 52 proven. 58 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2021-11-23 02:22:35,908 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:22:35,908 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1369245221] [2021-11-23 02:22:35,908 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1369245221] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 02:22:35,908 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [518917808] [2021-11-23 02:22:35,908 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2021-11-23 02:22:35,909 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 02:22:35,909 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 02:22:35,910 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 02:22:35,927 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-11-23 02:22:36,010 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2021-11-23 02:22:36,010 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-23 02:22:36,015 INFO L263 TraceCheckSpWp]: Trace formula consists of 435 conjuncts, 33 conjunts are in the unsatisfiable core [2021-11-23 02:22:36,020 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:22:36,522 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 82 proven. 4 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2021-11-23 02:22:36,522 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 02:22:37,145 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 68 proven. 2 refuted. 0 times theorem prover too weak. 61 trivial. 0 not checked. [2021-11-23 02:22:37,146 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [518917808] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 02:22:37,146 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1997777552] [2021-11-23 02:22:37,149 INFO L159 IcfgInterpreter]: Started Sifa with 46 locations of interest [2021-11-23 02:22:37,149 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 02:22:37,150 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 02:22:37,150 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 02:22:37,150 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 02:22:41,043 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 28 for LOIs [2021-11-23 02:22:41,050 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 46 for LOIs [2021-11-23 02:22:41,527 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 22 for LOIs [2021-11-23 02:22:41,583 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 38 for LOIs [2021-11-23 02:22:41,589 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 24 for LOIs [2021-11-23 02:22:41,592 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 25 for LOIs [2021-11-23 02:22:41,594 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 47 for LOIs [2021-11-23 02:22:41,600 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 02:22:46,608 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '16783#(and (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|) (= ~head~0.offset 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= |timeShift_isPumpRunning_#res#1| 2147483647) (<= |#NULL.offset| 0) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= 0 ~methAndRunningLastTime~0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 2147483647) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)) (<= 0 |old(~methAndRunningLastTime~0)|) (<= 0 ~head~0.base) (<= ~head~0.base 0) (<= 0 |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1|) (<= 0 (+ |timeShift_isPumpRunning_#res#1| 2147483648)) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| ~methaneLevelCritical~0) (<= 0 |#NULL.offset|) (not (= ~methAndRunningLastTime~0 0)) (<= 0 |#StackHeapBarrier|) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 0)) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2021-11-23 02:22:46,608 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 02:22:46,608 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 02:22:46,609 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 7, 8] total 32 [2021-11-23 02:22:46,609 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [809024948] [2021-11-23 02:22:46,609 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 02:22:46,610 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2021-11-23 02:22:46,610 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:22:46,611 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2021-11-23 02:22:46,612 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=377, Invalid=3655, Unknown=0, NotChecked=0, Total=4032 [2021-11-23 02:22:46,613 INFO L87 Difference]: Start difference. First operand 558 states and 621 transitions. Second operand has 32 states, 30 states have (on average 6.1) internal successors, (183), 29 states have internal predecessors, (183), 15 states have call successors, (34), 7 states have call predecessors, (34), 12 states have return successors, (35), 11 states have call predecessors, (35), 15 states have call successors, (35) [2021-11-23 02:22:47,800 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:22:47,800 INFO L93 Difference]: Finished difference Result 752 states and 847 transitions. [2021-11-23 02:22:47,800 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2021-11-23 02:22:47,801 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 30 states have (on average 6.1) internal successors, (183), 29 states have internal predecessors, (183), 15 states have call successors, (34), 7 states have call predecessors, (34), 12 states have return successors, (35), 11 states have call predecessors, (35), 15 states have call successors, (35) Word has length 116 [2021-11-23 02:22:47,801 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:22:47,801 INFO L225 Difference]: With dead ends: 752 [2021-11-23 02:22:47,801 INFO L226 Difference]: Without dead ends: 0 [2021-11-23 02:22:47,805 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 394 GetRequests, 302 SyntacticMatches, 12 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2851 ImplicationChecksByTransitivity, 6.1s TimeCoverageRelationStatistics Valid=700, Invalid=5942, Unknown=0, NotChecked=0, Total=6642 [2021-11-23 02:22:47,806 INFO L933 BasicCegarLoop]: 64 mSDtfsCounter, 524 mSDsluCounter, 570 mSDsCounter, 0 mSdLazyCounter, 717 mSolverCounterSat, 295 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 524 SdHoareTripleChecker+Valid, 578 SdHoareTripleChecker+Invalid, 1012 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 295 IncrementalHoareTripleChecker+Valid, 717 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-11-23 02:22:47,806 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [524 Valid, 578 Invalid, 1012 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [295 Valid, 717 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-11-23 02:22:47,807 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-23 02:22:47,807 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-23 02:22:47,807 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 02:22:47,807 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-23 02:22:47,808 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 116 [2021-11-23 02:22:47,808 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:22:47,808 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-23 02:22:47,809 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 30 states have (on average 6.1) internal successors, (183), 29 states have internal predecessors, (183), 15 states have call successors, (34), 7 states have call predecessors, (34), 12 states have return successors, (35), 11 states have call predecessors, (35), 15 states have call successors, (35) [2021-11-23 02:22:47,809 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-23 02:22:47,809 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-23 02:22:47,812 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-23 02:22:47,836 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2021-11-23 02:22:48,024 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2021-11-23 02:22:48,034 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-23 02:22:53,341 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 226 233) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= 0 ~systemActive~0)) [2021-11-23 02:22:53,341 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 226 233) no Hoare annotation was computed. [2021-11-23 02:22:53,341 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 159 165) no Hoare annotation was computed. [2021-11-23 02:22:53,342 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 159 165) the Hoare annotation is: true [2021-11-23 02:22:53,342 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 449 460) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse7 (not (= ~pumpRunning~0 1))) (.cse1 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse4 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse2 (not (= ~pumpRunning~0 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 2 ~waterLevel~0))) (.cse9 (= ~methaneLevelCritical~0 1)) (.cse8 (not (<= ~waterLevel~0 2))) (.cse10 (not (= |old(~methaneLevelCritical~0)| 1))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse3 .cse4 .cse6 .cse7 .cse8) (or .cse0 .cse2 .cse3 .cse9 .cse10 .cse5) (or .cse3 .cse6 .cse9 .cse7 .cse8 .cse10) (or .cse1 .cse2 .cse3 .cse4 .cse6 .cse8 .cse5) (or .cse2 .cse3 .cse6 .cse9 .cse8 .cse10 .cse5))) [2021-11-23 02:22:53,342 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 449 460) no Hoare annotation was computed. [2021-11-23 02:22:53,342 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 461 469) the Hoare annotation is: true [2021-11-23 02:22:53,342 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 461 469) no Hoare annotation was computed. [2021-11-23 02:22:53,343 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 527 556) no Hoare annotation was computed. [2021-11-23 02:22:53,343 INFO L858 garLoopResultBuilder]: For program point L541(lines 541 545) no Hoare annotation was computed. [2021-11-23 02:22:53,343 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 527 556) the Hoare annotation is: true [2021-11-23 02:22:53,343 INFO L861 garLoopResultBuilder]: At program point L541-1(lines 541 545) the Hoare annotation is: true [2021-11-23 02:22:53,343 INFO L861 garLoopResultBuilder]: At program point L537-2(lines 537 551) the Hoare annotation is: true [2021-11-23 02:22:53,344 INFO L861 garLoopResultBuilder]: At program point L533(line 533) the Hoare annotation is: true [2021-11-23 02:22:53,344 INFO L858 garLoopResultBuilder]: For program point L533-1(line 533) no Hoare annotation was computed. [2021-11-23 02:22:53,344 INFO L861 garLoopResultBuilder]: At program point L552(lines 527 556) the Hoare annotation is: true [2021-11-23 02:22:53,344 INFO L858 garLoopResultBuilder]: For program point L548(line 548) no Hoare annotation was computed. [2021-11-23 02:22:53,344 INFO L858 garLoopResultBuilder]: For program point L366(lines 366 376) no Hoare annotation was computed. [2021-11-23 02:22:53,344 INFO L858 garLoopResultBuilder]: For program point L139-1(lines 138 157) no Hoare annotation was computed. [2021-11-23 02:22:53,345 INFO L854 garLoopResultBuilder]: At program point L362(lines 362 379) the Hoare annotation is: (let ((.cse15 (= ~methAndRunningLastTime~0 0)) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~pumpRunning~0 0)) (.cse16 (= ~waterLevel~0 1)) (.cse17 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| ~methaneLevelCritical~0))) (let ((.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse10 (and .cse1 .cse2 .cse16 .cse17)) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse13 (and .cse15 (= |old(~waterLevel~0)| ~waterLevel~0) .cse17 (= ~pumpRunning~0 1))) (.cse4 (and .cse2 (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse16 .cse17)) (.cse5 (not (= 1 ~systemActive~0))) (.cse7 (not (= |old(~pumpRunning~0)| 1))) (.cse11 (not (= ~methaneLevelCritical~0 1))) (.cse12 (not (<= |old(~waterLevel~0)| 2))) (.cse14 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (and .cse1 .cse2) .cse3) (or .cse4 .cse5 .cse6 .cse7 (not (= |old(~waterLevel~0)| 2))) (or .cse0 .cse8 .cse9 .cse5 .cse6 .cse10) (or .cse0 .cse8 .cse9 .cse5 .cse11 .cse10) (or .cse0 .cse8 .cse5 .cse6 .cse12 .cse13 .cse14) (or .cse0 .cse8 .cse6 (and .cse15 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 0)) .cse3) (or .cse0 .cse8 .cse5 .cse11 .cse12 .cse13 .cse14) (or .cse4 .cse5 .cse7 .cse11 .cse12 .cse14)))) [2021-11-23 02:22:53,345 INFO L858 garLoopResultBuilder]: For program point L201(lines 201 209) no Hoare annotation was computed. [2021-11-23 02:22:53,345 INFO L854 garLoopResultBuilder]: At program point L362-1(lines 354 382) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= ~pumpRunning~0 0)) (.cse11 (= ~methAndRunningLastTime~0 0)) (.cse16 (= ~waterLevel~0 1)) (.cse8 (not (= 0 ~systemActive~0))) (.cse17 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| ~methaneLevelCritical~0))) (let ((.cse2 (and (= |old(~waterLevel~0)| ~waterLevel~0) .cse17 (= ~pumpRunning~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse12 (not (= |old(~waterLevel~0)| 1))) (.cse13 (and .cse9 .cse10 .cse11 .cse16 .cse17 .cse8)) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= 1 ~systemActive~0))) (.cse14 (and .cse10 .cse11 (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse16 .cse17)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse15 (not (= |old(~pumpRunning~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse7 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 0) .cse8) (or .cse0 (and .cse9 .cse10 .cse11) .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse7 .cse5 .cse6) (or .cse0 .cse1 .cse12 .cse3 .cse13 .cse7) (or .cse0 .cse1 .cse12 .cse3 .cse13 .cse4) (or .cse3 .cse14 .cse15 .cse4 .cse5 .cse6) (or .cse3 .cse14 .cse7 .cse15 (not (= |old(~waterLevel~0)| 2)))))) [2021-11-23 02:22:53,346 INFO L854 garLoopResultBuilder]: At program point L197(lines 197 214) the Hoare annotation is: (let ((.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (not (= 0 ~systemActive~0))) (.cse14 (= ~pumpRunning~0 0)) (.cse15 (= ~methAndRunningLastTime~0 0)) (.cse0 (= ~waterLevel~0 1))) (let ((.cse7 (and .cse14 .cse15 .cse0)) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (= ~methaneLevelCritical~0 1))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse11 (and .cse12 .cse14 .cse15 (= |old(~waterLevel~0)| ~waterLevel~0) .cse13)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse6 (not (= |old(~pumpRunning~0)| 0)))) (and (or (and .cse0 (= ~pumpRunning~0 1)) .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse8 .cse9 .cse1 .cse10) (or .cse6 .cse7 .cse8 .cse9 .cse1 .cse3) (or .cse6 .cse8 .cse1 .cse11 .cse3 .cse4 .cse5) (or .cse6 .cse8 .cse1 .cse11 .cse10 .cse4 .cse5) (or (and .cse12 .cse0) .cse1 .cse10 .cse2 (not (= |old(~waterLevel~0)| 2))) (or .cse6 .cse13)))) [2021-11-23 02:22:53,346 INFO L854 garLoopResultBuilder]: At program point L627(line 627) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 1))) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse3 .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse3 .cse7) (or .cse3 .cse8 .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse3 .cse7 .cse5 .cse6) (or .cse3 .cse7 .cse8 (not (= |old(~waterLevel~0)| 2))) (or .cse0 (not (= 0 ~systemActive~0))))) [2021-11-23 02:22:53,346 INFO L858 garLoopResultBuilder]: For program point L367(lines 367 373) no Hoare annotation was computed. [2021-11-23 02:22:53,346 INFO L854 garLoopResultBuilder]: At program point L207(line 207) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 1))) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse3 .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse3 .cse7) (or .cse3 .cse8 .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse3 .cse7 .cse5 .cse6) (or .cse3 .cse7 .cse8 (not (= |old(~waterLevel~0)| 2))) (or .cse0 (not (= 0 ~systemActive~0))))) [2021-11-23 02:22:53,347 INFO L854 garLoopResultBuilder]: At program point L203(line 203) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (and (= |timeShift_processEnvironment_~tmp~2#1| 1) (= ~waterLevel~0 1) (= ~pumpRunning~0 1))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse7 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse1 (not (= |old(~waterLevel~0)| 2)) .cse3) (or .cse7 .cse8 .cse9 .cse0 .cse2) (or .cse7 .cse8 .cse0 .cse2 .cse4 .cse5) (or .cse7 .cse8 .cse9 .cse0 .cse6) (or .cse7 .cse8 .cse0 .cse6 .cse4 .cse5) (or .cse7 (not (= 0 ~systemActive~0))))) [2021-11-23 02:22:53,347 INFO L854 garLoopResultBuilder]: At program point L360(line 360) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0)) (.cse14 (= ~methAndRunningLastTime~0 0)) (.cse15 (= ~waterLevel~0 1))) (let ((.cse7 (and .cse9 .cse14 .cse15)) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse10 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (and .cse14 (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))) (.cse11 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not (= 1 ~systemActive~0))) (.cse12 (and .cse9 (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse15)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse13 (not (= |old(~pumpRunning~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse0 .cse7 .cse1 .cse8 .cse2 .cse3) (or .cse0 .cse9 .cse10) (or .cse0 .cse7 .cse1 .cse8 .cse2 .cse11) (or .cse2 .cse12 .cse13 .cse11 .cse5 .cse6) (or .cse0 .cse1 .cse14 .cse3 .cse10) (or .cse0 .cse1 .cse2 .cse4 .cse11 .cse5 .cse6) (or .cse2 .cse12 .cse3 .cse13 (not (= |old(~waterLevel~0)| 2)))))) [2021-11-23 02:22:53,347 INFO L858 garLoopResultBuilder]: For program point L360-1(line 360) no Hoare annotation was computed. [2021-11-23 02:22:53,348 INFO L854 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: (let ((.cse11 (not (= 0 ~systemActive~0))) (.cse12 (= ~pumpRunning~0 0)) (.cse13 (= ~methAndRunningLastTime~0 0))) (let ((.cse1 (and .cse12 .cse13 (= ~waterLevel~0 1))) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse6 (not (= ~methaneLevelCritical~0 1))) (.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse10 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse13 (= |old(~waterLevel~0)| ~waterLevel~0) .cse11)) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse6) (or .cse4 .cse7 .cse6 .cse8 .cse9) (or .cse0 .cse2 .cse4 .cse10 .cse6 .cse8 .cse9) (or .cse0 .cse2 .cse4 .cse10 .cse5 .cse8 .cse9) (or .cse4 .cse5 .cse7 (not (= |old(~waterLevel~0)| 2))) (or .cse0 .cse11)))) [2021-11-23 02:22:53,348 INFO L854 garLoopResultBuilder]: At program point L212-1(lines 193 217) the Hoare annotation is: (let ((.cse12 (= ~pumpRunning~0 0)) (.cse14 (= ~methAndRunningLastTime~0 0)) (.cse13 (= ~waterLevel~0 1))) (let ((.cse7 (and .cse12 .cse14 .cse13)) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (and .cse14 (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))) (.cse9 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse10 (and .cse12 (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse13)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse11 (not (= |old(~pumpRunning~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse0 .cse7 .cse1 .cse8 .cse2 .cse3) (or .cse0 .cse7 .cse1 .cse8 .cse2 .cse9) (or .cse2 .cse10 .cse11 .cse9 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse4 .cse9 .cse5 .cse6) (or .cse0 (not (= 0 ~systemActive~0))) (or .cse2 .cse10 .cse3 .cse11 (not (= |old(~waterLevel~0)| 2)))))) [2021-11-23 02:22:53,348 INFO L858 garLoopResultBuilder]: For program point L146-1(lines 146 152) no Hoare annotation was computed. [2021-11-23 02:22:53,348 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 135 158) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse16 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse7 (= ~waterLevel~0 1)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse12 (not (= 0 ~systemActive~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse13 (and .cse10 .cse5 .cse6 .cse16)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse11 (not (= ~methaneLevelCritical~0 1))) (.cse14 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (and .cse16 (= ~pumpRunning~0 1))) (.cse15 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 2)) .cse3) (or .cse4 (and .cse5 .cse6 .cse7) .cse8 .cse9 .cse0 .cse1) (or .cse4 .cse8 .cse9 .cse0 (and .cse10 .cse5 .cse6 .cse7) .cse11) (or .cse4 .cse5 .cse12) (or .cse4 .cse8 .cse0 .cse1 .cse13 .cse14 .cse15) (or .cse4 .cse8 .cse6 .cse12) (or .cse4 .cse8 .cse0 .cse11 .cse13 .cse14 .cse15) (or .cse0 .cse2 .cse11 .cse14 .cse3 .cse15)))) [2021-11-23 02:22:53,348 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 135 158) no Hoare annotation was computed. [2021-11-23 02:22:53,348 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 627) no Hoare annotation was computed. [2021-11-23 02:22:53,349 INFO L854 garLoopResultBuilder]: At program point L609(lines 609 616) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0)) [2021-11-23 02:22:53,349 INFO L861 garLoopResultBuilder]: At program point L609-2(lines 609 616) the Hoare annotation is: true [2021-11-23 02:22:53,349 INFO L858 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2021-11-23 02:22:53,349 INFO L858 garLoopResultBuilder]: For program point L85-1(lines 85 91) no Hoare annotation was computed. [2021-11-23 02:22:53,349 INFO L854 garLoopResultBuilder]: At program point L110(lines 65 112) the Hoare annotation is: (let ((.cse10 (= 0 ~systemActive~0))) (let ((.cse8 (= ~methaneLevelCritical~0 0)) (.cse5 (= ~waterLevel~0 1)) (.cse7 (= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= ~methaneLevelCritical~0 1)) (.cse6 (not .cse10)) (.cse9 (= ~pumpRunning~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse4 .cse6 .cse9) (and .cse0 .cse1 .cse8 .cse2 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse4 .cse6 .cse9) (and .cse0 .cse1 .cse4 .cse10)))) [2021-11-23 02:22:53,349 INFO L854 garLoopResultBuilder]: At program point L77(line 77) the Hoare annotation is: (let ((.cse7 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (= ~waterLevel~0 1))) (let ((.cse3 (= ~methaneLevelCritical~0 1)) (.cse0 (or (and (= 2 ~waterLevel~0) .cse7) (and .cse7 .cse8))) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 1)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= ~methAndRunningLastTime~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse2 .cse3 .cse7 .cse8) (and .cse5 .cse6 .cse9 .cse2 .cse7 .cse8) (and .cse0 .cse9 .cse1 .cse2 .cse4) (and .cse5 .cse6 .cse7 (= 0 ~systemActive~0))))) [2021-11-23 02:22:53,349 INFO L861 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2021-11-23 02:22:53,349 INFO L854 garLoopResultBuilder]: At program point L334(line 334) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2021-11-23 02:22:53,350 INFO L858 garLoopResultBuilder]: For program point L66(lines 65 112) no Hoare annotation was computed. [2021-11-23 02:22:53,350 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-23 02:22:53,350 INFO L858 garLoopResultBuilder]: For program point L95(lines 95 108) no Hoare annotation was computed. [2021-11-23 02:22:53,350 INFO L854 garLoopResultBuilder]: At program point L87(line 87) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 1)) (.cse0 (= 2 ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 1)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse8 (= ~waterLevel~0 1)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse7 (<= 2 ~waterLevel~0) .cse1 .cse3 (<= ~waterLevel~0 2)) (and .cse5 .cse6 .cse0 .cse1 .cse2 .cse3) (and .cse5 .cse6 .cse1 .cse2 .cse3 .cse8) (and .cse0 .cse7 .cse1 .cse3 .cse4) (and .cse5 .cse6 .cse7 .cse1 .cse3 .cse8) (and .cse5 .cse6 .cse3 (= 0 ~systemActive~0)))) [2021-11-23 02:22:53,350 INFO L861 garLoopResultBuilder]: At program point L116(lines 55 120) the Hoare annotation is: true [2021-11-23 02:22:53,350 INFO L858 garLoopResultBuilder]: For program point L75(lines 75 81) no Hoare annotation was computed. [2021-11-23 02:22:53,350 INFO L858 garLoopResultBuilder]: For program point L75-1(lines 75 81) no Hoare annotation was computed. [2021-11-23 02:22:53,351 INFO L854 garLoopResultBuilder]: At program point L113(lines 64 114) the Hoare annotation is: false [2021-11-23 02:22:53,351 INFO L858 garLoopResultBuilder]: For program point L332(lines 332 338) no Hoare annotation was computed. [2021-11-23 02:22:53,351 INFO L854 garLoopResultBuilder]: At program point L332-1(lines 332 338) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (not (= 0 ~systemActive~0))) (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1))) [2021-11-23 02:22:53,351 INFO L858 garLoopResultBuilder]: For program point L101(lines 101 107) no Hoare annotation was computed. [2021-11-23 02:22:53,351 INFO L854 garLoopResultBuilder]: At program point L101-2(lines 95 108) the Hoare annotation is: (let ((.cse10 (= 0 ~systemActive~0))) (let ((.cse7 (= ~waterLevel~0 1)) (.cse4 (= ~methaneLevelCritical~0 1)) (.cse9 (= ~pumpRunning~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse2 (= 2 ~waterLevel~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (not .cse10))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse3 .cse4 .cse5 .cse7 .cse6) (and .cse2 .cse8 .cse3 .cse5 .cse6 .cse9) (and .cse0 .cse1 .cse8 .cse3 .cse5 .cse7 .cse6) (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse9) (and .cse0 .cse5 .cse10) (and .cse0 .cse1 .cse2 .cse8 .cse3 .cse5 .cse6)))) [2021-11-23 02:22:53,351 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 167 191) the Hoare annotation is: (let ((.cse7 (not (= ~waterLevel~0 1))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 2 ~waterLevel~0))) (.cse5 (not (<= ~waterLevel~0 2))) (.cse8 (not (= ~methaneLevelCritical~0 1))) (.cse6 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse0 .cse1 .cse2 .cse8 .cse6) (or .cse7 .cse0 .cse1 .cse2 .cse4 .cse6) (or .cse0 .cse1 .cse2 .cse3 .cse5 .cse8 .cse6))) [2021-11-23 02:22:53,351 INFO L854 garLoopResultBuilder]: At program point L186(line 186) the Hoare annotation is: (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= ~waterLevel~0 1))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 2 ~waterLevel~0))) (.cse6 (not (<= ~waterLevel~0 2))) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse5 .cse3 .cse6 .cse4) (or .cse0 .cse1 .cse2 .cse7 .cse4) (or .cse1 .cse2 .cse5 .cse6 .cse7 .cse4))) [2021-11-23 02:22:53,351 INFO L858 garLoopResultBuilder]: For program point L186-1(lines 167 191) no Hoare annotation was computed. [2021-11-23 02:22:53,351 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 167 191) no Hoare annotation was computed. [2021-11-23 02:22:53,352 INFO L854 garLoopResultBuilder]: At program point L181(line 181) the Hoare annotation is: (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= ~waterLevel~0 1))) (.cse4 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 2 ~waterLevel~0))) (.cse7 (not (<= ~waterLevel~0 2))) (.cse8 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse6 .cse3 .cse7 .cse5) (or .cse0 .cse1 .cse2 .cse4 .cse8 .cse5) (or .cse1 .cse2 .cse6 .cse7 .cse8 .cse5))) [2021-11-23 02:22:53,352 INFO L854 garLoopResultBuilder]: At program point L175(lines 175 183) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 0))) (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= ~waterLevel~0 1))) (.cse4 (and .cse10 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (.cse6 (and .cse10 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 1))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 2 ~waterLevel~0))) (.cse8 (not (<= ~waterLevel~0 2))) (.cse9 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse1 .cse2 .cse7 .cse3 .cse8 .cse5) (or .cse0 .cse1 .cse2 .cse4 .cse9 .cse5) (or .cse6 .cse1 .cse2 .cse7 .cse8 .cse9 .cse5)))) [2021-11-23 02:22:53,352 INFO L854 garLoopResultBuilder]: At program point L171(lines 171 188) the Hoare annotation is: (let ((.cse7 (not (= ~waterLevel~0 1))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 2 ~waterLevel~0))) (.cse5 (not (<= ~waterLevel~0 2))) (.cse8 (not (= ~methaneLevelCritical~0 1))) (.cse6 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse0 .cse1 .cse2 .cse8 .cse6) (or .cse7 .cse0 .cse1 .cse2 .cse4 .cse6) (or .cse0 .cse1 .cse2 .cse3 .cse5 .cse8 .cse6))) [2021-11-23 02:22:53,352 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 437 448) no Hoare annotation was computed. [2021-11-23 02:22:53,352 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 437 448) the Hoare annotation is: (let ((.cse8 (not (= |old(~waterLevel~0)| 1)))) (let ((.cse2 (not (= ~pumpRunning~0 1))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse7 (let ((.cse10 (not (= ~pumpRunning~0 0))) (.cse11 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse10 (not (= |old(~waterLevel~0)| 2)) .cse11) (or .cse10 .cse8 .cse11)))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 1))) (.cse9 (= ~waterLevel~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse2 .cse6 .cse3 .cse4 .cse5) (or .cse7 .cse8 .cse0 .cse1 .cse9) (or .cse7 .cse8 .cse0 .cse6 .cse9)))) [2021-11-23 02:22:53,355 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:22:53,356 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-23 02:22:53,421 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 02:22:53 BoogieIcfgContainer [2021-11-23 02:22:53,422 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-23 02:22:53,428 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-23 02:22:53,428 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-23 02:22:53,429 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-23 02:22:53,429 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:22:04" (3/4) ... [2021-11-23 02:22:53,431 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-23 02:22:53,436 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-11-23 02:22:53,437 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-23 02:22:53,437 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-23 02:22:53,437 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-11-23 02:22:53,437 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-23 02:22:53,437 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-23 02:22:53,438 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 02:22:53,438 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-23 02:22:53,446 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 74 nodes and edges [2021-11-23 02:22:53,447 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 27 nodes and edges [2021-11-23 02:22:53,448 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2021-11-23 02:22:53,449 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-23 02:22:53,449 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-23 02:22:53,450 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-23 02:22:53,450 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-23 02:22:53,475 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel == 1)) || !(methaneLevelCritical == 1))) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel))) [2021-11-23 02:22:53,476 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((waterLevel == 1 && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((pumpRunning == \old(pumpRunning) && waterLevel == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2021-11-23 02:22:53,477 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((((!(1 == systemActive) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive))) && ((((!(1 == systemActive) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) [2021-11-23 02:22:53,477 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || !(methAndRunningLastTime == 0)) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0))) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(methAndRunningLastTime == 0))) && ((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0)) [2021-11-23 02:22:53,477 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(0 == systemActive)) && (((((((pumpRunning == 0 && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == 1) && tmp == methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == 1) && tmp == methaneLevelCritical))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-11-23 02:22:53,478 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((\old(waterLevel) == waterLevel && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || tmp == 0) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0)) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((\old(waterLevel) == waterLevel && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel == 1) && tmp == methaneLevelCritical) && !(0 == systemActive))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel == 1) && tmp == methaneLevelCritical) && !(0 == systemActive))) || !(methaneLevelCritical == 1))) && (((((!(1 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) [2021-11-23 02:22:53,479 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2021-11-23 02:22:53,480 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && tmp == 0)) || !(methAndRunningLastTime == 0)) && (((((((pumpRunning == 0 && tmp == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || !(methAndRunningLastTime == 0))) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && tmp == 0)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0))) && (((((((pumpRunning == 0 && tmp == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0)) [2021-11-23 02:22:53,508 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/witness.graphml [2021-11-23 02:22:53,509 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-23 02:22:53,509 INFO L158 Benchmark]: Toolchain (without parser) took 50659.83ms. Allocated memory was 98.6MB in the beginning and 494.9MB in the end (delta: 396.4MB). Free memory was 77.0MB in the beginning and 398.1MB in the end (delta: -321.1MB). Peak memory consumption was 73.8MB. Max. memory is 16.1GB. [2021-11-23 02:22:53,510 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 98.6MB. Free memory is still 71.5MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-23 02:22:53,510 INFO L158 Benchmark]: CACSL2BoogieTranslator took 432.87ms. Allocated memory is still 98.6MB. Free memory was 76.8MB in the beginning and 65.7MB in the end (delta: 11.2MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-11-23 02:22:53,510 INFO L158 Benchmark]: Boogie Procedure Inliner took 86.44ms. Allocated memory is still 98.6MB. Free memory was 65.7MB in the beginning and 63.0MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-23 02:22:53,511 INFO L158 Benchmark]: Boogie Preprocessor took 48.36ms. Allocated memory is still 98.6MB. Free memory was 63.0MB in the beginning and 61.5MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-23 02:22:53,511 INFO L158 Benchmark]: RCFGBuilder took 610.70ms. Allocated memory is still 98.6MB. Free memory was 61.5MB in the beginning and 40.1MB in the end (delta: 21.4MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2021-11-23 02:22:53,512 INFO L158 Benchmark]: TraceAbstraction took 49392.80ms. Allocated memory was 98.6MB in the beginning and 494.9MB in the end (delta: 396.4MB). Free memory was 39.7MB in the beginning and 405.4MB in the end (delta: -365.8MB). Peak memory consumption was 273.1MB. Max. memory is 16.1GB. [2021-11-23 02:22:53,512 INFO L158 Benchmark]: Witness Printer took 80.47ms. Allocated memory is still 494.9MB. Free memory was 405.4MB in the beginning and 398.1MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-11-23 02:22:53,514 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 98.6MB. Free memory is still 71.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 432.87ms. Allocated memory is still 98.6MB. Free memory was 76.8MB in the beginning and 65.7MB in the end (delta: 11.2MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 86.44ms. Allocated memory is still 98.6MB. Free memory was 65.7MB in the beginning and 63.0MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 48.36ms. Allocated memory is still 98.6MB. Free memory was 63.0MB in the beginning and 61.5MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 610.70ms. Allocated memory is still 98.6MB. Free memory was 61.5MB in the beginning and 40.1MB in the end (delta: 21.4MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * TraceAbstraction took 49392.80ms. Allocated memory was 98.6MB in the beginning and 494.9MB in the end (delta: 396.4MB). Free memory was 39.7MB in the beginning and 405.4MB in the end (delta: -365.8MB). Peak memory consumption was 273.1MB. Max. memory is 16.1GB. * Witness Printer took 80.47ms. Allocated memory is still 494.9MB. Free memory was 405.4MB in the beginning and 398.1MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 627]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 64 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 49.2s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 6.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.3s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2654 SdHoareTripleChecker+Valid, 3.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2631 mSDsluCounter, 3387 SdHoareTripleChecker+Invalid, 2.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2856 mSDsCounter, 1309 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3767 IncrementalHoareTripleChecker+Invalid, 5076 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1309 mSolverCounterUnsat, 890 mSDtfsCounter, 3767 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1150 GetRequests, 834 SyntacticMatches, 31 SemanticMatches, 285 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8522 ImplicationChecksByTransitivity, 17.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=558occurred in iteration=12, InterpolantAutomatonStates: 127, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 13 MinimizatonAttempts, 636 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 36 LocationsWithAnnotation, 1423 PreInvPairs, 1511 NumberOfFragments, 3360 HoareAnnotationTreeSize, 1423 FomulaSimplifications, 2632 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 36 FomulaSimplificationsInter, 20928 FormulaSimplificationTreeSizeReductionInter, 4.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 5.0s InterpolantComputationTime, 1056 NumberOfCodeBlocks, 1003 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 1334 ConstructedInterpolants, 0 QuantifiedInterpolants, 4307 SizeOfPredicates, 37 NumberOfNonLiveVariables, 1919 ConjunctsInSsa, 95 ConjunctsInUnsatCore, 20 InterpolantComputations, 10 PerfectInterpolantSequences, 838/988 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 362]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(0 == systemActive)) && (((((((pumpRunning == 0 && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == 1) && tmp == methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == 1) && tmp == methaneLevelCritical))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive)) || (((((2 == waterLevel && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive))) || (((((2 == waterLevel && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && !(0 == systemActive)) && pumpRunning == 1)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 171]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || !(methAndRunningLastTime == 0)) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0))) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(methAndRunningLastTime == 0))) && ((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((((!(1 == systemActive) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive))) && ((((!(1 == systemActive) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: ((((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((\old(waterLevel) == waterLevel && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || tmp == 0) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0)) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((\old(waterLevel) == waterLevel && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel == 1) && tmp == methaneLevelCritical) && !(0 == systemActive))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel == 1) && tmp == methaneLevelCritical) && !(0 == systemActive))) || !(methaneLevelCritical == 1))) && (((((!(1 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) - InvariantResult [Line: 197]: Loop Invariant Derived loop invariant: (((((((((((waterLevel == 1 && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((pumpRunning == \old(pumpRunning) && waterLevel == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && splverifierCounter == 0) && !(0 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) - InvariantResult [Line: 135]: Loop Invariant Derived loop invariant: ((((((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel == 1)) || !(methaneLevelCritical == 1))) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 537]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 627]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 609]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 55]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 609]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 527]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: (((((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && tmp == 0)) || !(methAndRunningLastTime == 0)) && (((((((pumpRunning == 0 && tmp == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || !(methAndRunningLastTime == 0))) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && tmp == 0)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0))) && (((((((pumpRunning == 0 && tmp == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0)) RESULT: Ultimate proved your program to be correct! [2021-11-23 02:22:53,575 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_deadc6cb-612a-43cb-8654-8b21a1633019/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE