./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aef121e0 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4583285deb29d8014ded34089a46614a743cea13eee9bbb990cdfd770bfce36e --- Real Ultimate output --- This is Ultimate 0.2.1-dev-aef121e [2021-11-23 01:56:52,732 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-23 01:56:52,733 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-23 01:56:52,768 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-23 01:56:52,768 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-23 01:56:52,770 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-23 01:56:52,772 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-23 01:56:52,774 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-23 01:56:52,777 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-23 01:56:52,778 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-23 01:56:52,779 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-23 01:56:52,781 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-23 01:56:52,781 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-23 01:56:52,783 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-23 01:56:52,784 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-23 01:56:52,786 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-23 01:56:52,787 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-23 01:56:52,788 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-23 01:56:52,791 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-23 01:56:52,794 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-23 01:56:52,797 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-23 01:56:52,798 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-23 01:56:52,800 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-23 01:56:52,801 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-23 01:56:52,805 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-23 01:56:52,806 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-23 01:56:52,806 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-23 01:56:52,808 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-23 01:56:52,808 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-23 01:56:52,810 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-23 01:56:52,810 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-23 01:56:52,811 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-23 01:56:52,812 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-23 01:56:52,813 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-23 01:56:52,814 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-23 01:56:52,815 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-23 01:56:52,816 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-23 01:56:52,816 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-23 01:56:52,816 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-23 01:56:52,818 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-23 01:56:52,818 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-23 01:56:52,820 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-32bit-Taipan_Default.epf [2021-11-23 01:56:52,865 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-23 01:56:52,866 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-23 01:56:52,866 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-23 01:56:52,867 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-23 01:56:52,867 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-23 01:56:52,868 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-23 01:56:52,868 INFO L138 SettingsManager]: * User list type=DISABLED [2021-11-23 01:56:52,868 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2021-11-23 01:56:52,868 INFO L138 SettingsManager]: * Explicit value domain=true [2021-11-23 01:56:52,869 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2021-11-23 01:56:52,870 INFO L138 SettingsManager]: * Octagon Domain=false [2021-11-23 01:56:52,870 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2021-11-23 01:56:52,870 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2021-11-23 01:56:52,870 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2021-11-23 01:56:52,871 INFO L138 SettingsManager]: * Interval Domain=false [2021-11-23 01:56:52,871 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2021-11-23 01:56:52,871 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2021-11-23 01:56:52,871 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2021-11-23 01:56:52,872 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-23 01:56:52,872 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-23 01:56:52,873 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-23 01:56:52,873 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-23 01:56:52,873 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-23 01:56:52,873 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-23 01:56:52,873 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-23 01:56:52,874 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-23 01:56:52,875 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-23 01:56:52,876 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-23 01:56:52,876 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-23 01:56:52,876 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-23 01:56:52,876 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-23 01:56:52,877 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-23 01:56:52,877 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 01:56:52,877 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-23 01:56:52,877 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-23 01:56:52,878 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-23 01:56:52,878 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2021-11-23 01:56:52,878 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-23 01:56:52,878 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-23 01:56:52,879 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-23 01:56:52,879 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-23 01:56:52,879 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4583285deb29d8014ded34089a46614a743cea13eee9bbb990cdfd770bfce36e [2021-11-23 01:56:53,198 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-23 01:56:53,224 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-23 01:56:53,228 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-23 01:56:53,229 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-23 01:56:53,230 INFO L275 PluginConnector]: CDTParser initialized [2021-11-23 01:56:53,231 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c [2021-11-23 01:56:53,307 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/data/5acfe06a1/f879f3dfc4fb418e91598179bf0038a1/FLAGf5e7db503 [2021-11-23 01:56:53,864 INFO L306 CDTParser]: Found 1 translation units. [2021-11-23 01:56:53,865 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c [2021-11-23 01:56:53,883 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/data/5acfe06a1/f879f3dfc4fb418e91598179bf0038a1/FLAGf5e7db503 [2021-11-23 01:56:54,159 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/data/5acfe06a1/f879f3dfc4fb418e91598179bf0038a1 [2021-11-23 01:56:54,162 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-23 01:56:54,163 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-23 01:56:54,165 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-23 01:56:54,165 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-23 01:56:54,168 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-23 01:56:54,169 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:56:54" (1/1) ... [2021-11-23 01:56:54,170 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4a0a8523 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:56:54, skipping insertion in model container [2021-11-23 01:56:54,170 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:56:54" (1/1) ... [2021-11-23 01:56:54,177 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-23 01:56:54,222 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-23 01:56:54,519 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2021-11-23 01:56:54,522 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 01:56:54,532 INFO L203 MainTranslator]: Completed pre-run [2021-11-23 01:56:54,611 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2021-11-23 01:56:54,612 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 01:56:54,640 INFO L208 MainTranslator]: Completed translation [2021-11-23 01:56:54,640 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:56:54 WrapperNode [2021-11-23 01:56:54,640 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-23 01:56:54,642 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-23 01:56:54,642 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-23 01:56:54,642 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-23 01:56:54,649 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:56:54" (1/1) ... [2021-11-23 01:56:54,678 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:56:54" (1/1) ... [2021-11-23 01:56:54,730 INFO L137 Inliner]: procedures = 58, calls = 158, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 265 [2021-11-23 01:56:54,730 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-23 01:56:54,731 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-23 01:56:54,731 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-23 01:56:54,731 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-23 01:56:54,741 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:56:54" (1/1) ... [2021-11-23 01:56:54,741 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:56:54" (1/1) ... [2021-11-23 01:56:54,755 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:56:54" (1/1) ... [2021-11-23 01:56:54,756 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:56:54" (1/1) ... [2021-11-23 01:56:54,762 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:56:54" (1/1) ... [2021-11-23 01:56:54,766 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:56:54" (1/1) ... [2021-11-23 01:56:54,769 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:56:54" (1/1) ... [2021-11-23 01:56:54,786 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-23 01:56:54,794 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-23 01:56:54,794 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-23 01:56:54,794 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-23 01:56:54,797 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:56:54" (1/1) ... [2021-11-23 01:56:54,804 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 01:56:54,816 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 01:56:54,835 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-23 01:56:54,841 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-23 01:56:54,875 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-23 01:56:54,875 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-23 01:56:54,875 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-23 01:56:54,876 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-11-23 01:56:54,876 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-11-23 01:56:54,876 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-23 01:56:54,876 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-23 01:56:54,876 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-23 01:56:54,876 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-23 01:56:54,876 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 01:56:54,877 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 01:56:54,877 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-23 01:56:54,877 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-23 01:56:54,877 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-11-23 01:56:54,877 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-11-23 01:56:54,877 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-23 01:56:54,877 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-23 01:56:54,878 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-23 01:56:54,878 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-23 01:56:54,878 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-23 01:56:54,951 INFO L236 CfgBuilder]: Building ICFG [2021-11-23 01:56:54,953 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-23 01:56:55,392 INFO L277 CfgBuilder]: Performing block encoding [2021-11-23 01:56:55,485 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-23 01:56:55,486 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-23 01:56:55,488 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:56:55 BoogieIcfgContainer [2021-11-23 01:56:55,489 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-23 01:56:55,491 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-23 01:56:55,491 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-23 01:56:55,494 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-23 01:56:55,494 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 01:56:54" (1/3) ... [2021-11-23 01:56:55,495 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@19f19ad2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 01:56:55, skipping insertion in model container [2021-11-23 01:56:55,495 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:56:54" (2/3) ... [2021-11-23 01:56:55,496 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@19f19ad2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 01:56:55, skipping insertion in model container [2021-11-23 01:56:55,496 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:56:55" (3/3) ... [2021-11-23 01:56:55,497 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product52.cil.c [2021-11-23 01:56:55,502 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-23 01:56:55,503 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-23 01:56:55,565 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-23 01:56:55,575 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-23 01:56:55,577 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-23 01:56:55,614 INFO L276 IsEmpty]: Start isEmpty. Operand has 64 states, 41 states have (on average 1.4634146341463414) internal successors, (60), 50 states have internal predecessors, (60), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2021-11-23 01:56:55,624 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2021-11-23 01:56:55,624 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:56:55,625 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:56:55,625 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:56:55,629 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:56:55,629 INFO L85 PathProgramCache]: Analyzing trace with hash 1871913479, now seen corresponding path program 1 times [2021-11-23 01:56:55,638 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:56:55,638 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [974695075] [2021-11-23 01:56:55,638 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:56:55,639 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:56:55,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:56:55,873 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 01:56:55,873 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:56:55,874 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [974695075] [2021-11-23 01:56:55,874 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [974695075] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:56:55,875 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:56:55,875 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-23 01:56:55,876 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [641335518] [2021-11-23 01:56:55,877 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:56:55,880 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-23 01:56:55,880 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:56:55,908 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-23 01:56:55,909 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-23 01:56:55,911 INFO L87 Difference]: Start difference. First operand has 64 states, 41 states have (on average 1.4634146341463414) internal successors, (60), 50 states have internal predecessors, (60), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-23 01:56:55,973 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:56:55,974 INFO L93 Difference]: Finished difference Result 126 states and 173 transitions. [2021-11-23 01:56:55,975 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-23 01:56:55,976 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2021-11-23 01:56:55,976 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:56:55,986 INFO L225 Difference]: With dead ends: 126 [2021-11-23 01:56:55,986 INFO L226 Difference]: Without dead ends: 59 [2021-11-23 01:56:55,990 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-23 01:56:55,994 INFO L933 BasicCegarLoop]: 65 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 65 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-23 01:56:55,995 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 65 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-23 01:56:56,012 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2021-11-23 01:56:56,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 59. [2021-11-23 01:56:56,043 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 38 states have (on average 1.368421052631579) internal successors, (52), 46 states have internal predecessors, (52), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2021-11-23 01:56:56,054 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 77 transitions. [2021-11-23 01:56:56,055 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 77 transitions. Word has length 17 [2021-11-23 01:56:56,056 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:56:56,057 INFO L470 AbstractCegarLoop]: Abstraction has 59 states and 77 transitions. [2021-11-23 01:56:56,057 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-23 01:56:56,057 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 77 transitions. [2021-11-23 01:56:56,063 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2021-11-23 01:56:56,063 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:56:56,063 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:56:56,063 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-23 01:56:56,064 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:56:56,064 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:56:56,065 INFO L85 PathProgramCache]: Analyzing trace with hash 1788829300, now seen corresponding path program 1 times [2021-11-23 01:56:56,065 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:56:56,065 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1860440400] [2021-11-23 01:56:56,065 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:56:56,066 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:56:56,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:56:56,137 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 01:56:56,137 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:56:56,138 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1860440400] [2021-11-23 01:56:56,138 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1860440400] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:56:56,138 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:56:56,138 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 01:56:56,139 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1964842482] [2021-11-23 01:56:56,139 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:56:56,140 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 01:56:56,140 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:56:56,141 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 01:56:56,141 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 01:56:56,142 INFO L87 Difference]: Start difference. First operand 59 states and 77 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-23 01:56:56,185 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:56:56,186 INFO L93 Difference]: Finished difference Result 90 states and 116 transitions. [2021-11-23 01:56:56,186 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 01:56:56,186 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2021-11-23 01:56:56,187 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:56:56,188 INFO L225 Difference]: With dead ends: 90 [2021-11-23 01:56:56,188 INFO L226 Difference]: Without dead ends: 51 [2021-11-23 01:56:56,189 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 01:56:56,190 INFO L933 BasicCegarLoop]: 51 mSDtfsCounter, 14 mSDsluCounter, 46 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 86 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-23 01:56:56,191 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [18 Valid, 86 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-23 01:56:56,192 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51 states. [2021-11-23 01:56:56,198 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51. [2021-11-23 01:56:56,199 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 33 states have (on average 1.393939393939394) internal successors, (46), 41 states have internal predecessors, (46), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 7 states have call predecessors, (10), 10 states have call successors, (10) [2021-11-23 01:56:56,200 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 66 transitions. [2021-11-23 01:56:56,200 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 66 transitions. Word has length 18 [2021-11-23 01:56:56,201 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:56:56,201 INFO L470 AbstractCegarLoop]: Abstraction has 51 states and 66 transitions. [2021-11-23 01:56:56,201 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-23 01:56:56,201 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 66 transitions. [2021-11-23 01:56:56,203 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2021-11-23 01:56:56,203 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:56:56,203 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:56:56,203 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-23 01:56:56,203 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:56:56,204 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:56:56,204 INFO L85 PathProgramCache]: Analyzing trace with hash 605785607, now seen corresponding path program 1 times [2021-11-23 01:56:56,205 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:56:56,205 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [906365115] [2021-11-23 01:56:56,205 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:56:56,205 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:56:56,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:56:56,298 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 01:56:56,298 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:56:56,298 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [906365115] [2021-11-23 01:56:56,299 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [906365115] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:56:56,299 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:56:56,299 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 01:56:56,299 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1715675042] [2021-11-23 01:56:56,299 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:56:56,300 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-23 01:56:56,300 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:56:56,300 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 01:56:56,301 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 01:56:56,301 INFO L87 Difference]: Start difference. First operand 51 states and 66 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-23 01:56:56,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:56:56,395 INFO L93 Difference]: Finished difference Result 134 states and 174 transitions. [2021-11-23 01:56:56,396 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-23 01:56:56,396 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2021-11-23 01:56:56,396 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:56:56,398 INFO L225 Difference]: With dead ends: 134 [2021-11-23 01:56:56,398 INFO L226 Difference]: Without dead ends: 85 [2021-11-23 01:56:56,399 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-23 01:56:56,400 INFO L933 BasicCegarLoop]: 61 mSDtfsCounter, 89 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 47 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 93 SdHoareTripleChecker+Valid, 135 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 47 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 01:56:56,401 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [93 Valid, 135 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 47 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 01:56:56,402 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2021-11-23 01:56:56,415 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 82. [2021-11-23 01:56:56,416 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 54 states have (on average 1.3888888888888888) internal successors, (75), 65 states have internal predecessors, (75), 15 states have call successors, (15), 12 states have call predecessors, (15), 12 states have return successors, (16), 11 states have call predecessors, (16), 15 states have call successors, (16) [2021-11-23 01:56:56,418 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 106 transitions. [2021-11-23 01:56:56,418 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 106 transitions. Word has length 21 [2021-11-23 01:56:56,418 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:56:56,418 INFO L470 AbstractCegarLoop]: Abstraction has 82 states and 106 transitions. [2021-11-23 01:56:56,418 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-23 01:56:56,419 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 106 transitions. [2021-11-23 01:56:56,420 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-11-23 01:56:56,420 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:56:56,420 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:56:56,420 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-23 01:56:56,421 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:56:56,421 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:56:56,421 INFO L85 PathProgramCache]: Analyzing trace with hash 2039617653, now seen corresponding path program 1 times [2021-11-23 01:56:56,422 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:56:56,422 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [178294596] [2021-11-23 01:56:56,422 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:56:56,422 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:56:56,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:56:56,516 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 01:56:56,517 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:56:56,517 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [178294596] [2021-11-23 01:56:56,517 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [178294596] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:56:56,517 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:56:56,518 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 01:56:56,518 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [177985887] [2021-11-23 01:56:56,518 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:56:56,519 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-23 01:56:56,519 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:56:56,519 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 01:56:56,520 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 01:56:56,520 INFO L87 Difference]: Start difference. First operand 82 states and 106 transitions. Second operand has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-23 01:56:56,659 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:56:56,659 INFO L93 Difference]: Finished difference Result 199 states and 267 transitions. [2021-11-23 01:56:56,660 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-23 01:56:56,660 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2021-11-23 01:56:56,660 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:56:56,662 INFO L225 Difference]: With dead ends: 199 [2021-11-23 01:56:56,663 INFO L226 Difference]: Without dead ends: 119 [2021-11-23 01:56:56,664 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-23 01:56:56,669 INFO L933 BasicCegarLoop]: 58 mSDtfsCounter, 36 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 51 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 157 SdHoareTripleChecker+Invalid, 59 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 51 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 01:56:56,670 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [36 Valid, 157 Invalid, 59 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 51 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 01:56:56,671 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 119 states. [2021-11-23 01:56:56,702 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 119 to 112. [2021-11-23 01:56:56,708 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 112 states, 76 states have (on average 1.3026315789473684) internal successors, (99), 86 states have internal predecessors, (99), 18 states have call successors, (18), 17 states have call predecessors, (18), 17 states have return successors, (24), 17 states have call predecessors, (24), 18 states have call successors, (24) [2021-11-23 01:56:56,711 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 112 states to 112 states and 141 transitions. [2021-11-23 01:56:56,714 INFO L78 Accepts]: Start accepts. Automaton has 112 states and 141 transitions. Word has length 24 [2021-11-23 01:56:56,714 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:56:56,715 INFO L470 AbstractCegarLoop]: Abstraction has 112 states and 141 transitions. [2021-11-23 01:56:56,716 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-23 01:56:56,716 INFO L276 IsEmpty]: Start isEmpty. Operand 112 states and 141 transitions. [2021-11-23 01:56:56,718 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2021-11-23 01:56:56,722 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:56:56,722 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:56:56,722 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-23 01:56:56,723 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:56:56,723 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:56:56,726 INFO L85 PathProgramCache]: Analyzing trace with hash 1680772318, now seen corresponding path program 1 times [2021-11-23 01:56:56,726 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:56:56,727 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2135904563] [2021-11-23 01:56:56,727 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:56:56,727 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:56:56,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:56:56,825 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 01:56:56,825 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:56:56,826 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2135904563] [2021-11-23 01:56:56,827 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2135904563] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:56:56,827 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:56:56,827 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 01:56:56,828 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [809419422] [2021-11-23 01:56:56,830 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:56:56,834 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 01:56:56,835 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:56:56,835 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 01:56:56,836 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 01:56:56,837 INFO L87 Difference]: Start difference. First operand 112 states and 141 transitions. Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 01:56:56,917 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:56:56,917 INFO L93 Difference]: Finished difference Result 186 states and 241 transitions. [2021-11-23 01:56:56,918 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 01:56:56,918 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 29 [2021-11-23 01:56:56,923 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:56:56,926 INFO L225 Difference]: With dead ends: 186 [2021-11-23 01:56:56,930 INFO L226 Difference]: Without dead ends: 184 [2021-11-23 01:56:56,931 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 01:56:56,933 INFO L933 BasicCegarLoop]: 60 mSDtfsCounter, 42 mSDsluCounter, 61 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 01:56:56,938 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [42 Valid, 108 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 01:56:56,939 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2021-11-23 01:56:56,964 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 169. [2021-11-23 01:56:56,965 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 113 states have (on average 1.3097345132743363) internal successors, (148), 129 states have internal predecessors, (148), 29 states have call successors, (29), 27 states have call predecessors, (29), 26 states have return successors, (45), 25 states have call predecessors, (45), 29 states have call successors, (45) [2021-11-23 01:56:56,967 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 222 transitions. [2021-11-23 01:56:56,968 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 222 transitions. Word has length 29 [2021-11-23 01:56:56,968 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:56:56,968 INFO L470 AbstractCegarLoop]: Abstraction has 169 states and 222 transitions. [2021-11-23 01:56:56,968 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 01:56:56,969 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 222 transitions. [2021-11-23 01:56:56,972 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-11-23 01:56:56,972 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:56:56,972 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:56:56,972 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-23 01:56:56,973 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:56:56,973 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:56:56,973 INFO L85 PathProgramCache]: Analyzing trace with hash -522628244, now seen corresponding path program 1 times [2021-11-23 01:56:56,974 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:56:56,974 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [485754005] [2021-11-23 01:56:56,974 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:56:56,974 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:56:56,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:56:57,031 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2021-11-23 01:56:57,032 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:56:57,032 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [485754005] [2021-11-23 01:56:57,032 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [485754005] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:56:57,032 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:56:57,032 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 01:56:57,033 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1529299713] [2021-11-23 01:56:57,033 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:56:57,033 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-23 01:56:57,033 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:56:57,034 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 01:56:57,034 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 01:56:57,034 INFO L87 Difference]: Start difference. First operand 169 states and 222 transitions. Second operand has 4 states, 3 states have (on average 14.666666666666666) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2021-11-23 01:56:57,150 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:56:57,150 INFO L93 Difference]: Finished difference Result 337 states and 443 transitions. [2021-11-23 01:56:57,151 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-23 01:56:57,152 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 14.666666666666666) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) Word has length 60 [2021-11-23 01:56:57,152 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:56:57,155 INFO L225 Difference]: With dead ends: 337 [2021-11-23 01:56:57,155 INFO L226 Difference]: Without dead ends: 170 [2021-11-23 01:56:57,158 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 01:56:57,159 INFO L933 BasicCegarLoop]: 72 mSDtfsCounter, 82 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 82 SdHoareTripleChecker+Valid, 116 SdHoareTripleChecker+Invalid, 84 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 01:56:57,159 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [82 Valid, 116 Invalid, 84 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 01:56:57,160 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 170 states. [2021-11-23 01:56:57,189 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 170 to 159. [2021-11-23 01:56:57,195 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 107 states have (on average 1.2990654205607477) internal successors, (139), 121 states have internal predecessors, (139), 26 states have call successors, (26), 25 states have call predecessors, (26), 25 states have return successors, (36), 24 states have call predecessors, (36), 26 states have call successors, (36) [2021-11-23 01:56:57,198 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 201 transitions. [2021-11-23 01:56:57,199 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 201 transitions. Word has length 60 [2021-11-23 01:56:57,199 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:56:57,199 INFO L470 AbstractCegarLoop]: Abstraction has 159 states and 201 transitions. [2021-11-23 01:56:57,199 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 14.666666666666666) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2021-11-23 01:56:57,200 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 201 transitions. [2021-11-23 01:56:57,202 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-11-23 01:56:57,202 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:56:57,202 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:56:57,203 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-23 01:56:57,203 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:56:57,203 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:56:57,203 INFO L85 PathProgramCache]: Analyzing trace with hash -1539119106, now seen corresponding path program 1 times [2021-11-23 01:56:57,204 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:56:57,204 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1678026416] [2021-11-23 01:56:57,204 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:56:57,204 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:56:57,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:56:57,291 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 19 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-11-23 01:56:57,291 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:56:57,292 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1678026416] [2021-11-23 01:56:57,292 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1678026416] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 01:56:57,292 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [479353955] [2021-11-23 01:56:57,292 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:56:57,292 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:56:57,293 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 01:56:57,301 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 01:56:57,305 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-23 01:56:57,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:56:57,435 INFO L263 TraceCheckSpWp]: Trace formula consists of 428 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-23 01:56:57,442 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 01:56:57,639 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 01:56:57,639 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-23 01:56:57,639 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [479353955] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:56:57,640 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-23 01:56:57,640 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5] total 6 [2021-11-23 01:56:57,640 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1907091328] [2021-11-23 01:56:57,640 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:56:57,641 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 01:56:57,641 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:56:57,641 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 01:56:57,642 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2021-11-23 01:56:57,642 INFO L87 Difference]: Start difference. First operand 159 states and 201 transitions. Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2021-11-23 01:56:57,720 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:56:57,729 INFO L93 Difference]: Finished difference Result 307 states and 397 transitions. [2021-11-23 01:56:57,729 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 01:56:57,730 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) Word has length 57 [2021-11-23 01:56:57,730 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:56:57,732 INFO L225 Difference]: With dead ends: 307 [2021-11-23 01:56:57,732 INFO L226 Difference]: Without dead ends: 150 [2021-11-23 01:56:57,733 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 59 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2021-11-23 01:56:57,734 INFO L933 BasicCegarLoop]: 75 mSDtfsCounter, 28 mSDsluCounter, 44 mSDsCounter, 0 mSdLazyCounter, 40 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 111 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 40 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 01:56:57,734 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [28 Valid, 111 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 40 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 01:56:57,735 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2021-11-23 01:56:57,752 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 150. [2021-11-23 01:56:57,753 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 150 states, 102 states have (on average 1.2549019607843137) internal successors, (128), 114 states have internal predecessors, (128), 24 states have call successors, (24), 23 states have call predecessors, (24), 23 states have return successors, (31), 23 states have call predecessors, (31), 24 states have call successors, (31) [2021-11-23 01:56:57,754 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 150 states to 150 states and 183 transitions. [2021-11-23 01:56:57,754 INFO L78 Accepts]: Start accepts. Automaton has 150 states and 183 transitions. Word has length 57 [2021-11-23 01:56:57,755 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:56:57,755 INFO L470 AbstractCegarLoop]: Abstraction has 150 states and 183 transitions. [2021-11-23 01:56:57,755 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2021-11-23 01:56:57,755 INFO L276 IsEmpty]: Start isEmpty. Operand 150 states and 183 transitions. [2021-11-23 01:56:57,757 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-11-23 01:56:57,757 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:56:57,757 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:56:57,792 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-23 01:56:57,977 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2021-11-23 01:56:57,977 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:56:57,978 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:56:57,978 INFO L85 PathProgramCache]: Analyzing trace with hash 215137069, now seen corresponding path program 1 times [2021-11-23 01:56:57,978 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:56:57,978 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [321248205] [2021-11-23 01:56:57,978 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:56:57,978 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:56:58,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:56:58,125 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 18 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-11-23 01:56:58,125 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:56:58,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [321248205] [2021-11-23 01:56:58,125 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [321248205] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 01:56:58,126 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1099739290] [2021-11-23 01:56:58,126 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:56:58,126 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:56:58,126 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 01:56:58,139 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 01:56:58,153 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-23 01:56:58,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:56:58,252 INFO L263 TraceCheckSpWp]: Trace formula consists of 433 conjuncts, 17 conjunts are in the unsatisfiable core [2021-11-23 01:56:58,263 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 01:56:58,684 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 01:56:58,684 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-23 01:56:58,684 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1099739290] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:56:58,685 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-23 01:56:58,685 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [9] total 14 [2021-11-23 01:56:58,685 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1581270326] [2021-11-23 01:56:58,685 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:56:58,687 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-23 01:56:58,687 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:56:58,688 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-23 01:56:58,688 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=142, Unknown=0, NotChecked=0, Total=182 [2021-11-23 01:56:58,689 INFO L87 Difference]: Start difference. First operand 150 states and 183 transitions. Second operand has 8 states, 8 states have (on average 5.875) internal successors, (47), 8 states have internal predecessors, (47), 4 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 2 states have call predecessors, (6), 4 states have call successors, (6) [2021-11-23 01:56:59,100 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:56:59,100 INFO L93 Difference]: Finished difference Result 410 states and 507 transitions. [2021-11-23 01:56:59,101 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-23 01:56:59,101 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.875) internal successors, (47), 8 states have internal predecessors, (47), 4 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 2 states have call predecessors, (6), 4 states have call successors, (6) Word has length 60 [2021-11-23 01:56:59,101 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:56:59,104 INFO L225 Difference]: With dead ends: 410 [2021-11-23 01:56:59,104 INFO L226 Difference]: Without dead ends: 262 [2021-11-23 01:56:59,105 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 57 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=88, Invalid=292, Unknown=0, NotChecked=0, Total=380 [2021-11-23 01:56:59,106 INFO L933 BasicCegarLoop]: 66 mSDtfsCounter, 150 mSDsluCounter, 180 mSDsCounter, 0 mSdLazyCounter, 253 mSolverCounterSat, 66 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 156 SdHoareTripleChecker+Valid, 214 SdHoareTripleChecker+Invalid, 319 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 66 IncrementalHoareTripleChecker+Valid, 253 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-23 01:56:59,106 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [156 Valid, 214 Invalid, 319 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [66 Valid, 253 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-23 01:56:59,107 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 262 states. [2021-11-23 01:56:59,136 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 262 to 251. [2021-11-23 01:56:59,136 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 251 states, 175 states have (on average 1.262857142857143) internal successors, (221), 192 states have internal predecessors, (221), 37 states have call successors, (37), 36 states have call predecessors, (37), 38 states have return successors, (44), 38 states have call predecessors, (44), 37 states have call successors, (44) [2021-11-23 01:56:59,138 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 251 states to 251 states and 302 transitions. [2021-11-23 01:56:59,139 INFO L78 Accepts]: Start accepts. Automaton has 251 states and 302 transitions. Word has length 60 [2021-11-23 01:56:59,139 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:56:59,139 INFO L470 AbstractCegarLoop]: Abstraction has 251 states and 302 transitions. [2021-11-23 01:56:59,139 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.875) internal successors, (47), 8 states have internal predecessors, (47), 4 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 2 states have call predecessors, (6), 4 states have call successors, (6) [2021-11-23 01:56:59,139 INFO L276 IsEmpty]: Start isEmpty. Operand 251 states and 302 transitions. [2021-11-23 01:56:59,141 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-11-23 01:56:59,141 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:56:59,141 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:56:59,173 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-23 01:56:59,365 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2021-11-23 01:56:59,365 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:56:59,366 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:56:59,366 INFO L85 PathProgramCache]: Analyzing trace with hash 1039553112, now seen corresponding path program 1 times [2021-11-23 01:56:59,366 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:56:59,366 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [996249940] [2021-11-23 01:56:59,366 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:56:59,366 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:56:59,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:56:59,515 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 18 proven. 1 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-11-23 01:56:59,516 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:56:59,516 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [996249940] [2021-11-23 01:56:59,516 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [996249940] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 01:56:59,518 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1690983963] [2021-11-23 01:56:59,518 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:56:59,519 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:56:59,519 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 01:56:59,522 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 01:56:59,548 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-11-23 01:56:59,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:56:59,626 INFO L263 TraceCheckSpWp]: Trace formula consists of 439 conjuncts, 34 conjunts are in the unsatisfiable core [2021-11-23 01:56:59,630 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 01:57:00,141 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 13 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 01:57:00,141 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 01:57:00,838 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 11 proven. 3 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2021-11-23 01:57:00,838 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1690983963] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 01:57:00,838 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [234394611] [2021-11-23 01:57:00,866 INFO L159 IcfgInterpreter]: Started Sifa with 40 locations of interest [2021-11-23 01:57:00,866 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 01:57:00,879 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 01:57:00,884 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 01:57:00,884 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 01:57:08,104 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 296 for LOIs [2021-11-23 01:57:08,147 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 303 for LOIs [2021-11-23 01:57:12,067 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 299 for LOIs [2021-11-23 01:57:12,615 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 315 for LOIs [2021-11-23 01:57:12,722 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 01:57:56,327 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSifa [234394611] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:57:56,327 INFO L186 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2021-11-23 01:57:56,327 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [21] imperfect sequences [7, 12, 14] total 49 [2021-11-23 01:57:56,328 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1336811429] [2021-11-23 01:57:56,328 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:57:56,328 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2021-11-23 01:57:56,329 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:57:56,329 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2021-11-23 01:57:56,331 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=344, Invalid=2008, Unknown=0, NotChecked=0, Total=2352 [2021-11-23 01:57:56,334 INFO L87 Difference]: Start difference. First operand 251 states and 302 transitions. Second operand has 22 states, 18 states have (on average 1.7777777777777777) internal successors, (32), 18 states have internal predecessors, (32), 5 states have call successors, (6), 5 states have call predecessors, (6), 4 states have return successors, (6), 5 states have call predecessors, (6), 5 states have call successors, (6) [2021-11-23 01:58:24,250 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:58:24,251 INFO L93 Difference]: Finished difference Result 656 states and 800 transitions. [2021-11-23 01:58:24,251 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2021-11-23 01:58:24,251 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 18 states have (on average 1.7777777777777777) internal successors, (32), 18 states have internal predecessors, (32), 5 states have call successors, (6), 5 states have call predecessors, (6), 4 states have return successors, (6), 5 states have call predecessors, (6), 5 states have call successors, (6) Word has length 63 [2021-11-23 01:58:24,252 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:58:24,255 INFO L225 Difference]: With dead ends: 656 [2021-11-23 01:58:24,255 INFO L226 Difference]: Without dead ends: 407 [2021-11-23 01:58:24,258 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 205 GetRequests, 141 SyntacticMatches, 6 SemanticMatches, 58 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1163 ImplicationChecksByTransitivity, 67.8s TimeCoverageRelationStatistics Valid=550, Invalid=2990, Unknown=0, NotChecked=0, Total=3540 [2021-11-23 01:58:24,259 INFO L933 BasicCegarLoop]: 80 mSDtfsCounter, 157 mSDsluCounter, 657 mSDsCounter, 0 mSdLazyCounter, 1543 mSolverCounterSat, 90 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 160 SdHoareTripleChecker+Valid, 681 SdHoareTripleChecker+Invalid, 1633 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 90 IncrementalHoareTripleChecker+Valid, 1543 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.0s IncrementalHoareTripleChecker+Time [2021-11-23 01:58:24,259 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [160 Valid, 681 Invalid, 1633 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [90 Valid, 1543 Invalid, 0 Unknown, 0 Unchecked, 4.0s Time] [2021-11-23 01:58:24,260 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 407 states. [2021-11-23 01:58:24,352 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 407 to 369. [2021-11-23 01:58:24,353 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 369 states, 259 states have (on average 1.2586872586872586) internal successors, (326), 279 states have internal predecessors, (326), 53 states have call successors, (53), 52 states have call predecessors, (53), 56 states have return successors, (64), 55 states have call predecessors, (64), 53 states have call successors, (64) [2021-11-23 01:58:24,356 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 369 states to 369 states and 443 transitions. [2021-11-23 01:58:24,356 INFO L78 Accepts]: Start accepts. Automaton has 369 states and 443 transitions. Word has length 63 [2021-11-23 01:58:24,356 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:58:24,357 INFO L470 AbstractCegarLoop]: Abstraction has 369 states and 443 transitions. [2021-11-23 01:58:24,357 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 18 states have (on average 1.7777777777777777) internal successors, (32), 18 states have internal predecessors, (32), 5 states have call successors, (6), 5 states have call predecessors, (6), 4 states have return successors, (6), 5 states have call predecessors, (6), 5 states have call successors, (6) [2021-11-23 01:58:24,357 INFO L276 IsEmpty]: Start isEmpty. Operand 369 states and 443 transitions. [2021-11-23 01:58:24,359 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2021-11-23 01:58:24,359 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:58:24,359 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:58:24,396 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-11-23 01:58:24,573 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:58:24,574 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:58:24,574 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:58:24,574 INFO L85 PathProgramCache]: Analyzing trace with hash 744251358, now seen corresponding path program 1 times [2021-11-23 01:58:24,574 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:58:24,574 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [786383354] [2021-11-23 01:58:24,575 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:58:24,575 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:58:24,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:58:24,855 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 7 proven. 13 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-11-23 01:58:24,856 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:58:24,856 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [786383354] [2021-11-23 01:58:24,856 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [786383354] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 01:58:24,856 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1949039853] [2021-11-23 01:58:24,856 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:58:24,856 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:58:24,857 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 01:58:24,858 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 01:58:24,865 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-11-23 01:58:24,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:58:24,945 INFO L263 TraceCheckSpWp]: Trace formula consists of 445 conjuncts, 34 conjunts are in the unsatisfiable core [2021-11-23 01:58:24,949 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 01:58:25,363 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 13 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 01:58:25,363 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 01:58:25,955 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 11 proven. 3 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2021-11-23 01:58:25,955 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1949039853] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 01:58:25,955 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1439031079] [2021-11-23 01:58:25,959 INFO L159 IcfgInterpreter]: Started Sifa with 43 locations of interest [2021-11-23 01:58:25,959 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 01:58:25,959 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 01:58:25,960 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 01:58:25,960 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 01:58:34,365 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 323 for LOIs [2021-11-23 01:58:34,455 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 37 for LOIs [2021-11-23 01:58:34,736 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 67 for LOIs [2021-11-23 01:58:35,053 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 36 for LOIs [2021-11-23 01:58:35,057 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 51 for LOIs [2021-11-23 01:58:35,069 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 40 for LOIs [2021-11-23 01:58:35,073 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 01:58:45,555 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7175#(and (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| 0)) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (= ~head~0.offset 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= |old(~pumpRunning~0)| 2147483647) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= 0 ~methAndRunningLastTime~0) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)) (<= 0 |old(~methAndRunningLastTime~0)|) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| 1) (<= |old(~methAndRunningLastTime~0)| 1) (<= 0 ~head~0.base) (<= 0 ~methaneLevelCritical~0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 2147483647) (<= ~head~0.base 0) (= |#NULL.offset| 0) (not (= ~methAndRunningLastTime~0 0)) (<= ~methAndRunningLastTime~0 1) (<= 0 (+ |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 2147483648)) (<= 0 |#StackHeapBarrier|) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| ~methaneLevelCritical~0) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2021-11-23 01:58:45,555 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 01:58:45,556 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 01:58:45,556 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 12, 14] total 34 [2021-11-23 01:58:45,556 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [786663527] [2021-11-23 01:58:45,556 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 01:58:45,557 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2021-11-23 01:58:45,557 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:58:45,557 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2021-11-23 01:58:45,559 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=452, Invalid=3838, Unknown=0, NotChecked=0, Total=4290 [2021-11-23 01:58:45,559 INFO L87 Difference]: Start difference. First operand 369 states and 443 transitions. Second operand has 34 states, 29 states have (on average 3.8620689655172415) internal successors, (112), 29 states have internal predecessors, (112), 15 states have call successors, (24), 12 states have call predecessors, (24), 11 states have return successors, (21), 9 states have call predecessors, (21), 14 states have call successors, (21) [2021-11-23 01:58:48,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:58:48,624 INFO L93 Difference]: Finished difference Result 1051 states and 1290 transitions. [2021-11-23 01:58:48,624 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2021-11-23 01:58:48,625 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 29 states have (on average 3.8620689655172415) internal successors, (112), 29 states have internal predecessors, (112), 15 states have call successors, (24), 12 states have call predecessors, (24), 11 states have return successors, (21), 9 states have call predecessors, (21), 14 states have call successors, (21) Word has length 66 [2021-11-23 01:58:48,625 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:58:48,630 INFO L225 Difference]: With dead ends: 1051 [2021-11-23 01:58:48,631 INFO L226 Difference]: Without dead ends: 768 [2021-11-23 01:58:48,636 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 271 GetRequests, 156 SyntacticMatches, 3 SemanticMatches, 112 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4771 ImplicationChecksByTransitivity, 12.3s TimeCoverageRelationStatistics Valid=1418, Invalid=11464, Unknown=0, NotChecked=0, Total=12882 [2021-11-23 01:58:48,637 INFO L933 BasicCegarLoop]: 151 mSDtfsCounter, 1474 mSDsluCounter, 1662 mSDsCounter, 0 mSdLazyCounter, 2274 mSolverCounterSat, 874 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1478 SdHoareTripleChecker+Valid, 1542 SdHoareTripleChecker+Invalid, 3148 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 874 IncrementalHoareTripleChecker+Valid, 2274 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2021-11-23 01:58:48,637 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1478 Valid, 1542 Invalid, 3148 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [874 Valid, 2274 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2021-11-23 01:58:48,638 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 768 states. [2021-11-23 01:58:48,730 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 768 to 623. [2021-11-23 01:58:48,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 623 states, 442 states have (on average 1.253393665158371) internal successors, (554), 476 states have internal predecessors, (554), 88 states have call successors, (88), 87 states have call predecessors, (88), 92 states have return successors, (102), 90 states have call predecessors, (102), 88 states have call successors, (102) [2021-11-23 01:58:48,736 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 623 states to 623 states and 744 transitions. [2021-11-23 01:58:48,736 INFO L78 Accepts]: Start accepts. Automaton has 623 states and 744 transitions. Word has length 66 [2021-11-23 01:58:48,737 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:58:48,737 INFO L470 AbstractCegarLoop]: Abstraction has 623 states and 744 transitions. [2021-11-23 01:58:48,737 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 29 states have (on average 3.8620689655172415) internal successors, (112), 29 states have internal predecessors, (112), 15 states have call successors, (24), 12 states have call predecessors, (24), 11 states have return successors, (21), 9 states have call predecessors, (21), 14 states have call successors, (21) [2021-11-23 01:58:48,737 INFO L276 IsEmpty]: Start isEmpty. Operand 623 states and 744 transitions. [2021-11-23 01:58:48,740 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2021-11-23 01:58:48,740 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:58:48,740 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:58:48,765 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2021-11-23 01:58:48,951 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-11-23 01:58:48,951 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:58:48,951 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:58:48,952 INFO L85 PathProgramCache]: Analyzing trace with hash -244726395, now seen corresponding path program 1 times [2021-11-23 01:58:48,952 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:58:48,952 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1594027391] [2021-11-23 01:58:48,952 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:58:48,952 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:58:48,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:58:49,020 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 72 proven. 9 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2021-11-23 01:58:49,021 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:58:49,021 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1594027391] [2021-11-23 01:58:49,021 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1594027391] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 01:58:49,021 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1628699009] [2021-11-23 01:58:49,022 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:58:49,022 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:58:49,022 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 01:58:49,023 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 01:58:49,041 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2021-11-23 01:58:49,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:58:49,134 INFO L263 TraceCheckSpWp]: Trace formula consists of 609 conjuncts, 36 conjunts are in the unsatisfiable core [2021-11-23 01:58:49,138 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 01:58:49,738 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 72 proven. 44 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2021-11-23 01:58:49,738 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 01:58:50,475 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 77 proven. 25 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2021-11-23 01:58:50,475 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1628699009] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 01:58:50,475 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1405500047] [2021-11-23 01:58:50,479 INFO L159 IcfgInterpreter]: Started Sifa with 43 locations of interest [2021-11-23 01:58:50,479 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 01:58:50,479 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 01:58:50,480 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 01:58:50,480 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 01:58:57,749 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 41 for LOIs [2021-11-23 01:58:57,754 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 44 for LOIs [2021-11-23 01:58:58,154 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 63 for LOIs [2021-11-23 01:58:58,394 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 37 for LOIs [2021-11-23 01:58:58,397 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 35 for LOIs [2021-11-23 01:58:58,400 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 31 for LOIs [2021-11-23 01:58:58,403 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 01:59:03,172 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSifa [1405500047] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:59:03,173 INFO L186 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2021-11-23 01:59:03,173 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [28] imperfect sequences [7, 13, 13] total 55 [2021-11-23 01:59:03,173 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [996051241] [2021-11-23 01:59:03,173 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:59:03,174 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2021-11-23 01:59:03,174 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:59:03,175 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2021-11-23 01:59:03,176 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=374, Invalid=2596, Unknown=0, NotChecked=0, Total=2970 [2021-11-23 01:59:03,176 INFO L87 Difference]: Start difference. First operand 623 states and 744 transitions. Second operand has 29 states, 20 states have (on average 1.75) internal successors, (35), 24 states have internal predecessors, (35), 7 states have call successors, (7), 6 states have call predecessors, (7), 6 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2021-11-23 01:59:20,713 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:59:20,714 INFO L93 Difference]: Finished difference Result 1707 states and 2139 transitions. [2021-11-23 01:59:20,714 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 58 states. [2021-11-23 01:59:20,714 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 20 states have (on average 1.75) internal successors, (35), 24 states have internal predecessors, (35), 7 states have call successors, (7), 6 states have call predecessors, (7), 6 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) Word has length 113 [2021-11-23 01:59:20,715 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:59:20,722 INFO L225 Difference]: With dead ends: 1707 [2021-11-23 01:59:20,722 INFO L226 Difference]: Without dead ends: 1086 [2021-11-23 01:59:20,728 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 391 GetRequests, 280 SyntacticMatches, 14 SemanticMatches, 97 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3164 ImplicationChecksByTransitivity, 20.0s TimeCoverageRelationStatistics Valid=1253, Invalid=8449, Unknown=0, NotChecked=0, Total=9702 [2021-11-23 01:59:20,728 INFO L933 BasicCegarLoop]: 88 mSDtfsCounter, 198 mSDsluCounter, 877 mSDsCounter, 0 mSdLazyCounter, 2568 mSolverCounterSat, 248 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 201 SdHoareTripleChecker+Valid, 863 SdHoareTripleChecker+Invalid, 2816 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 248 IncrementalHoareTripleChecker+Valid, 2568 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.3s IncrementalHoareTripleChecker+Time [2021-11-23 01:59:20,729 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [201 Valid, 863 Invalid, 2816 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [248 Valid, 2568 Invalid, 0 Unknown, 0 Unchecked, 2.3s Time] [2021-11-23 01:59:20,731 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1086 states. [2021-11-23 01:59:20,877 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1086 to 902. [2021-11-23 01:59:20,879 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 902 states, 646 states have (on average 1.238390092879257) internal successors, (800), 684 states have internal predecessors, (800), 126 states have call successors, (126), 123 states have call predecessors, (126), 129 states have return successors, (147), 128 states have call predecessors, (147), 126 states have call successors, (147) [2021-11-23 01:59:20,884 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 902 states to 902 states and 1073 transitions. [2021-11-23 01:59:20,885 INFO L78 Accepts]: Start accepts. Automaton has 902 states and 1073 transitions. Word has length 113 [2021-11-23 01:59:20,886 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:59:20,886 INFO L470 AbstractCegarLoop]: Abstraction has 902 states and 1073 transitions. [2021-11-23 01:59:20,886 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 20 states have (on average 1.75) internal successors, (35), 24 states have internal predecessors, (35), 7 states have call successors, (7), 6 states have call predecessors, (7), 6 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2021-11-23 01:59:20,886 INFO L276 IsEmpty]: Start isEmpty. Operand 902 states and 1073 transitions. [2021-11-23 01:59:20,889 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2021-11-23 01:59:20,890 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:59:20,890 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:59:20,933 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2021-11-23 01:59:21,117 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:59:21,117 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:59:21,118 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:59:21,118 INFO L85 PathProgramCache]: Analyzing trace with hash -1515969141, now seen corresponding path program 1 times [2021-11-23 01:59:21,118 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:59:21,118 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [107542999] [2021-11-23 01:59:21,118 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:59:21,118 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:59:21,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:59:21,219 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 72 proven. 9 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2021-11-23 01:59:21,220 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:59:21,220 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [107542999] [2021-11-23 01:59:21,220 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [107542999] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 01:59:21,220 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [335842455] [2021-11-23 01:59:21,220 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:59:21,221 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:59:21,221 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 01:59:21,222 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 01:59:21,241 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2021-11-23 01:59:21,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:59:21,332 INFO L263 TraceCheckSpWp]: Trace formula consists of 615 conjuncts, 22 conjunts are in the unsatisfiable core [2021-11-23 01:59:21,335 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 01:59:21,616 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 87 proven. 16 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2021-11-23 01:59:21,617 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 01:59:21,962 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 61 proven. 28 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2021-11-23 01:59:21,962 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [335842455] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 01:59:21,962 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [971108834] [2021-11-23 01:59:21,965 INFO L159 IcfgInterpreter]: Started Sifa with 46 locations of interest [2021-11-23 01:59:21,965 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 01:59:21,966 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 01:59:21,966 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 01:59:21,966 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 01:59:26,478 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 45 for LOIs [2021-11-23 01:59:26,488 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 30 for LOIs [2021-11-23 01:59:26,878 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 59 for LOIs [2021-11-23 01:59:27,108 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 34 for LOIs [2021-11-23 01:59:27,112 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 43 for LOIs [2021-11-23 01:59:27,121 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 35 for LOIs [2021-11-23 01:59:27,124 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 31 for LOIs [2021-11-23 01:59:27,128 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 01:59:31,839 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15256#(and (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| 0)) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|) (= ~head~0.offset 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~1#1|) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= 0 ~methAndRunningLastTime~0) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)) (<= 0 |old(~methAndRunningLastTime~0)|) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| 2147483647) (<= 0 ~head~0.base) (<= 0 ~methaneLevelCritical~0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 2147483647) (<= ~head~0.base 0) (= |#NULL.offset| 0) (not (= ~methAndRunningLastTime~0 0)) (<= 0 (+ |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 2147483648)) (<= 0 |#StackHeapBarrier|) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| ~methaneLevelCritical~0) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2021-11-23 01:59:31,839 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 01:59:31,839 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 01:59:31,840 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 9, 11] total 21 [2021-11-23 01:59:31,840 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [714020416] [2021-11-23 01:59:31,840 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 01:59:31,841 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2021-11-23 01:59:31,841 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:59:31,841 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2021-11-23 01:59:31,843 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=286, Invalid=2576, Unknown=0, NotChecked=0, Total=2862 [2021-11-23 01:59:31,843 INFO L87 Difference]: Start difference. First operand 902 states and 1073 transitions. Second operand has 21 states, 15 states have (on average 8.733333333333333) internal successors, (131), 16 states have internal predecessors, (131), 8 states have call successors, (30), 7 states have call predecessors, (30), 12 states have return successors, (33), 10 states have call predecessors, (33), 8 states have call successors, (33) [2021-11-23 01:59:33,233 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:59:33,234 INFO L93 Difference]: Finished difference Result 2485 states and 3087 transitions. [2021-11-23 01:59:33,234 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2021-11-23 01:59:33,234 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 15 states have (on average 8.733333333333333) internal successors, (131), 16 states have internal predecessors, (131), 8 states have call successors, (30), 7 states have call predecessors, (30), 12 states have return successors, (33), 10 states have call predecessors, (33), 8 states have call successors, (33) Word has length 116 [2021-11-23 01:59:33,235 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:59:33,249 INFO L225 Difference]: With dead ends: 2485 [2021-11-23 01:59:33,250 INFO L226 Difference]: Without dead ends: 1937 [2021-11-23 01:59:33,255 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 387 GetRequests, 301 SyntacticMatches, 12 SemanticMatches, 74 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2168 ImplicationChecksByTransitivity, 5.2s TimeCoverageRelationStatistics Valid=547, Invalid=5153, Unknown=0, NotChecked=0, Total=5700 [2021-11-23 01:59:33,256 INFO L933 BasicCegarLoop]: 104 mSDtfsCounter, 531 mSDsluCounter, 474 mSDsCounter, 0 mSdLazyCounter, 1123 mSolverCounterSat, 290 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 538 SdHoareTripleChecker+Valid, 482 SdHoareTripleChecker+Invalid, 1413 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 290 IncrementalHoareTripleChecker+Valid, 1123 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-11-23 01:59:33,256 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [538 Valid, 482 Invalid, 1413 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [290 Valid, 1123 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-11-23 01:59:33,259 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1937 states. [2021-11-23 01:59:33,560 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1937 to 1692. [2021-11-23 01:59:33,563 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1692 states, 1218 states have (on average 1.2192118226600985) internal successors, (1485), 1286 states have internal predecessors, (1485), 234 states have call successors, (234), 229 states have call predecessors, (234), 239 states have return successors, (274), 238 states have call predecessors, (274), 234 states have call successors, (274) [2021-11-23 01:59:33,570 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1692 states to 1692 states and 1993 transitions. [2021-11-23 01:59:33,571 INFO L78 Accepts]: Start accepts. Automaton has 1692 states and 1993 transitions. Word has length 116 [2021-11-23 01:59:33,571 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:59:33,572 INFO L470 AbstractCegarLoop]: Abstraction has 1692 states and 1993 transitions. [2021-11-23 01:59:33,572 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 15 states have (on average 8.733333333333333) internal successors, (131), 16 states have internal predecessors, (131), 8 states have call successors, (30), 7 states have call predecessors, (30), 12 states have return successors, (33), 10 states have call predecessors, (33), 8 states have call successors, (33) [2021-11-23 01:59:33,572 INFO L276 IsEmpty]: Start isEmpty. Operand 1692 states and 1993 transitions. [2021-11-23 01:59:33,577 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2021-11-23 01:59:33,577 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:59:33,577 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:59:33,612 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2021-11-23 01:59:33,793 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:59:33,793 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:59:33,794 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:59:33,794 INFO L85 PathProgramCache]: Analyzing trace with hash 342131089, now seen corresponding path program 2 times [2021-11-23 01:59:33,794 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:59:33,794 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1033822783] [2021-11-23 01:59:33,794 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:59:33,794 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:59:33,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:59:34,183 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 52 proven. 58 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2021-11-23 01:59:34,183 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:59:34,183 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1033822783] [2021-11-23 01:59:34,183 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1033822783] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 01:59:34,183 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1348931730] [2021-11-23 01:59:34,183 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2021-11-23 01:59:34,184 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:59:34,184 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 01:59:34,185 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 01:59:34,201 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2021-11-23 01:59:34,281 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2021-11-23 01:59:34,282 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-23 01:59:34,284 INFO L263 TraceCheckSpWp]: Trace formula consists of 439 conjuncts, 33 conjunts are in the unsatisfiable core [2021-11-23 01:59:34,288 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 01:59:34,658 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 86 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2021-11-23 01:59:34,659 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-23 01:59:34,659 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1348931730] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:59:34,659 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-23 01:59:34,659 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [20] total 25 [2021-11-23 01:59:34,659 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1979452585] [2021-11-23 01:59:34,660 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:59:34,660 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-23 01:59:34,660 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:59:34,660 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-23 01:59:34,661 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=77, Invalid=523, Unknown=0, NotChecked=0, Total=600 [2021-11-23 01:59:34,661 INFO L87 Difference]: Start difference. First operand 1692 states and 1993 transitions. Second operand has 8 states, 8 states have (on average 7.875) internal successors, (63), 8 states have internal predecessors, (63), 4 states have call successors, (11), 4 states have call predecessors, (11), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2021-11-23 01:59:35,239 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:59:35,240 INFO L93 Difference]: Finished difference Result 3454 states and 4128 transitions. [2021-11-23 01:59:35,240 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-23 01:59:35,240 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 7.875) internal successors, (63), 8 states have internal predecessors, (63), 4 states have call successors, (11), 4 states have call predecessors, (11), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) Word has length 116 [2021-11-23 01:59:35,242 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:59:35,243 INFO L225 Difference]: With dead ends: 3454 [2021-11-23 01:59:35,243 INFO L226 Difference]: Without dead ends: 0 [2021-11-23 01:59:35,250 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 141 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 165 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=102, Invalid=710, Unknown=0, NotChecked=0, Total=812 [2021-11-23 01:59:35,251 INFO L933 BasicCegarLoop]: 113 mSDtfsCounter, 125 mSDsluCounter, 406 mSDsCounter, 0 mSdLazyCounter, 274 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 128 SdHoareTripleChecker+Valid, 429 SdHoareTripleChecker+Invalid, 303 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 274 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-23 01:59:35,252 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [128 Valid, 429 Invalid, 303 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 274 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-23 01:59:35,253 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-23 01:59:35,253 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-23 01:59:35,253 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 01:59:35,253 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-23 01:59:35,254 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 116 [2021-11-23 01:59:35,254 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:59:35,254 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-23 01:59:35,254 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 7.875) internal successors, (63), 8 states have internal predecessors, (63), 4 states have call successors, (11), 4 states have call predecessors, (11), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2021-11-23 01:59:35,255 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-23 01:59:35,255 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-23 01:59:35,257 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-23 01:59:35,296 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2021-11-23 01:59:35,481 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2021-11-23 01:59:35,483 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-23 01:59:45,831 WARN L227 SmtUtils]: Spent 5.32s on a formula simplification. DAG size of input: 400 DAG size of output: 396 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2021-11-23 02:00:03,893 WARN L227 SmtUtils]: Spent 17.13s on a formula simplification. DAG size of input: 449 DAG size of output: 449 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2021-11-23 02:00:09,515 WARN L227 SmtUtils]: Spent 5.62s on a formula simplification. DAG size of input: 461 DAG size of output: 446 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2021-11-23 02:00:21,875 WARN L227 SmtUtils]: Spent 6.89s on a formula simplification. DAG size of input: 474 DAG size of output: 464 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2021-11-23 02:01:10,511 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 229 236) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (= ~pumpRunning~0 1))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (<= 1 ~waterLevel~0)) .cse2 (not (= ~methaneLevelCritical~0 1)) .cse3) (or .cse0 (not (<= 2 ~waterLevel~0)) .cse1 .cse2 .cse3))) [2021-11-23 02:01:10,512 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 229 236) no Hoare annotation was computed. [2021-11-23 02:01:10,512 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 162 168) no Hoare annotation was computed. [2021-11-23 02:01:10,512 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 162 168) the Hoare annotation is: true [2021-11-23 02:01:10,512 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 558 569) the Hoare annotation is: (let ((.cse4 (not (= 0 ~systemActive~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (= ~methaneLevelCritical~0 1)) (.cse2 (not (= |old(~methaneLevelCritical~0)| 1))) (.cse5 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse7 (not (= 1 ~systemActive~0))) (.cse6 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse9 (not (<= 2 ~waterLevel~0))) (.cse8 (not (= ~pumpRunning~0 1))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse6 .cse3 .cse4) (or .cse5 .cse7 (not (= 2 ~waterLevel~0)) .cse6 .cse8) (or .cse7 .cse9 .cse1 .cse8 .cse2) (or .cse5 .cse0 .cse7 .cse6 .cse3) (or .cse0 .cse7 .cse1 .cse2 .cse3) (or .cse5 .cse7 .cse6 .cse9 .cse8 .cse3))) [2021-11-23 02:01:10,512 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 558 569) no Hoare annotation was computed. [2021-11-23 02:01:10,513 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 570 578) the Hoare annotation is: true [2021-11-23 02:01:10,513 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 570 578) no Hoare annotation was computed. [2021-11-23 02:01:10,513 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 356 385) no Hoare annotation was computed. [2021-11-23 02:01:10,513 INFO L861 garLoopResultBuilder]: At program point L381(lines 356 385) the Hoare annotation is: true [2021-11-23 02:01:10,513 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 356 385) the Hoare annotation is: true [2021-11-23 02:01:10,513 INFO L858 garLoopResultBuilder]: For program point L377(line 377) no Hoare annotation was computed. [2021-11-23 02:01:10,514 INFO L858 garLoopResultBuilder]: For program point L370(lines 370 374) no Hoare annotation was computed. [2021-11-23 02:01:10,514 INFO L861 garLoopResultBuilder]: At program point L370-1(lines 370 374) the Hoare annotation is: true [2021-11-23 02:01:10,514 INFO L861 garLoopResultBuilder]: At program point L366-2(lines 366 380) the Hoare annotation is: true [2021-11-23 02:01:10,514 INFO L861 garLoopResultBuilder]: At program point L362(line 362) the Hoare annotation is: true [2021-11-23 02:01:10,514 INFO L858 garLoopResultBuilder]: For program point L362-1(line 362) no Hoare annotation was computed. [2021-11-23 02:01:10,514 INFO L858 garLoopResultBuilder]: For program point L478(lines 478 488) no Hoare annotation was computed. [2021-11-23 02:01:10,515 INFO L854 garLoopResultBuilder]: At program point L474(lines 474 491) the Hoare annotation is: (let ((.cse16 (= ~pumpRunning~0 0)) (.cse9 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (<= |old(~waterLevel~0)| ~waterLevel~0)) (.cse30 (and .cse16 .cse9)) (.cse31 (and (<= ~waterLevel~0 0) .cse9))) (let ((.cse28 (<= ~waterLevel~0 1)) (.cse29 (= 1 ~systemActive~0)) (.cse32 (or (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse30 .cse31)) (.cse11 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| ~methaneLevelCritical~0)) (.cse33 (or .cse5 .cse10))) (let ((.cse3 (and .cse16 (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse29 .cse32 .cse11 .cse33)) (.cse15 (not (<= |old(~waterLevel~0)| 1))) (.cse13 (and .cse16 .cse32 .cse11 .cse33)) (.cse14 (not (= 0 ~systemActive~0))) (.cse18 (and .cse28 (<= 1 ~waterLevel~0))) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse19 (not (= |old(~waterLevel~0)| 2))) (.cse8 (= ~methAndRunningLastTime~0 0)) (.cse12 (= ~pumpRunning~0 1)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse17 (or .cse30 .cse31)) (.cse20 (not (= |#NULL.offset| 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not .cse29)) (.cse21 (not (= ~head~0.offset 0))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse22 (not (<= ~methaneLevelCritical~0 0))) (.cse23 (not (<= 0 ~methaneLevelCritical~0))) (.cse24 (not (= |#NULL.base| 0))) (.cse25 (not (<= 0 |#StackHeapBarrier|))) (.cse26 (not (= ~head~0.base 0))) (.cse27 (not (= ~cleanupTimeShifts~0 4))) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse0 .cse7 (and .cse8 .cse9 .cse10 .cse11 .cse12) .cse4) (or .cse5 .cse13 .cse7 .cse14) (or .cse0 .cse2 .cse3 .cse7 .cse4) (or .cse15 .cse5 .cse6 .cse0 .cse7 (and .cse16 .cse17 .cse10 .cse11)) (or .cse0 .cse1 .cse18 .cse2 .cse19) (or .cse15 .cse5 .cse20 .cse6 .cse0 .cse21 .cse22 .cse23 .cse24 .cse25 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse26 .cse27) (or .cse5 .cse13 .cse1 .cse14) (or .cse0 .cse18 .cse2 .cse7 .cse19) (or .cse5 .cse6 (and .cse8 (<= 2 ~waterLevel~0) .cse9 .cse10 .cse11 .cse12) .cse0 .cse1 (and .cse16 .cse28 .cse17 .cse10 .cse11)) (or .cse20 .cse6 .cse0 .cse21 .cse2 .cse22 .cse23 .cse24 (and (<= ~methAndRunningLastTime~0 0) (= (ite (= ~waterLevel~0 0) 1 0) 0) (<= 0 ~methAndRunningLastTime~0)) .cse25 .cse26 .cse27 .cse4)))))) [2021-11-23 02:01:10,515 INFO L854 garLoopResultBuilder]: At program point L474-1(lines 466 494) the Hoare annotation is: (let ((.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (<= |old(~waterLevel~0)| ~waterLevel~0)) (.cse20 (= ~pumpRunning~0 0)) (.cse10 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse21 (<= ~waterLevel~0 1)) (.cse8 (= ~methAndRunningLastTime~0 0)) (.cse19 (= 1 ~systemActive~0)) (.cse22 (or (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (and .cse20 .cse10) (and (<= ~waterLevel~0 0) .cse10))) (.cse12 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| ~methaneLevelCritical~0)) (.cse23 (or .cse6 .cse11))) (let ((.cse3 (and .cse20 .cse8 (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse19 .cse22 .cse12 .cse23)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse16 (and .cse20 .cse8 .cse22 .cse12 .cse23)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse18 (not (= 0 ~systemActive~0))) (.cse14 (and .cse21 (<= 1 ~waterLevel~0))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse15 (not (= |old(~waterLevel~0)| 2))) (.cse5 (and .cse20 .cse8 .cse21 .cse10 .cse11 .cse12)) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not .cse19)) (.cse9 (<= 2 ~waterLevel~0)) (.cse13 (= ~pumpRunning~0 1)) (.cse17 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 (and .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) .cse0 .cse1) (or .cse0 .cse1 .cse14 .cse2 .cse15) (or .cse16 .cse6 .cse17 .cse18) (or .cse0 .cse2 .cse17 .cse3 .cse4) (or (not (= |#NULL.offset| 0)) .cse7 .cse0 (= (ite (= ~waterLevel~0 0) 1 0) 0) (not (= ~head~0.offset 0)) .cse2 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)) (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)) .cse4) (or .cse16 .cse6 .cse1 .cse18) (or .cse0 .cse14 .cse2 .cse17 .cse15) (or .cse5 .cse6 .cse7 .cse0 (and .cse9 .cse10 .cse11 .cse12 .cse13) .cse17))))) [2021-11-23 02:01:10,515 INFO L854 garLoopResultBuilder]: At program point L210(line 210) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (= 0 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6) (or .cse0 .cse2 .cse5 .cse3) (or .cse4 .cse1 .cse6) (or .cse4 .cse7 .cse0 .cse1) (or .cse4 .cse7 .cse0 .cse5))) [2021-11-23 02:01:10,515 INFO L854 garLoopResultBuilder]: At program point L206(line 206) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= 1 ~systemActive~0))) (let ((.cse2 (not (= 0 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (let ((.cse10 (+ ~waterLevel~0 1))) (and .cse0 (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse9 (<= .cse10 |old(~waterLevel~0)|) (<= |old(~waterLevel~0)| .cse10) (= ~pumpRunning~0 1)))) (.cse4 (not .cse9)) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (not (= ~methaneLevelCritical~0 1))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse6 .cse7) (or .cse0 .cse5 .cse2) (or .cse0 .cse8 .cse4 .cse5) (or .cse0 .cse8 .cse4 .cse1) (or (not (= |#NULL.offset| 0)) .cse8 .cse4 (and (= |timeShift_isLowWaterLevel_~tmp___0~2#1| |timeShift_isLowWaterLevel_~retValue_acc~3#1|) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (= |timeShift_isLowWaterSensorDry_~retValue_acc~10#1| |timeShift_isLowWaterSensorDry_#res#1|) (= |timeShift_isLowWaterLevel_~tmp___0~2#1| 1) (= |timeShift_isLowWaterSensorDry_#res#1| |timeShift_isLowWaterLevel_~tmp~4#1|) (= |timeShift_isLowWaterLevel_~retValue_acc~3#1| |timeShift_isLowWaterLevel_#res#1|) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (not (= ~head~0.offset 0)) .cse6 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)) (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)) .cse7) (or .cse3 .cse4 .cse6 .cse1 .cse7)))) [2021-11-23 02:01:10,515 INFO L858 garLoopResultBuilder]: For program point L479(lines 479 485) no Hoare annotation was computed. [2021-11-23 02:01:10,516 INFO L854 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (<= ~waterLevel~0 |old(~waterLevel~0)|) (<= |old(~waterLevel~0)| ~waterLevel~0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse3 .cse5 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse3 .cse5) (or .cse0 .cse4 .cse8) (or .cse3 .cse6 .cse4 .cse7) (or .cse0 .cse5 .cse8))) [2021-11-23 02:01:10,516 INFO L854 garLoopResultBuilder]: At program point L215-1(lines 196 220) the Hoare annotation is: (let ((.cse26 (= 1 ~systemActive~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (<= |old(~waterLevel~0)| ~waterLevel~0)) (.cse24 (<= ~waterLevel~0 1)) (.cse17 (= ~pumpRunning~0 0)) (.cse4 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse19 (not (= 0 ~systemActive~0))) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse6 (= ~pumpRunning~0 1)) (.cse18 (or (and .cse17 .cse4) (and (<= ~waterLevel~0 0) .cse4))) (.cse20 (not (= ~methaneLevelCritical~0 0))) (.cse21 (and .cse24 (<= 1 ~waterLevel~0))) (.cse23 (not (= |old(~waterLevel~0)| 2))) (.cse25 (and .cse17 (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse26 .cse4 (or .cse0 .cse5))) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse9 (not (= |#NULL.offset| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not .cse26)) (.cse10 (not (= ~head~0.offset 0))) (.cse22 (not (= |old(~pumpRunning~0)| 1))) (.cse11 (not (<= ~methaneLevelCritical~0 0))) (.cse12 (not (<= 0 ~methaneLevelCritical~0))) (.cse13 (not (= |#NULL.base| 0))) (.cse14 (not (<= 0 |#StackHeapBarrier|))) (.cse15 (not (= ~head~0.base 0))) (.cse16 (not (= ~cleanupTimeShifts~0 4))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6) .cse7 .cse8) (or .cse0 .cse9 .cse1 .cse2 .cse10 .cse11 .cse12 .cse13 .cse14 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse15 .cse16) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 (and .cse17 .cse18 .cse5) .cse7) (or .cse0 .cse7 .cse19) (or .cse2 .cse20 .cse21 .cse22 .cse23) (or .cse0 .cse20 .cse19) (or .cse0 .cse1 .cse2 (and .cse3 (<= 2 ~waterLevel~0) .cse4 .cse5 .cse6) .cse20 (and .cse17 .cse24 .cse18 .cse5)) (or .cse2 .cse20 .cse22 .cse25 .cse8) (or .cse2 .cse21 .cse22 .cse7 .cse23) (or .cse2 .cse22 .cse25 .cse7 .cse8) (or .cse9 .cse1 .cse2 .cse10 .cse22 .cse11 .cse12 .cse13 (and (<= ~methAndRunningLastTime~0 0) (= (ite (= ~waterLevel~0 0) 1 0) 0) (<= 0 ~methAndRunningLastTime~0)) .cse14 .cse15 .cse16 .cse8)))) [2021-11-23 02:01:10,516 INFO L858 garLoopResultBuilder]: For program point L149-1(lines 149 155) no Hoare annotation was computed. [2021-11-23 02:01:10,517 INFO L854 garLoopResultBuilder]: At program point L472(line 472) the Hoare annotation is: (let ((.cse19 (= ~pumpRunning~0 0)) (.cse4 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (<= |old(~waterLevel~0)| ~waterLevel~0)) (.cse30 (and .cse19 .cse4)) (.cse31 (and (<= ~waterLevel~0 0) .cse4))) (let ((.cse26 (<= ~waterLevel~0 1)) (.cse27 (= 1 ~systemActive~0)) (.cse28 (or (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse30 .cse31)) (.cse29 (or .cse0 .cse5))) (let ((.cse17 (and .cse19 (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse27 .cse28 .cse29)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse6 (= ~pumpRunning~0 1)) (.cse20 (or .cse30 .cse31)) (.cse24 (and .cse19 .cse28 .cse29)) (.cse21 (not (= ~methaneLevelCritical~0 0))) (.cse25 (not (= 0 ~systemActive~0))) (.cse22 (and .cse26 (<= 1 ~waterLevel~0))) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse23 (not (= |old(~waterLevel~0)| 2))) (.cse9 (not (= |#NULL.offset| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not .cse27)) (.cse10 (not (= ~head~0.offset 0))) (.cse18 (not (= |old(~pumpRunning~0)| 1))) (.cse11 (not (<= ~methaneLevelCritical~0 0))) (.cse12 (not (<= 0 ~methaneLevelCritical~0))) (.cse13 (not (= |#NULL.base| 0))) (.cse14 (not (<= 0 |#StackHeapBarrier|))) (.cse15 (not (= ~head~0.base 0))) (.cse16 (not (= ~cleanupTimeShifts~0 4))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6) .cse7 .cse8) (or .cse0 .cse9 .cse1 .cse2 .cse10 .cse11 .cse12 .cse13 .cse14 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse15 .cse16) (or .cse2 .cse17 .cse18 .cse7 .cse8) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 (and .cse19 .cse20 .cse5) .cse7) (or .cse2 .cse21 .cse17 .cse18 .cse8) (or .cse2 .cse21 .cse22 .cse18 .cse23) (or .cse0 .cse24 .cse7 .cse25) (or .cse0 .cse1 .cse2 (and .cse3 (<= 2 ~waterLevel~0) .cse4 .cse5 .cse6) .cse21 (and .cse19 .cse26 .cse20 .cse5)) (or .cse0 .cse24 .cse21 .cse25) (or .cse2 .cse22 .cse18 .cse7 .cse23) (or .cse9 .cse1 .cse2 .cse10 .cse18 .cse11 .cse12 .cse13 (and (<= ~methAndRunningLastTime~0 0) (= (ite (= ~waterLevel~0 0) 1 0) 0) (<= 0 ~methAndRunningLastTime~0)) .cse14 .cse15 .cse16 .cse8)))))) [2021-11-23 02:01:10,517 INFO L858 garLoopResultBuilder]: For program point L472-1(line 472) no Hoare annotation was computed. [2021-11-23 02:01:10,517 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 138 161) the Hoare annotation is: (let ((.cse11 (= ~methAndRunningLastTime~0 0)) (.cse12 (= 1 ~systemActive~0)) (.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (= ~pumpRunning~0 0)) (.cse14 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse16 (= 0 ~systemActive~0))) (let ((.cse5 (and .cse15 .cse13 .cse14 .cse16)) (.cse7 (not .cse16)) (.cse8 (and .cse15 .cse12 .cse14 (= ~pumpRunning~0 1))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (and .cse13 .cse11 .cse14)) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not .cse12)) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse10 (not (= ~methaneLevelCritical~0 1))) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (not (= |#NULL.offset| 0)) .cse0 .cse1 (not (= ~head~0.offset 0)) .cse2 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)) (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)) .cse3) (or .cse4 .cse5 .cse6 .cse7) (or .cse1 .cse6 .cse2 .cse8 .cse3) (or .cse4 .cse0 .cse1 .cse9 .cse10) (or .cse4 .cse5 .cse10 .cse7) (or .cse1 .cse2 .cse8 .cse10 .cse3) (or .cse4 .cse0 .cse1 .cse9 .cse6) (or .cse0 .cse11 .cse1 .cse2 .cse10 .cse3)))) [2021-11-23 02:01:10,517 INFO L858 garLoopResultBuilder]: For program point L142-1(lines 141 160) no Hoare annotation was computed. [2021-11-23 02:01:10,517 INFO L854 garLoopResultBuilder]: At program point L1005(line 1005) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (= 0 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6) (or .cse0 .cse2 .cse5 .cse3) (or .cse4 .cse1 .cse6) (or .cse4 .cse7 .cse0 .cse1) (or .cse4 .cse7 .cse0 .cse5))) [2021-11-23 02:01:10,518 INFO L858 garLoopResultBuilder]: For program point L204(lines 204 212) no Hoare annotation was computed. [2021-11-23 02:01:10,518 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 138 161) no Hoare annotation was computed. [2021-11-23 02:01:10,518 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1005) no Hoare annotation was computed. [2021-11-23 02:01:10,518 INFO L854 garLoopResultBuilder]: At program point L200(lines 200 217) the Hoare annotation is: (let ((.cse12 (+ ~waterLevel~0 1)) (.cse14 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (= 1 ~systemActive~0)) (.cse10 (= ~methAndRunningLastTime~0 0)) (.cse13 (let ((.cse15 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (<= .cse12 |old(~waterLevel~0)|) (and .cse14 .cse15) (and (<= ~waterLevel~0 0) .cse15))))) (let ((.cse8 (not (= 0 ~systemActive~0))) (.cse4 (and .cse14 .cse10 (<= |old(~waterLevel~0)| ~waterLevel~0) .cse13)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse9 (and .cse0 .cse11 (<= |old(~waterLevel~0)| .cse12) .cse13 (= ~pumpRunning~0 1))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not .cse11)) (.cse5 (not (= |old(~pumpRunning~0)| 1))) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (= |#NULL.offset| 0)) .cse1 .cse2 (not (= ~head~0.offset 0)) .cse5 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)) (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)) .cse6) (or .cse0 .cse7 .cse8) (or .cse0 .cse3 .cse8) (or .cse2 .cse5 .cse7 .cse9 .cse6) (or .cse0 .cse1 .cse2 .cse4 .cse7) (or .cse2 .cse3 .cse5 .cse9 .cse6) (or .cse1 .cse10 .cse2 .cse5 .cse7 .cse6))))) [2021-11-23 02:01:10,519 INFO L854 garLoopResultBuilder]: At program point L337(line 337) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~5#1| 1)) (.cse4 (not (= 0 ~systemActive~0))) (.cse5 (= ~pumpRunning~0 1))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 (= ~methaneLevelCritical~0 1) .cse2 .cse3 .cse4 .cse5))) [2021-11-23 02:01:10,519 INFO L861 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2021-11-23 02:01:10,519 INFO L861 garLoopResultBuilder]: At program point L119(lines 56 123) the Hoare annotation is: true [2021-11-23 02:01:10,519 INFO L858 garLoopResultBuilder]: For program point L86(lines 86 92) no Hoare annotation was computed. [2021-11-23 02:01:10,519 INFO L858 garLoopResultBuilder]: For program point L86-1(lines 86 92) no Hoare annotation was computed. [2021-11-23 02:01:10,519 INFO L854 garLoopResultBuilder]: At program point L78(line 78) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse8 (= ~pumpRunning~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse7 (= 1 ~systemActive~0)) (.cse9 (= ~methaneLevelCritical~0 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~5#1| 1)) (.cse10 (not .cse5))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse1 .cse2 .cse6 .cse7 .cse3 .cse4 .cse8) (and .cse0 .cse1 .cse9 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse7 .cse3 .cse4 .cse10) (and (= 2 ~waterLevel~0) .cse2 .cse7 .cse3 .cse4 .cse8) (and .cse6 .cse7 .cse9 .cse3 .cse4 .cse8) (and .cse0 .cse1 .cse7 .cse9 .cse3 .cse4 .cse10)))) [2021-11-23 02:01:10,520 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-23 02:01:10,520 INFO L854 garLoopResultBuilder]: At program point L442(lines 442 449) the Hoare annotation is: (let ((.cse2 (select |#memory_int| 11)) (.cse8 (select |#memory_int| 8)) (.cse9 (select |#memory_int| 16)) (.cse4 (select |#memory_int| 9)) (.cse0 (select |#memory_int| 14)) (.cse5 (select |#memory_int| 7)) (.cse1 (select |#memory_int| 6)) (.cse6 (select |#memory_int| 13)) (.cse10 (select |#memory_int| 1)) (.cse11 (select |#memory_int| 15)) (.cse3 (select |#memory_int| 10)) (.cse7 (select |#memory_int| 5))) (and (= (select .cse0 3) 84) (= (select .cse1 2) 102) (= (select .cse2 1) 0) (= 1 (select |#valid| 5)) (= 32 (select .cse3 1)) (= (select |#length| 3) 12) (= (select .cse4 0) 79) (= (select |#valid| 15) 1) (= 112 (select .cse5 4)) (= (select .cse1 0) 79) (= 3 (select |#length| 10)) (= ~pumpRunning~0 0) (= (select |#valid| 26) 1) (= (select .cse5 1) 80) (= 58 (select .cse6 5)) (= (select |#length| 8) 3) (= ~methAndRunningLastTime~0 0) (= (select |#length| 6) 4) (= (select |#valid| 9) 1) (= (select |#length| 4) 13) (= 117 (select .cse5 2)) (= (select .cse7 2) 0) (= 7 (select |#length| 7)) (= 7 (select |#length| 13)) (= 110 (select .cse8 1)) (= (select .cse1 1) 102) (= (select |#valid| 11) 1) (= (select |#valid| 27) 1) (= ~methaneLevelCritical~0 0) (= 58 (select .cse5 5)) (= (select .cse8 0) 79) (= 30 (select |#length| 23)) (= 41 (select .cse9 0)) (= 44 (select .cse5 0)) (= (select |#length| 24) 9) (= |ULTIMATE.start_valid_product_~retValue_acc~6#1| |ULTIMATE.start_valid_product_#res#1|) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= 44 (select .cse6 0)) (= (select .cse2 0) 10) (= (select .cse0 4) 0) (= 2 (select |#length| 1)) (= (select |#length| 17) 30) (= 73 (select .cse0 2)) (= 9 (select |#length| 18)) (= (select |#length| 19) 21) (= (select |#valid| 3) 1) (= (select |#valid| 7) 1) (= (select |#length| 22) 21) (= (select |#valid| 18) 1) (= (select |#valid| 22) 1) (= 3 (select |#length| 5)) (= 30 (select |#length| 26)) (= 77 (select .cse6 1)) (= 2 (select |#length| 11)) (= 1 ~systemActive~0) (= (select |#length| 15) 3) (= (select |#valid| 24) 1) (= (select .cse4 3) 0) (= (select |#valid| 12) 1) (= (select |#valid| 28) 1) (= (select .cse0 1) 82) (= (select |#valid| 4) 1) (= (select .cse4 1) 102) (= (select .cse8 2) 0) (= (select .cse9 1) 0) (= 101 (select .cse6 2)) (= 25 (select |#length| 25)) (= (select |#valid| 1) 1) (= (select .cse5 6) 0) (= (select .cse4 2) 102) (= (select |#valid| 20) 1) (= (select .cse7 0) 79) (= (select |#length| 12) 13) (= 2 (select |#length| 16)) (= (select |#valid| 21) 1) (= (select |#length| 9) 4) (= 104 (select .cse6 4)) (= (select |#length| 21) 9) (= (select |#valid| 14) 1) (= |ULTIMATE.start_main_~tmp~5#1| 1) (= 116 (select .cse6 3)) (= 5 (select |#length| 14)) (= (select |#valid| 0) 0) (= 30 (select |#length| 20)) (= (select |#valid| 25) 1) (= ~head~0.base 0) (= (select |#valid| 2) 1) (= |#NULL.offset| 0) (= (select .cse0 0) 67) (= ~waterLevel~0 1) (= (select .cse3 2) 0) (= (select |#length| 27) 9) (= (select .cse10 0) 48) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_main_~tmp~5#1|) (= (select |#valid| 23) 1) (= (select |#valid| 19) 1) (= (select .cse11 1) 75) (= 109 (select .cse5 3)) (= (select .cse1 3) 0) (= 0 (select .cse6 6)) (= (select |#valid| 16) 1) (= (select .cse11 2) 0) (= (select |#valid| 6) 1) (= (select .cse10 1) 0) (= (select .cse11 0) 79) (= (select .cse3 0) 41) (= (select |#valid| 17) 1) (= (select |#valid| 10) 1) (= (select .cse7 1) 110) (= (select |#valid| 8) 1) (= (select |#length| 28) 25) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))) [2021-11-23 02:01:10,521 INFO L861 garLoopResultBuilder]: At program point L442-2(lines 442 449) the Hoare annotation is: true [2021-11-23 02:01:10,521 INFO L854 garLoopResultBuilder]: At program point L116(lines 65 117) the Hoare annotation is: false [2021-11-23 02:01:10,521 INFO L858 garLoopResultBuilder]: For program point L335(lines 335 341) no Hoare annotation was computed. [2021-11-23 02:01:10,521 INFO L854 garLoopResultBuilder]: At program point L335-1(lines 335 341) the Hoare annotation is: (let ((.cse0 (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse1 (let ((.cse3 (= ~pumpRunning~0 0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~5#1| 1))) (or (and .cse3 .cse4 .cse5 (not .cse2)) (and .cse3 (= ~methAndRunningLastTime~0 0) .cse4 .cse5))))) (or (and (= 1 ~systemActive~0) .cse1) (and (or (<= 2 ~waterLevel~0) .cse2) .cse1)))))) (or (and (= ~methaneLevelCritical~0 0) .cse0) (and .cse0 (= ~methaneLevelCritical~0 1)))) [2021-11-23 02:01:10,521 INFO L858 garLoopResultBuilder]: For program point L104(lines 104 110) no Hoare annotation was computed. [2021-11-23 02:01:10,521 INFO L854 garLoopResultBuilder]: At program point L104-2(lines 96 111) the Hoare annotation is: (let ((.cse1 (= ~methAndRunningLastTime~0 0)) (.cse3 (= ~methaneLevelCritical~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (= 0 ~systemActive~0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~5#1| 1)) (.cse9 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse7 .cse2 .cse4 .cse5) (and .cse8 .cse2 .cse3 .cse4 .cse5 .cse9) (and .cse0 .cse7 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse4 .cse5 .cse9))) [2021-11-23 02:01:10,522 INFO L858 garLoopResultBuilder]: For program point L67(lines 66 115) no Hoare annotation was computed. [2021-11-23 02:01:10,522 INFO L854 garLoopResultBuilder]: At program point L96(lines 96 111) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse3 (= ~methaneLevelCritical~0 1)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~5#1| 1)) (.cse9 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse4 .cse5 .cse7) (and .cse0 .cse1 .cse3 .cse4 .cse5 .cse7) (and .cse0 .cse1 .cse6 .cse2 .cse4 .cse5) (and .cse8 .cse2 .cse3 .cse4 .cse5 .cse9) (and .cse6 .cse8 .cse2 .cse4 .cse5 .cse9))) [2021-11-23 02:01:10,522 INFO L854 garLoopResultBuilder]: At program point L88(line 88) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= ~methaneLevelCritical~0 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~5#1| 1)) (.cse9 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse4 .cse5 .cse7) (and .cse1 .cse6 .cse8 .cse2 .cse4 .cse5 .cse9) (and .cse0 .cse1 .cse3 .cse4 .cse5 .cse7) (and .cse0 .cse1 .cse6 .cse2 .cse4 .cse5) (and (= 2 ~waterLevel~0) .cse6 .cse2 .cse4 .cse5 .cse9) (and .cse8 .cse2 .cse3 .cse4 .cse5 .cse9))) [2021-11-23 02:01:10,522 INFO L854 garLoopResultBuilder]: At program point L113(lines 66 115) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= ~methaneLevelCritical~0 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~5#1| 1)) (.cse9 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse4 .cse5 .cse7) (and .cse1 .cse6 .cse8 .cse2 .cse4 .cse5 .cse9) (and .cse0 .cse1 .cse3 .cse4 .cse5 .cse7) (and .cse0 .cse1 .cse6 .cse2 .cse4 .cse5) (and (= 2 ~waterLevel~0) .cse6 .cse2 .cse4 .cse5 .cse9) (and .cse8 .cse2 .cse3 .cse4 .cse5 .cse9))) [2021-11-23 02:01:10,522 INFO L858 garLoopResultBuilder]: For program point L76(lines 76 82) no Hoare annotation was computed. [2021-11-23 02:01:10,523 INFO L858 garLoopResultBuilder]: For program point L76-1(lines 76 82) no Hoare annotation was computed. [2021-11-23 02:01:10,523 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 170 194) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 1)) .cse3) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3))) [2021-11-23 02:01:10,523 INFO L854 garLoopResultBuilder]: At program point L184(line 184) the Hoare annotation is: (let ((.cse7 (<= 2 ~waterLevel~0)) (.cse6 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (let ((.cse2 (= ~pumpRunning~0 0)) (.cse3 (or (and .cse7 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 1)) (and (< ~waterLevel~0 2) .cse6))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (and .cse2 .cse3) .cse4 .cse5) (or .cse0 (not (= |#NULL.offset| 0)) .cse1 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~2#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~9#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~9#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1|)) (not (= ~head~0.offset 0)) .cse4 (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) .cse5 (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))) (or .cse0 .cse1 (and .cse2 .cse6 .cse3) (not (= ~methaneLevelCritical~0 1)) .cse5) (or .cse0 .cse1 (not .cse7) .cse4 .cse5)))) [2021-11-23 02:01:10,523 INFO L854 garLoopResultBuilder]: At program point L178(lines 178 186) the Hoare annotation is: (let ((.cse6 (<= 2 ~waterLevel~0)) (.cse7 (< ~waterLevel~0 2))) (let ((.cse2 (and (= ~pumpRunning~0 0) (or (and .cse6 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 1)) (and .cse7 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 1)) .cse4) (or .cse0 (not (= |#NULL.offset| 0)) .cse1 (not (= ~head~0.offset 0)) .cse3 (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) .cse4 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~2#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (let ((.cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~9#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|))) (or (and .cse5 .cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~9#1| 0)) (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~9#1| 1) .cse7))) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1|) (let ((.cse8 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 0))) (or (and .cse8 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 1)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (not .cse8))))) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))))) [2021-11-23 02:01:10,524 INFO L854 garLoopResultBuilder]: At program point L174(lines 174 191) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 1)) .cse3) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3))) [2021-11-23 02:01:10,524 INFO L854 garLoopResultBuilder]: At program point L189(line 189) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 1)) .cse2) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2))) [2021-11-23 02:01:10,524 INFO L858 garLoopResultBuilder]: For program point L189-1(lines 170 194) no Hoare annotation was computed. [2021-11-23 02:01:10,524 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 170 194) no Hoare annotation was computed. [2021-11-23 02:01:10,524 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 546 557) no Hoare annotation was computed. [2021-11-23 02:01:10,525 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 546 557) the Hoare annotation is: (let ((.cse9 (= 0 ~systemActive~0))) (let ((.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not .cse9)) (.cse6 (not (= ~pumpRunning~0 1))) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse2 .cse8) (or .cse0 .cse5 .cse7 .cse2 .cse9 .cse3) (or .cse0 .cse7 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6 (not (= |old(~waterLevel~0)| 2)) .cse2) (or .cse5 .cse1 .cse6 .cse2 .cse3 .cse8) (or .cse0 .cse5 .cse1 .cse2 .cse9 .cse3)))) [2021-11-23 02:01:10,528 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:01:10,530 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-23 02:01:10,616 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 02:01:10 BoogieIcfgContainer [2021-11-23 02:01:10,616 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-23 02:01:10,617 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-23 02:01:10,617 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-23 02:01:10,617 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-23 02:01:10,618 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:56:55" (3/4) ... [2021-11-23 02:01:10,621 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-23 02:01:10,627 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-11-23 02:01:10,627 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-23 02:01:10,627 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-23 02:01:10,627 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-11-23 02:01:10,627 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-23 02:01:10,628 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-23 02:01:10,628 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 02:01:10,628 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-23 02:01:10,647 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 74 nodes and edges [2021-11-23 02:01:10,648 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 27 nodes and edges [2021-11-23 02:01:10,649 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2021-11-23 02:01:10,650 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-23 02:01:10,650 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-23 02:01:10,651 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-23 02:01:10,652 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-23 02:01:10,683 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((unknown-#memory_int-unknown[14][3] == 84 && unknown-#memory_int-unknown[6][2] == 102) && unknown-#memory_int-unknown[11][1] == 0) && 1 == \valid[5]) && 32 == unknown-#memory_int-unknown[10][1]) && unknown-#length-unknown[3] == 12) && unknown-#memory_int-unknown[9][0] == 79) && \valid[15] == 1) && 112 == unknown-#memory_int-unknown[7][4]) && unknown-#memory_int-unknown[6][0] == 79) && 3 == unknown-#length-unknown[10]) && pumpRunning == 0) && \valid[26] == 1) && unknown-#memory_int-unknown[7][1] == 80) && 58 == unknown-#memory_int-unknown[13][5]) && unknown-#length-unknown[8] == 3) && methAndRunningLastTime == 0) && unknown-#length-unknown[6] == 4) && \valid[9] == 1) && unknown-#length-unknown[4] == 13) && 117 == unknown-#memory_int-unknown[7][2]) && unknown-#memory_int-unknown[5][2] == 0) && 7 == unknown-#length-unknown[7]) && 7 == unknown-#length-unknown[13]) && 110 == unknown-#memory_int-unknown[8][1]) && unknown-#memory_int-unknown[6][1] == 102) && \valid[11] == 1) && \valid[27] == 1) && methaneLevelCritical == 0) && 58 == unknown-#memory_int-unknown[7][5]) && unknown-#memory_int-unknown[8][0] == 79) && 30 == unknown-#length-unknown[23]) && 41 == unknown-#memory_int-unknown[16][0]) && 44 == unknown-#memory_int-unknown[7][0]) && unknown-#length-unknown[24] == 9) && retValue_acc == \result) && 31 == unknown-#length-unknown[2]) && head == 0) && 44 == unknown-#memory_int-unknown[13][0]) && unknown-#memory_int-unknown[11][0] == 10) && unknown-#memory_int-unknown[14][4] == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[17] == 30) && 73 == unknown-#memory_int-unknown[14][2]) && 9 == unknown-#length-unknown[18]) && unknown-#length-unknown[19] == 21) && \valid[3] == 1) && \valid[7] == 1) && unknown-#length-unknown[22] == 21) && \valid[18] == 1) && \valid[22] == 1) && 3 == unknown-#length-unknown[5]) && 30 == unknown-#length-unknown[26]) && 77 == unknown-#memory_int-unknown[13][1]) && 2 == unknown-#length-unknown[11]) && 1 == systemActive) && unknown-#length-unknown[15] == 3) && \valid[24] == 1) && unknown-#memory_int-unknown[9][3] == 0) && \valid[12] == 1) && \valid[28] == 1) && unknown-#memory_int-unknown[14][1] == 82) && \valid[4] == 1) && unknown-#memory_int-unknown[9][1] == 102) && unknown-#memory_int-unknown[8][2] == 0) && unknown-#memory_int-unknown[16][1] == 0) && 101 == unknown-#memory_int-unknown[13][2]) && 25 == unknown-#length-unknown[25]) && \valid[1] == 1) && unknown-#memory_int-unknown[7][6] == 0) && unknown-#memory_int-unknown[9][2] == 102) && \valid[20] == 1) && unknown-#memory_int-unknown[5][0] == 79) && unknown-#length-unknown[12] == 13) && 2 == unknown-#length-unknown[16]) && \valid[21] == 1) && unknown-#length-unknown[9] == 4) && 104 == unknown-#memory_int-unknown[13][4]) && unknown-#length-unknown[21] == 9) && \valid[14] == 1) && tmp == 1) && 116 == unknown-#memory_int-unknown[13][3]) && 5 == unknown-#length-unknown[14]) && \valid[0] == 0) && 30 == unknown-#length-unknown[20]) && \valid[25] == 1) && head == 0) && \valid[2] == 1) && #NULL == 0) && unknown-#memory_int-unknown[14][0] == 67) && waterLevel == 1) && unknown-#memory_int-unknown[10][2] == 0) && unknown-#length-unknown[27] == 9) && unknown-#memory_int-unknown[1][0] == 48) && \result == tmp) && \valid[23] == 1) && \valid[19] == 1) && unknown-#memory_int-unknown[15][1] == 75) && 109 == unknown-#memory_int-unknown[7][3]) && unknown-#memory_int-unknown[6][3] == 0) && 0 == unknown-#memory_int-unknown[13][6]) && \valid[16] == 1) && unknown-#memory_int-unknown[15][2] == 0) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && unknown-#memory_int-unknown[15][0] == 79) && unknown-#memory_int-unknown[10][0] == 41) && \valid[17] == 1) && \valid[10] == 1) && unknown-#memory_int-unknown[5][1] == 110) && \valid[8] == 1) && unknown-#length-unknown[28] == 25) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 [2021-11-23 02:01:10,684 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(head == 0)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || \old(methAndRunningLastTime) == methAndRunningLastTime) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel) && 0 == systemActive)) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (((pumpRunning == \old(pumpRunning) && 1 == systemActive) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 1))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel) && 0 == systemActive)) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (((pumpRunning == \old(pumpRunning) && 1 == systemActive) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel))) [2021-11-23 02:01:10,686 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel) && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel))))) && ((((((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(head == 0)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || \old(methAndRunningLastTime) == methAndRunningLastTime) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || ((((!(\old(pumpRunning) == 0) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel) && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel))))) || !(methaneLevelCritical == 1))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((((!(\old(pumpRunning) == 0) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel))) [2021-11-23 02:01:10,686 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((methAndRunningLastTime == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel))) && (((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || \old(methAndRunningLastTime) == methAndRunningLastTime) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && \old(waterLevel) <= waterLevel)) || !(methaneLevelCritical == 1))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((methAndRunningLastTime == 0 && 2 <= waterLevel) && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && waterLevel <= 1) && ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && \old(waterLevel) <= waterLevel))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && ((((((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(head == 0)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || ((methAndRunningLastTime <= 0 && (if waterLevel == 0 then 1 else 0) == 0) && 0 <= methAndRunningLastTime)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel))) [2021-11-23 02:01:10,687 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(methAndRunningLastTime == 0)) [2021-11-23 02:01:10,688 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (((((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || ((((methAndRunningLastTime == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (((((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (((pumpRunning == 0 && ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && ((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(#NULL == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || \old(methAndRunningLastTime) == methAndRunningLastTime) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(1 == systemActive) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((((methAndRunningLastTime == 0 && 2 <= waterLevel) && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == 0 && waterLevel <= 1) && ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical))) && ((((((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(head == 0)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || ((methAndRunningLastTime <= 0 && (if waterLevel == 0 then 1 else 0) == 0) && 0 <= methAndRunningLastTime)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel))) [2021-11-23 02:01:10,689 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 1) && 1 == systemActive) && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel))) && ((((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || (((((methAndRunningLastTime == 0 && 2 <= waterLevel) && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 1) && 1 == systemActive) && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel)))) && ((((((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (if waterLevel == 0 then 1 else 0) == 0) || !(head == 0)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(1 == systemActive) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2))) && ((((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((2 <= waterLevel && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) [2021-11-23 02:01:10,690 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) [2021-11-23 02:01:10,692 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && ((2 <= waterLevel && tmp == 1) || (waterLevel < 2 && tmp == 0)))) || !(methaneLevelCritical == 0)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && ((2 <= waterLevel && tmp == 1) || (waterLevel < 2 && tmp == 0)))) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0))) && ((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(methAndRunningLastTime == 0)) || ((((retValue_acc == \result && (((retValue_acc == \result && 2 <= waterLevel) && retValue_acc == 0) || ((retValue_acc == \result && retValue_acc == 1) && waterLevel < 2))) && tmp == \result) && \result == tmp) && ((tmp == 0 && tmp___0 == 1) || (tmp___0 == 0 && !(tmp == 0))))) || !(head == 0)) || !(cleanupTimeShifts == 4)) [2021-11-23 02:01:10,744 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/witness.graphml [2021-11-23 02:01:10,744 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-23 02:01:10,746 INFO L158 Benchmark]: Toolchain (without parser) took 256581.95ms. Allocated memory was 100.7MB in the beginning and 775.9MB in the end (delta: 675.3MB). Free memory was 63.2MB in the beginning and 617.3MB in the end (delta: -554.1MB). Peak memory consumption was 119.6MB. Max. memory is 16.1GB. [2021-11-23 02:01:10,746 INFO L158 Benchmark]: CDTParser took 0.29ms. Allocated memory is still 100.7MB. Free memory is still 80.6MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-23 02:01:10,746 INFO L158 Benchmark]: CACSL2BoogieTranslator took 475.86ms. Allocated memory is still 100.7MB. Free memory was 62.9MB in the beginning and 66.7MB in the end (delta: -3.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-11-23 02:01:10,747 INFO L158 Benchmark]: Boogie Procedure Inliner took 88.90ms. Allocated memory is still 100.7MB. Free memory was 66.7MB in the beginning and 64.2MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-23 02:01:10,747 INFO L158 Benchmark]: Boogie Preprocessor took 55.03ms. Allocated memory is still 100.7MB. Free memory was 64.2MB in the beginning and 62.5MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-23 02:01:10,748 INFO L158 Benchmark]: RCFGBuilder took 695.13ms. Allocated memory is still 100.7MB. Free memory was 62.5MB in the beginning and 40.6MB in the end (delta: 21.9MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. [2021-11-23 02:01:10,748 INFO L158 Benchmark]: TraceAbstraction took 255125.76ms. Allocated memory was 100.7MB in the beginning and 775.9MB in the end (delta: 675.3MB). Free memory was 40.0MB in the beginning and 624.6MB in the end (delta: -584.7MB). Peak memory consumption was 457.8MB. Max. memory is 16.1GB. [2021-11-23 02:01:10,749 INFO L158 Benchmark]: Witness Printer took 127.75ms. Allocated memory is still 775.9MB. Free memory was 624.6MB in the beginning and 617.3MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-11-23 02:01:10,754 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29ms. Allocated memory is still 100.7MB. Free memory is still 80.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 475.86ms. Allocated memory is still 100.7MB. Free memory was 62.9MB in the beginning and 66.7MB in the end (delta: -3.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 88.90ms. Allocated memory is still 100.7MB. Free memory was 66.7MB in the beginning and 64.2MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 55.03ms. Allocated memory is still 100.7MB. Free memory was 64.2MB in the beginning and 62.5MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 695.13ms. Allocated memory is still 100.7MB. Free memory was 62.5MB in the beginning and 40.6MB in the end (delta: 21.9MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. * TraceAbstraction took 255125.76ms. Allocated memory was 100.7MB in the beginning and 775.9MB in the end (delta: 675.3MB). Free memory was 40.0MB in the beginning and 624.6MB in the end (delta: -584.7MB). Peak memory consumption was 457.8MB. Max. memory is 16.1GB. * Witness Printer took 127.75ms. Allocated memory is still 775.9MB. Free memory was 624.6MB in the beginning and 617.3MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1005]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 64 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 255.0s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 51.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 95.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2960 SdHoareTripleChecker+Valid, 9.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2926 mSDsluCounter, 4989 SdHoareTripleChecker+Invalid, 7.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4683 mSDsCounter, 1626 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 8328 IncrementalHoareTripleChecker+Invalid, 9954 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1626 mSolverCounterUnsat, 1044 mSDtfsCounter, 8328 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1559 GetRequests, 1124 SyntacticMatches, 35 SemanticMatches, 400 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11480 ImplicationChecksByTransitivity, 106.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1692occurred in iteration=12, InterpolantAutomatonStates: 215, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.9s AutomataMinimizationTime, 13 MinimizatonAttempts, 659 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 37 LocationsWithAnnotation, 2977 PreInvPairs, 3626 NumberOfFragments, 5209 HoareAnnotationTreeSize, 2977 FomulaSimplifications, 34960 FormulaSimplificationTreeSizeReduction, 50.8s HoareSimplificationTime, 37 FomulaSimplificationsInter, 1266068 FormulaSimplificationTreeSizeReductionInter, 44.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.8s SatisfiabilityAnalysisTime, 6.6s InterpolantComputationTime, 1351 NumberOfCodeBlocks, 1298 NumberOfCodeBlocksAsserted, 21 NumberOfCheckSat, 1685 ConstructedInterpolants, 0 QuantifiedInterpolants, 5402 SizeOfPredicates, 69 NumberOfNonLiveVariables, 3408 ConjunctsInSsa, 180 ConjunctsInUnsatCore, 24 InterpolantComputations, 9 PerfectInterpolantSequences, 1083/1318 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 19.8s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 12, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 106, DAG_INTERPRETER_EARLY_EXITS: 6, TOOLS_POST_APPLICATIONS: 133, TOOLS_POST_TIME: 6.8s, TOOLS_POST_CALL_APPLICATIONS: 67, TOOLS_POST_CALL_TIME: 8.2s, TOOLS_POST_RETURN_APPLICATIONS: 56, TOOLS_POST_RETURN_TIME: 2.9s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 254, TOOLS_QUANTIFIERELIM_TIME: 17.8s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.9s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 316, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 60, DOMAIN_JOIN_TIME: 1.3s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 2, DOMAIN_WIDEN_TIME: 0.1s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 4, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 106, DOMAIN_ISBOTTOM_TIME: 0.4s, LOOP_SUMMARIZER_APPLICATIONS: 2, LOOP_SUMMARIZER_CACHE_MISSES: 2, LOOP_SUMMARIZER_OVERALL_TIME: 10.4s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 10.4s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 4, CALL_SUMMARIZER_APPLICATIONS: 56, CALL_SUMMARIZER_CACHE_MISSES: 11, CALL_SUMMARIZER_OVERALL_TIME: 0.2s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.2s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 1492, DAG_COMPRESSION_RETAINED_NODES: 273, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 56]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 200]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel) && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel))))) && ((((((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(head == 0)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || \old(methAndRunningLastTime) == methAndRunningLastTime) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || ((((!(\old(pumpRunning) == 0) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel) && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel))))) || !(methaneLevelCritical == 1))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((((!(\old(pumpRunning) == 0) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 466]: Loop Invariant Derived loop invariant: (((((((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 1) && 1 == systemActive) && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel))) && ((((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || (((((methAndRunningLastTime == 0 && 2 <= waterLevel) && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 1) && 1 == systemActive) && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel)))) && ((((((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (if waterLevel == 0 then 1 else 0) == 0) || !(head == 0)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(1 == systemActive) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2))) && ((((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((2 <= waterLevel && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) - InvariantResult [Line: 138]: Loop Invariant Derived loop invariant: ((((((((((((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(head == 0)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || \old(methAndRunningLastTime) == methAndRunningLastTime) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel) && 0 == systemActive)) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (((pumpRunning == \old(pumpRunning) && 1 == systemActive) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 1))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel) && 0 == systemActive)) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (((pumpRunning == \old(pumpRunning) && 1 == systemActive) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 196]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((methAndRunningLastTime == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel))) && (((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || \old(methAndRunningLastTime) == methAndRunningLastTime) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && \old(waterLevel) <= waterLevel)) || !(methaneLevelCritical == 1))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((methAndRunningLastTime == 0 && 2 <= waterLevel) && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && waterLevel <= 1) && ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && \old(waterLevel) <= waterLevel))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && ((((((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(head == 0)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || ((methAndRunningLastTime <= 0 && (if waterLevel == 0 then 1 else 0) == 0) && 0 <= methAndRunningLastTime)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 474]: Loop Invariant Derived loop invariant: (((((((((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (((((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || ((((methAndRunningLastTime == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (((((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (((pumpRunning == 0 && ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && ((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(#NULL == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || \old(methAndRunningLastTime) == methAndRunningLastTime) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && ((waterLevel + 1 <= \old(waterLevel) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(1 == systemActive) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((((methAndRunningLastTime == 0 && 2 <= waterLevel) && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == 0 && waterLevel <= 1) && ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) || (waterLevel <= 0 && waterLevel <= \old(waterLevel)))) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical))) && ((((((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(head == 0)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || ((methAndRunningLastTime <= 0 && (if waterLevel == 0 then 1 else 0) == 0) && 0 <= methAndRunningLastTime)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 366]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((unknown-#memory_int-unknown[14][3] == 84 && unknown-#memory_int-unknown[6][2] == 102) && unknown-#memory_int-unknown[11][1] == 0) && 1 == \valid[5]) && 32 == unknown-#memory_int-unknown[10][1]) && unknown-#length-unknown[3] == 12) && unknown-#memory_int-unknown[9][0] == 79) && \valid[15] == 1) && 112 == unknown-#memory_int-unknown[7][4]) && unknown-#memory_int-unknown[6][0] == 79) && 3 == unknown-#length-unknown[10]) && pumpRunning == 0) && \valid[26] == 1) && unknown-#memory_int-unknown[7][1] == 80) && 58 == unknown-#memory_int-unknown[13][5]) && unknown-#length-unknown[8] == 3) && methAndRunningLastTime == 0) && unknown-#length-unknown[6] == 4) && \valid[9] == 1) && unknown-#length-unknown[4] == 13) && 117 == unknown-#memory_int-unknown[7][2]) && unknown-#memory_int-unknown[5][2] == 0) && 7 == unknown-#length-unknown[7]) && 7 == unknown-#length-unknown[13]) && 110 == unknown-#memory_int-unknown[8][1]) && unknown-#memory_int-unknown[6][1] == 102) && \valid[11] == 1) && \valid[27] == 1) && methaneLevelCritical == 0) && 58 == unknown-#memory_int-unknown[7][5]) && unknown-#memory_int-unknown[8][0] == 79) && 30 == unknown-#length-unknown[23]) && 41 == unknown-#memory_int-unknown[16][0]) && 44 == unknown-#memory_int-unknown[7][0]) && unknown-#length-unknown[24] == 9) && retValue_acc == \result) && 31 == unknown-#length-unknown[2]) && head == 0) && 44 == unknown-#memory_int-unknown[13][0]) && unknown-#memory_int-unknown[11][0] == 10) && unknown-#memory_int-unknown[14][4] == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[17] == 30) && 73 == unknown-#memory_int-unknown[14][2]) && 9 == unknown-#length-unknown[18]) && unknown-#length-unknown[19] == 21) && \valid[3] == 1) && \valid[7] == 1) && unknown-#length-unknown[22] == 21) && \valid[18] == 1) && \valid[22] == 1) && 3 == unknown-#length-unknown[5]) && 30 == unknown-#length-unknown[26]) && 77 == unknown-#memory_int-unknown[13][1]) && 2 == unknown-#length-unknown[11]) && 1 == systemActive) && unknown-#length-unknown[15] == 3) && \valid[24] == 1) && unknown-#memory_int-unknown[9][3] == 0) && \valid[12] == 1) && \valid[28] == 1) && unknown-#memory_int-unknown[14][1] == 82) && \valid[4] == 1) && unknown-#memory_int-unknown[9][1] == 102) && unknown-#memory_int-unknown[8][2] == 0) && unknown-#memory_int-unknown[16][1] == 0) && 101 == unknown-#memory_int-unknown[13][2]) && 25 == unknown-#length-unknown[25]) && \valid[1] == 1) && unknown-#memory_int-unknown[7][6] == 0) && unknown-#memory_int-unknown[9][2] == 102) && \valid[20] == 1) && unknown-#memory_int-unknown[5][0] == 79) && unknown-#length-unknown[12] == 13) && 2 == unknown-#length-unknown[16]) && \valid[21] == 1) && unknown-#length-unknown[9] == 4) && 104 == unknown-#memory_int-unknown[13][4]) && unknown-#length-unknown[21] == 9) && \valid[14] == 1) && tmp == 1) && 116 == unknown-#memory_int-unknown[13][3]) && 5 == unknown-#length-unknown[14]) && \valid[0] == 0) && 30 == unknown-#length-unknown[20]) && \valid[25] == 1) && head == 0) && \valid[2] == 1) && #NULL == 0) && unknown-#memory_int-unknown[14][0] == 67) && waterLevel == 1) && unknown-#memory_int-unknown[10][2] == 0) && unknown-#length-unknown[27] == 9) && unknown-#memory_int-unknown[1][0] == 48) && \result == tmp) && \valid[23] == 1) && \valid[19] == 1) && unknown-#memory_int-unknown[15][1] == 75) && 109 == unknown-#memory_int-unknown[7][3]) && unknown-#memory_int-unknown[6][3] == 0) && 0 == unknown-#memory_int-unknown[13][6]) && \valid[16] == 1) && unknown-#memory_int-unknown[15][2] == 0) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && unknown-#memory_int-unknown[15][0] == 79) && unknown-#memory_int-unknown[10][0] == 41) && \valid[17] == 1) && \valid[10] == 1) && unknown-#memory_int-unknown[5][1] == 110) && \valid[8] == 1) && unknown-#length-unknown[28] == 25) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 - InvariantResult [Line: 96]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && tmp == 1) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && splverifierCounter == 0) && tmp == 1) && 0 == systemActive)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 1) && splverifierCounter == 0) && tmp == 1) && 0 == systemActive)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && tmp == 1)) || (((((2 <= waterLevel && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && tmp == 1) && pumpRunning == 1)) || (((((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && tmp == 1) && pumpRunning == 1) - InvariantResult [Line: 335]: Loop Invariant Derived loop invariant: (methaneLevelCritical == 0 && ((1 == systemActive && ((((pumpRunning == 0 && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && tmp == 1))) || ((2 <= waterLevel || 0 == systemActive) && ((((pumpRunning == 0 && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && tmp == 1))))) || (((1 == systemActive && ((((pumpRunning == 0 && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && tmp == 1))) || ((2 <= waterLevel || 0 == systemActive) && ((((pumpRunning == 0 && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && tmp == 1)))) && methaneLevelCritical == 1) - InvariantResult [Line: 178]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && ((2 <= waterLevel && tmp == 1) || (waterLevel < 2 && tmp == 0)))) || !(methaneLevelCritical == 0)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && ((2 <= waterLevel && tmp == 1) || (waterLevel < 2 && tmp == 0)))) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0))) && ((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(methAndRunningLastTime == 0)) || ((((retValue_acc == \result && (((retValue_acc == \result && 2 <= waterLevel) && retValue_acc == 0) || ((retValue_acc == \result && retValue_acc == 1) && waterLevel < 2))) && tmp == \result) && \result == tmp) && ((tmp == 0 && tmp___0 == 1) || (tmp___0 == 0 && !(tmp == 0))))) || !(head == 0)) || !(cleanupTimeShifts == 4)) - InvariantResult [Line: 174]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && tmp == 1) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && splverifierCounter == 0) && tmp == 1) && 0 == systemActive)) || ((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && tmp == 1) && pumpRunning == 1)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 1) && splverifierCounter == 0) && tmp == 1) && 0 == systemActive)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && tmp == 1)) || (((((2 == waterLevel && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && tmp == 1) && pumpRunning == 1)) || (((((2 <= waterLevel && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && tmp == 1) && pumpRunning == 1) - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 356]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2021-11-23 02:01:10,852 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc48cbb5-5544-434c-bd7d-df44a46e2f60/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE