./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aef121e0 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0f3f23173af8ffbfd6ca2d826b937f078be2c112e64596739bc9740bb061a5d2 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-aef121e [2021-11-23 01:54:25,244 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-23 01:54:25,246 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-23 01:54:25,293 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-23 01:54:25,293 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-23 01:54:25,298 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-23 01:54:25,300 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-23 01:54:25,305 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-23 01:54:25,307 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-23 01:54:25,315 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-23 01:54:25,316 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-23 01:54:25,318 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-23 01:54:25,319 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-23 01:54:25,322 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-23 01:54:25,325 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-23 01:54:25,330 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-23 01:54:25,336 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-23 01:54:25,337 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-23 01:54:25,339 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-23 01:54:25,346 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-23 01:54:25,349 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-23 01:54:25,350 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-23 01:54:25,354 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-23 01:54:25,355 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-23 01:54:25,361 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-23 01:54:25,361 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-23 01:54:25,362 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-23 01:54:25,364 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-23 01:54:25,365 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-23 01:54:25,366 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-23 01:54:25,367 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-23 01:54:25,368 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-23 01:54:25,370 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-23 01:54:25,372 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-23 01:54:25,373 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-23 01:54:25,373 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-23 01:54:25,374 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-23 01:54:25,374 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-23 01:54:25,375 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-23 01:54:25,376 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-23 01:54:25,377 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-23 01:54:25,377 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-32bit-Taipan_Default.epf [2021-11-23 01:54:25,415 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-23 01:54:25,415 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-23 01:54:25,415 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-23 01:54:25,416 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-23 01:54:25,416 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-23 01:54:25,417 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-23 01:54:25,417 INFO L138 SettingsManager]: * User list type=DISABLED [2021-11-23 01:54:25,417 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2021-11-23 01:54:25,417 INFO L138 SettingsManager]: * Explicit value domain=true [2021-11-23 01:54:25,418 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2021-11-23 01:54:25,418 INFO L138 SettingsManager]: * Octagon Domain=false [2021-11-23 01:54:25,418 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2021-11-23 01:54:25,418 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2021-11-23 01:54:25,418 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2021-11-23 01:54:25,419 INFO L138 SettingsManager]: * Interval Domain=false [2021-11-23 01:54:25,419 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2021-11-23 01:54:25,419 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2021-11-23 01:54:25,419 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2021-11-23 01:54:25,420 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-23 01:54:25,420 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-23 01:54:25,421 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-23 01:54:25,421 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-23 01:54:25,421 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-23 01:54:25,421 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-23 01:54:25,422 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-23 01:54:25,422 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-23 01:54:25,422 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-23 01:54:25,422 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-23 01:54:25,422 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-23 01:54:25,423 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-23 01:54:25,423 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-23 01:54:25,423 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-23 01:54:25,423 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 01:54:25,424 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-23 01:54:25,424 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-23 01:54:25,424 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-23 01:54:25,424 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2021-11-23 01:54:25,425 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-23 01:54:25,425 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-23 01:54:25,425 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-23 01:54:25,425 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-23 01:54:25,426 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0f3f23173af8ffbfd6ca2d826b937f078be2c112e64596739bc9740bb061a5d2 [2021-11-23 01:54:25,705 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-23 01:54:25,738 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-23 01:54:25,740 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-23 01:54:25,742 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-23 01:54:25,743 INFO L275 PluginConnector]: CDTParser initialized [2021-11-23 01:54:25,744 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/../../sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c [2021-11-23 01:54:25,823 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/data/1e7623c99/5c0a29b45b0847919935d6f30363e54f/FLAG2dfba9780 [2021-11-23 01:54:26,346 INFO L306 CDTParser]: Found 1 translation units. [2021-11-23 01:54:26,346 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c [2021-11-23 01:54:26,362 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/data/1e7623c99/5c0a29b45b0847919935d6f30363e54f/FLAG2dfba9780 [2021-11-23 01:54:26,637 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/data/1e7623c99/5c0a29b45b0847919935d6f30363e54f [2021-11-23 01:54:26,642 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-23 01:54:26,645 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-23 01:54:26,650 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-23 01:54:26,650 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-23 01:54:26,654 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-23 01:54:26,655 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:54:26" (1/1) ... [2021-11-23 01:54:26,657 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@41c52887 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:54:26, skipping insertion in model container [2021-11-23 01:54:26,657 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:54:26" (1/1) ... [2021-11-23 01:54:26,664 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-23 01:54:26,706 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-23 01:54:26,936 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c[2897,2910] [2021-11-23 01:54:27,045 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 01:54:27,054 INFO L203 MainTranslator]: Completed pre-run [2021-11-23 01:54:27,087 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c[2897,2910] [2021-11-23 01:54:27,179 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 01:54:27,197 INFO L208 MainTranslator]: Completed translation [2021-11-23 01:54:27,198 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:54:27 WrapperNode [2021-11-23 01:54:27,198 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-23 01:54:27,200 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-23 01:54:27,200 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-23 01:54:27,200 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-23 01:54:27,208 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:54:27" (1/1) ... [2021-11-23 01:54:27,223 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:54:27" (1/1) ... [2021-11-23 01:54:27,270 INFO L137 Inliner]: procedures = 59, calls = 163, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 297 [2021-11-23 01:54:27,270 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-23 01:54:27,271 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-23 01:54:27,271 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-23 01:54:27,271 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-23 01:54:27,281 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:54:27" (1/1) ... [2021-11-23 01:54:27,281 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:54:27" (1/1) ... [2021-11-23 01:54:27,300 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:54:27" (1/1) ... [2021-11-23 01:54:27,303 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:54:27" (1/1) ... [2021-11-23 01:54:27,310 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:54:27" (1/1) ... [2021-11-23 01:54:27,330 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:54:27" (1/1) ... [2021-11-23 01:54:27,332 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:54:27" (1/1) ... [2021-11-23 01:54:27,335 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-23 01:54:27,338 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-23 01:54:27,338 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-23 01:54:27,338 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-23 01:54:27,339 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:54:27" (1/1) ... [2021-11-23 01:54:27,349 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 01:54:27,360 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 01:54:27,371 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-23 01:54:27,382 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-23 01:54:27,413 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-23 01:54:27,413 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-23 01:54:27,413 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-23 01:54:27,413 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-23 01:54:27,414 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-23 01:54:27,414 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-23 01:54:27,414 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-23 01:54:27,414 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 01:54:27,414 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 01:54:27,414 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-23 01:54:27,414 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-23 01:54:27,414 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-11-23 01:54:27,414 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-11-23 01:54:27,415 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-11-23 01:54:27,415 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-11-23 01:54:27,415 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-11-23 01:54:27,415 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-11-23 01:54:27,415 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-23 01:54:27,415 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-23 01:54:27,415 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-23 01:54:27,416 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-23 01:54:27,416 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-23 01:54:27,493 INFO L236 CfgBuilder]: Building ICFG [2021-11-23 01:54:27,495 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-23 01:54:27,963 INFO L277 CfgBuilder]: Performing block encoding [2021-11-23 01:54:28,076 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-23 01:54:28,077 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-23 01:54:28,079 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:54:28 BoogieIcfgContainer [2021-11-23 01:54:28,080 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-23 01:54:28,082 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-23 01:54:28,082 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-23 01:54:28,085 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-23 01:54:28,086 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 01:54:26" (1/3) ... [2021-11-23 01:54:28,088 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2677f34e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 01:54:28, skipping insertion in model container [2021-11-23 01:54:28,089 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:54:27" (2/3) ... [2021-11-23 01:54:28,089 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2677f34e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 01:54:28, skipping insertion in model container [2021-11-23 01:54:28,089 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:54:28" (3/3) ... [2021-11-23 01:54:28,091 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product64.cil.c [2021-11-23 01:54:28,097 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-23 01:54:28,097 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-23 01:54:28,147 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-23 01:54:28,152 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-23 01:54:28,153 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-23 01:54:28,188 INFO L276 IsEmpty]: Start isEmpty. Operand has 73 states, 45 states have (on average 1.4444444444444444) internal successors, (65), 56 states have internal predecessors, (65), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2021-11-23 01:54:28,194 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2021-11-23 01:54:28,194 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:54:28,195 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:54:28,196 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:54:28,201 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:54:28,202 INFO L85 PathProgramCache]: Analyzing trace with hash 758216112, now seen corresponding path program 1 times [2021-11-23 01:54:28,212 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:54:28,212 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [399308544] [2021-11-23 01:54:28,213 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:54:28,214 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:54:28,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:54:28,451 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 01:54:28,451 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:54:28,452 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [399308544] [2021-11-23 01:54:28,453 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [399308544] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:54:28,453 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:54:28,453 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-23 01:54:28,455 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1103889301] [2021-11-23 01:54:28,456 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:54:28,460 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-23 01:54:28,461 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:54:28,490 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-23 01:54:28,491 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-23 01:54:28,493 INFO L87 Difference]: Start difference. First operand has 73 states, 45 states have (on average 1.4444444444444444) internal successors, (65), 56 states have internal predecessors, (65), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 01:54:28,568 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:54:28,569 INFO L93 Difference]: Finished difference Result 144 states and 199 transitions. [2021-11-23 01:54:28,570 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-23 01:54:28,572 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2021-11-23 01:54:28,572 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:54:28,582 INFO L225 Difference]: With dead ends: 144 [2021-11-23 01:54:28,582 INFO L226 Difference]: Without dead ends: 68 [2021-11-23 01:54:28,586 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-23 01:54:28,591 INFO L933 BasicCegarLoop]: 77 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 77 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-23 01:54:28,592 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 77 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-23 01:54:28,610 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2021-11-23 01:54:28,634 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 68. [2021-11-23 01:54:28,636 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 42 states have (on average 1.3571428571428572) internal successors, (57), 52 states have internal predecessors, (57), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-11-23 01:54:28,639 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 90 transitions. [2021-11-23 01:54:28,640 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 90 transitions. Word has length 12 [2021-11-23 01:54:28,641 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:54:28,641 INFO L470 AbstractCegarLoop]: Abstraction has 68 states and 90 transitions. [2021-11-23 01:54:28,641 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 01:54:28,642 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 90 transitions. [2021-11-23 01:54:28,643 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2021-11-23 01:54:28,644 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:54:28,644 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:54:28,644 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-23 01:54:28,645 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:54:28,646 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:54:28,646 INFO L85 PathProgramCache]: Analyzing trace with hash -1790501731, now seen corresponding path program 1 times [2021-11-23 01:54:28,646 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:54:28,646 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [573217177] [2021-11-23 01:54:28,647 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:54:28,647 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:54:28,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:54:28,736 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 01:54:28,736 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:54:28,736 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [573217177] [2021-11-23 01:54:28,737 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [573217177] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:54:28,737 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:54:28,737 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 01:54:28,737 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1989010654] [2021-11-23 01:54:28,737 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:54:28,738 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 01:54:28,738 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:54:28,739 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 01:54:28,739 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 01:54:28,739 INFO L87 Difference]: Start difference. First operand 68 states and 90 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 01:54:28,844 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:54:28,845 INFO L93 Difference]: Finished difference Result 108 states and 142 transitions. [2021-11-23 01:54:28,845 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 01:54:28,845 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2021-11-23 01:54:28,845 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:54:28,847 INFO L225 Difference]: With dead ends: 108 [2021-11-23 01:54:28,847 INFO L226 Difference]: Without dead ends: 60 [2021-11-23 01:54:28,848 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 01:54:28,850 INFO L933 BasicCegarLoop]: 63 mSDtfsCounter, 14 mSDsluCounter, 59 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 110 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 01:54:28,850 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [18 Valid, 110 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 01:54:28,852 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60 states. [2021-11-23 01:54:28,859 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60 to 60. [2021-11-23 01:54:28,860 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60 states, 37 states have (on average 1.3783783783783783) internal successors, (51), 47 states have internal predecessors, (51), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2021-11-23 01:54:28,865 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60 states to 60 states and 79 transitions. [2021-11-23 01:54:28,865 INFO L78 Accepts]: Start accepts. Automaton has 60 states and 79 transitions. Word has length 13 [2021-11-23 01:54:28,865 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:54:28,866 INFO L470 AbstractCegarLoop]: Abstraction has 60 states and 79 transitions. [2021-11-23 01:54:28,867 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 01:54:28,867 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 79 transitions. [2021-11-23 01:54:28,868 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2021-11-23 01:54:28,869 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:54:28,869 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:54:28,869 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-23 01:54:28,869 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:54:28,871 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:54:28,871 INFO L85 PathProgramCache]: Analyzing trace with hash -760101963, now seen corresponding path program 1 times [2021-11-23 01:54:28,871 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:54:28,871 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1803272118] [2021-11-23 01:54:28,871 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:54:28,872 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:54:28,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:54:29,028 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 01:54:29,029 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:54:29,029 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1803272118] [2021-11-23 01:54:29,029 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1803272118] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:54:29,029 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:54:29,029 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 01:54:29,030 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1132146471] [2021-11-23 01:54:29,030 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:54:29,030 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-23 01:54:29,030 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:54:29,031 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 01:54:29,031 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 01:54:29,031 INFO L87 Difference]: Start difference. First operand 60 states and 79 transitions. Second operand has 4 states, 4 states have (on average 3.75) internal successors, (15), 4 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 01:54:29,137 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:54:29,137 INFO L93 Difference]: Finished difference Result 147 states and 194 transitions. [2021-11-23 01:54:29,138 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-23 01:54:29,138 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 4 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2021-11-23 01:54:29,138 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:54:29,140 INFO L225 Difference]: With dead ends: 147 [2021-11-23 01:54:29,140 INFO L226 Difference]: Without dead ends: 89 [2021-11-23 01:54:29,141 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-23 01:54:29,143 INFO L933 BasicCegarLoop]: 67 mSDtfsCounter, 102 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 49 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 106 SdHoareTripleChecker+Valid, 141 SdHoareTripleChecker+Invalid, 58 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 49 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 01:54:29,144 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [106 Valid, 141 Invalid, 58 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 49 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 01:54:29,145 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2021-11-23 01:54:29,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 86. [2021-11-23 01:54:29,160 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 55 states have (on average 1.3818181818181818) internal successors, (76), 68 states have internal predecessors, (76), 18 states have call successors, (18), 12 states have call predecessors, (18), 12 states have return successors, (19), 12 states have call predecessors, (19), 18 states have call successors, (19) [2021-11-23 01:54:29,170 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 113 transitions. [2021-11-23 01:54:29,170 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 113 transitions. Word has length 16 [2021-11-23 01:54:29,170 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:54:29,170 INFO L470 AbstractCegarLoop]: Abstraction has 86 states and 113 transitions. [2021-11-23 01:54:29,171 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 4 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 01:54:29,171 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 113 transitions. [2021-11-23 01:54:29,172 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2021-11-23 01:54:29,172 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:54:29,173 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:54:29,173 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-23 01:54:29,173 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:54:29,173 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:54:29,174 INFO L85 PathProgramCache]: Analyzing trace with hash 1260589856, now seen corresponding path program 1 times [2021-11-23 01:54:29,174 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:54:29,174 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1073223217] [2021-11-23 01:54:29,174 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:54:29,175 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:54:29,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:54:29,254 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 01:54:29,254 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:54:29,254 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1073223217] [2021-11-23 01:54:29,255 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1073223217] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:54:29,255 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:54:29,255 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 01:54:29,256 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [150702128] [2021-11-23 01:54:29,256 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:54:29,256 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-23 01:54:29,257 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:54:29,258 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 01:54:29,258 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 01:54:29,258 INFO L87 Difference]: Start difference. First operand 86 states and 113 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 01:54:29,362 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:54:29,362 INFO L93 Difference]: Finished difference Result 210 states and 287 transitions. [2021-11-23 01:54:29,363 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-23 01:54:29,363 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2021-11-23 01:54:29,363 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:54:29,365 INFO L225 Difference]: With dead ends: 210 [2021-11-23 01:54:29,365 INFO L226 Difference]: Without dead ends: 126 [2021-11-23 01:54:29,367 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-23 01:54:29,368 INFO L933 BasicCegarLoop]: 66 mSDtfsCounter, 45 mSDsluCounter, 132 mSDsCounter, 0 mSdLazyCounter, 56 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 179 SdHoareTripleChecker+Invalid, 66 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 56 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 01:54:29,369 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [45 Valid, 179 Invalid, 66 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 56 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 01:54:29,370 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 126 states. [2021-11-23 01:54:29,410 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 126 to 119. [2021-11-23 01:54:29,418 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 119 states, 80 states have (on average 1.3) internal successors, (104), 91 states have internal predecessors, (104), 20 states have call successors, (20), 18 states have call predecessors, (20), 18 states have return successors, (28), 18 states have call predecessors, (28), 20 states have call successors, (28) [2021-11-23 01:54:29,420 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 119 states to 119 states and 152 transitions. [2021-11-23 01:54:29,424 INFO L78 Accepts]: Start accepts. Automaton has 119 states and 152 transitions. Word has length 19 [2021-11-23 01:54:29,425 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:54:29,425 INFO L470 AbstractCegarLoop]: Abstraction has 119 states and 152 transitions. [2021-11-23 01:54:29,425 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 01:54:29,425 INFO L276 IsEmpty]: Start isEmpty. Operand 119 states and 152 transitions. [2021-11-23 01:54:29,427 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-11-23 01:54:29,427 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:54:29,427 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:54:29,428 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-23 01:54:29,428 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:54:29,430 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:54:29,430 INFO L85 PathProgramCache]: Analyzing trace with hash 291838580, now seen corresponding path program 1 times [2021-11-23 01:54:29,431 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:54:29,431 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [975952936] [2021-11-23 01:54:29,431 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:54:29,431 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:54:29,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:54:29,591 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 01:54:29,591 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:54:29,592 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [975952936] [2021-11-23 01:54:29,592 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [975952936] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:54:29,593 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:54:29,594 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-23 01:54:29,596 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [441650721] [2021-11-23 01:54:29,597 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:54:29,599 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-23 01:54:29,599 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:54:29,600 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-23 01:54:29,601 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2021-11-23 01:54:29,601 INFO L87 Difference]: Start difference. First operand 119 states and 152 transitions. Second operand has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-23 01:54:29,789 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:54:29,794 INFO L93 Difference]: Finished difference Result 326 states and 422 transitions. [2021-11-23 01:54:29,799 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-23 01:54:29,799 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 33 [2021-11-23 01:54:29,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:54:29,807 INFO L225 Difference]: With dead ends: 326 [2021-11-23 01:54:29,808 INFO L226 Difference]: Without dead ends: 209 [2021-11-23 01:54:29,809 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2021-11-23 01:54:29,811 INFO L933 BasicCegarLoop]: 70 mSDtfsCounter, 98 mSDsluCounter, 172 mSDsCounter, 0 mSdLazyCounter, 71 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 99 SdHoareTripleChecker+Valid, 219 SdHoareTripleChecker+Invalid, 90 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 71 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 01:54:29,817 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [99 Valid, 219 Invalid, 90 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 71 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 01:54:29,818 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 209 states. [2021-11-23 01:54:29,861 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 209 to 201. [2021-11-23 01:54:29,866 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 201 states, 139 states have (on average 1.2805755395683454) internal successors, (178), 154 states have internal predecessors, (178), 30 states have call successors, (30), 28 states have call predecessors, (30), 31 states have return successors, (43), 31 states have call predecessors, (43), 30 states have call successors, (43) [2021-11-23 01:54:29,869 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 201 states to 201 states and 251 transitions. [2021-11-23 01:54:29,869 INFO L78 Accepts]: Start accepts. Automaton has 201 states and 251 transitions. Word has length 33 [2021-11-23 01:54:29,870 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:54:29,870 INFO L470 AbstractCegarLoop]: Abstraction has 201 states and 251 transitions. [2021-11-23 01:54:29,870 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-23 01:54:29,870 INFO L276 IsEmpty]: Start isEmpty. Operand 201 states and 251 transitions. [2021-11-23 01:54:29,872 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2021-11-23 01:54:29,872 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:54:29,873 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:54:29,873 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-23 01:54:29,873 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:54:29,874 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:54:29,874 INFO L85 PathProgramCache]: Analyzing trace with hash 1444504193, now seen corresponding path program 1 times [2021-11-23 01:54:29,874 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:54:29,874 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [491662412] [2021-11-23 01:54:29,874 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:54:29,874 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:54:29,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:54:29,991 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 01:54:29,991 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:54:29,991 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [491662412] [2021-11-23 01:54:29,991 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [491662412] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:54:29,992 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:54:29,992 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-23 01:54:29,992 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1314713885] [2021-11-23 01:54:29,992 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:54:29,993 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-23 01:54:29,993 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:54:29,993 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-23 01:54:29,993 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2021-11-23 01:54:29,994 INFO L87 Difference]: Start difference. First operand 201 states and 251 transitions. Second operand has 8 states, 7 states have (on average 3.857142857142857) internal successors, (27), 7 states have internal predecessors, (27), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-23 01:54:30,586 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:54:30,587 INFO L93 Difference]: Finished difference Result 528 states and 684 transitions. [2021-11-23 01:54:30,588 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-11-23 01:54:30,588 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.857142857142857) internal successors, (27), 7 states have internal predecessors, (27), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 36 [2021-11-23 01:54:30,589 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:54:30,601 INFO L225 Difference]: With dead ends: 528 [2021-11-23 01:54:30,601 INFO L226 Difference]: Without dead ends: 411 [2021-11-23 01:54:30,603 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-11-23 01:54:30,612 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 213 mSDsluCounter, 323 mSDsCounter, 0 mSdLazyCounter, 481 mSolverCounterSat, 87 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 229 SdHoareTripleChecker+Valid, 372 SdHoareTripleChecker+Invalid, 568 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 87 IncrementalHoareTripleChecker+Valid, 481 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-23 01:54:30,615 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [229 Valid, 372 Invalid, 568 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [87 Valid, 481 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-23 01:54:30,619 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 411 states. [2021-11-23 01:54:30,696 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 411 to 373. [2021-11-23 01:54:30,697 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 373 states, 260 states have (on average 1.2653846153846153) internal successors, (329), 287 states have internal predecessors, (329), 55 states have call successors, (55), 49 states have call predecessors, (55), 57 states have return successors, (81), 58 states have call predecessors, (81), 55 states have call successors, (81) [2021-11-23 01:54:30,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 373 states to 373 states and 465 transitions. [2021-11-23 01:54:30,710 INFO L78 Accepts]: Start accepts. Automaton has 373 states and 465 transitions. Word has length 36 [2021-11-23 01:54:30,710 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:54:30,711 INFO L470 AbstractCegarLoop]: Abstraction has 373 states and 465 transitions. [2021-11-23 01:54:30,711 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.857142857142857) internal successors, (27), 7 states have internal predecessors, (27), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-23 01:54:30,711 INFO L276 IsEmpty]: Start isEmpty. Operand 373 states and 465 transitions. [2021-11-23 01:54:30,721 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2021-11-23 01:54:30,722 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:54:30,722 INFO L514 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:54:30,722 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-23 01:54:30,723 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:54:30,723 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:54:30,724 INFO L85 PathProgramCache]: Analyzing trace with hash 422872844, now seen corresponding path program 1 times [2021-11-23 01:54:30,724 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:54:30,724 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1533014502] [2021-11-23 01:54:30,724 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:54:30,724 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:54:30,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:54:30,779 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2021-11-23 01:54:30,779 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:54:30,779 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1533014502] [2021-11-23 01:54:30,779 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1533014502] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:54:30,780 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:54:30,780 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 01:54:30,780 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1458090171] [2021-11-23 01:54:30,780 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:54:30,781 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-23 01:54:30,781 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:54:30,781 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 01:54:30,782 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 01:54:30,782 INFO L87 Difference]: Start difference. First operand 373 states and 465 transitions. Second operand has 4 states, 3 states have (on average 15.333333333333334) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2021-11-23 01:54:30,904 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:54:30,904 INFO L93 Difference]: Finished difference Result 752 states and 936 transitions. [2021-11-23 01:54:30,905 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-23 01:54:30,905 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 15.333333333333334) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 75 [2021-11-23 01:54:30,905 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:54:30,909 INFO L225 Difference]: With dead ends: 752 [2021-11-23 01:54:30,909 INFO L226 Difference]: Without dead ends: 381 [2021-11-23 01:54:30,910 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 01:54:30,911 INFO L933 BasicCegarLoop]: 80 mSDtfsCounter, 95 mSDsluCounter, 66 mSDsCounter, 0 mSdLazyCounter, 88 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 95 SdHoareTripleChecker+Valid, 126 SdHoareTripleChecker+Invalid, 92 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 88 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 01:54:30,912 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [95 Valid, 126 Invalid, 92 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 88 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 01:54:30,913 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 381 states. [2021-11-23 01:54:30,942 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 381 to 373. [2021-11-23 01:54:30,943 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 373 states, 260 states have (on average 1.25) internal successors, (325), 287 states have internal predecessors, (325), 55 states have call successors, (55), 49 states have call predecessors, (55), 57 states have return successors, (73), 58 states have call predecessors, (73), 55 states have call successors, (73) [2021-11-23 01:54:30,946 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 373 states to 373 states and 453 transitions. [2021-11-23 01:54:30,947 INFO L78 Accepts]: Start accepts. Automaton has 373 states and 453 transitions. Word has length 75 [2021-11-23 01:54:30,947 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:54:30,947 INFO L470 AbstractCegarLoop]: Abstraction has 373 states and 453 transitions. [2021-11-23 01:54:30,948 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 15.333333333333334) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2021-11-23 01:54:30,948 INFO L276 IsEmpty]: Start isEmpty. Operand 373 states and 453 transitions. [2021-11-23 01:54:30,950 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2021-11-23 01:54:30,950 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:54:30,951 INFO L514 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:54:30,951 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-23 01:54:30,951 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:54:30,952 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:54:30,952 INFO L85 PathProgramCache]: Analyzing trace with hash 68852689, now seen corresponding path program 1 times [2021-11-23 01:54:30,952 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:54:30,952 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1854796616] [2021-11-23 01:54:30,952 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:54:30,953 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:54:30,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:54:31,080 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 3 proven. 21 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-11-23 01:54:31,080 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:54:31,081 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1854796616] [2021-11-23 01:54:31,081 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1854796616] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 01:54:31,081 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1652069739] [2021-11-23 01:54:31,081 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:54:31,082 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:54:31,082 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 01:54:31,086 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 01:54:31,108 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-23 01:54:31,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:54:31,205 INFO L263 TraceCheckSpWp]: Trace formula consists of 473 conjuncts, 9 conjunts are in the unsatisfiable core [2021-11-23 01:54:31,212 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 01:54:31,447 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 10 proven. 2 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2021-11-23 01:54:31,447 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 01:54:31,727 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-23 01:54:31,728 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1652069739] provided 1 perfect and 1 imperfect interpolant sequences [2021-11-23 01:54:31,728 INFO L186 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2021-11-23 01:54:31,728 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [8, 5] total 9 [2021-11-23 01:54:31,728 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1808754060] [2021-11-23 01:54:31,729 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:54:31,729 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-23 01:54:31,729 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:54:31,730 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-23 01:54:31,730 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-11-23 01:54:31,730 INFO L87 Difference]: Start difference. First operand 373 states and 453 transitions. Second operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 3 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 4 states have call predecessors, (8), 3 states have call successors, (8) [2021-11-23 01:54:31,894 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:54:31,894 INFO L93 Difference]: Finished difference Result 553 states and 685 transitions. [2021-11-23 01:54:31,894 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-23 01:54:31,895 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 3 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 4 states have call predecessors, (8), 3 states have call successors, (8) Word has length 72 [2021-11-23 01:54:31,896 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:54:31,899 INFO L225 Difference]: With dead ends: 553 [2021-11-23 01:54:31,899 INFO L226 Difference]: Without dead ends: 424 [2021-11-23 01:54:31,900 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 157 GetRequests, 150 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-11-23 01:54:31,901 INFO L933 BasicCegarLoop]: 89 mSDtfsCounter, 104 mSDsluCounter, 125 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 192 SdHoareTripleChecker+Invalid, 142 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 01:54:31,902 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [107 Valid, 192 Invalid, 142 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 01:54:31,904 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 424 states. [2021-11-23 01:54:31,944 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 424 to 416. [2021-11-23 01:54:31,946 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 416 states, 292 states have (on average 1.2465753424657535) internal successors, (364), 320 states have internal predecessors, (364), 58 states have call successors, (58), 52 states have call predecessors, (58), 65 states have return successors, (79), 66 states have call predecessors, (79), 58 states have call successors, (79) [2021-11-23 01:54:31,949 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 416 states to 416 states and 501 transitions. [2021-11-23 01:54:31,950 INFO L78 Accepts]: Start accepts. Automaton has 416 states and 501 transitions. Word has length 72 [2021-11-23 01:54:31,951 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:54:31,951 INFO L470 AbstractCegarLoop]: Abstraction has 416 states and 501 transitions. [2021-11-23 01:54:31,951 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 3 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 4 states have call predecessors, (8), 3 states have call successors, (8) [2021-11-23 01:54:31,952 INFO L276 IsEmpty]: Start isEmpty. Operand 416 states and 501 transitions. [2021-11-23 01:54:31,954 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2021-11-23 01:54:31,955 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:54:31,955 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:54:31,994 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-23 01:54:32,182 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:54:32,182 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:54:32,182 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:54:32,182 INFO L85 PathProgramCache]: Analyzing trace with hash -1267010426, now seen corresponding path program 1 times [2021-11-23 01:54:32,183 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:54:32,183 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [128865499] [2021-11-23 01:54:32,183 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:54:32,183 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:54:32,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:54:32,287 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2021-11-23 01:54:32,287 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:54:32,287 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [128865499] [2021-11-23 01:54:32,287 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [128865499] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 01:54:32,287 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1559776976] [2021-11-23 01:54:32,288 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:54:32,288 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:54:32,288 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 01:54:32,289 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 01:54:32,312 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-23 01:54:32,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:54:32,392 INFO L263 TraceCheckSpWp]: Trace formula consists of 447 conjuncts, 15 conjunts are in the unsatisfiable core [2021-11-23 01:54:32,396 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 01:54:32,705 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 14 proven. 7 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-11-23 01:54:32,705 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 01:54:32,981 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 6 proven. 1 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-11-23 01:54:32,981 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1559776976] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 01:54:32,981 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1031789605] [2021-11-23 01:54:33,001 INFO L159 IcfgInterpreter]: Started Sifa with 36 locations of interest [2021-11-23 01:54:33,002 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 01:54:33,006 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 01:54:33,012 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 01:54:33,012 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 01:54:36,777 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 45 for LOIs [2021-11-23 01:54:36,901 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 42 for LOIs [2021-11-23 01:54:37,036 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 42 for LOIs [2021-11-23 01:54:37,266 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 41 for LOIs [2021-11-23 01:54:37,274 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 01:54:41,425 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSifa [1031789605] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:54:41,425 INFO L186 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2021-11-23 01:54:41,425 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [23] imperfect sequences [8, 7, 7] total 38 [2021-11-23 01:54:41,426 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1427044653] [2021-11-23 01:54:41,426 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:54:41,427 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2021-11-23 01:54:41,427 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:54:41,427 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2021-11-23 01:54:41,428 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=261, Invalid=1145, Unknown=0, NotChecked=0, Total=1406 [2021-11-23 01:54:41,428 INFO L87 Difference]: Start difference. First operand 416 states and 501 transitions. Second operand has 24 states, 20 states have (on average 1.4) internal successors, (28), 20 states have internal predecessors, (28), 4 states have call successors, (4), 3 states have call predecessors, (4), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2021-11-23 01:54:52,166 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:54:52,166 INFO L93 Difference]: Finished difference Result 860 states and 1035 transitions. [2021-11-23 01:54:52,167 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-11-23 01:54:52,167 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 20 states have (on average 1.4) internal successors, (28), 20 states have internal predecessors, (28), 4 states have call successors, (4), 3 states have call predecessors, (4), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) Word has length 64 [2021-11-23 01:54:52,167 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:54:52,171 INFO L225 Difference]: With dead ends: 860 [2021-11-23 01:54:52,171 INFO L226 Difference]: Without dead ends: 492 [2021-11-23 01:54:52,174 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 214 GetRequests, 157 SyntacticMatches, 7 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 990 ImplicationChecksByTransitivity, 13.6s TimeCoverageRelationStatistics Valid=521, Invalid=2131, Unknown=0, NotChecked=0, Total=2652 [2021-11-23 01:54:52,175 INFO L933 BasicCegarLoop]: 72 mSDtfsCounter, 120 mSDsluCounter, 620 mSDsCounter, 0 mSdLazyCounter, 1205 mSolverCounterSat, 69 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 652 SdHoareTripleChecker+Invalid, 1274 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 69 IncrementalHoareTripleChecker+Valid, 1205 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2021-11-23 01:54:52,175 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [120 Valid, 652 Invalid, 1274 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [69 Valid, 1205 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2021-11-23 01:54:52,176 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 492 states. [2021-11-23 01:54:52,224 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 492 to 479. [2021-11-23 01:54:52,226 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 479 states, 337 states have (on average 1.2344213649851632) internal successors, (416), 366 states have internal predecessors, (416), 67 states have call successors, (67), 61 states have call predecessors, (67), 74 states have return successors, (88), 74 states have call predecessors, (88), 67 states have call successors, (88) [2021-11-23 01:54:52,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 479 states to 479 states and 571 transitions. [2021-11-23 01:54:52,230 INFO L78 Accepts]: Start accepts. Automaton has 479 states and 571 transitions. Word has length 64 [2021-11-23 01:54:52,230 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:54:52,231 INFO L470 AbstractCegarLoop]: Abstraction has 479 states and 571 transitions. [2021-11-23 01:54:52,231 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 20 states have (on average 1.4) internal successors, (28), 20 states have internal predecessors, (28), 4 states have call successors, (4), 3 states have call predecessors, (4), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2021-11-23 01:54:52,231 INFO L276 IsEmpty]: Start isEmpty. Operand 479 states and 571 transitions. [2021-11-23 01:54:52,233 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-11-23 01:54:52,233 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:54:52,234 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:54:52,274 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-23 01:54:52,449 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2021-11-23 01:54:52,450 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:54:52,450 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:54:52,450 INFO L85 PathProgramCache]: Analyzing trace with hash 1437657817, now seen corresponding path program 1 times [2021-11-23 01:54:52,450 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:54:52,450 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [615086860] [2021-11-23 01:54:52,450 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:54:52,451 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:54:52,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:54:52,631 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2021-11-23 01:54:52,631 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:54:52,632 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [615086860] [2021-11-23 01:54:52,632 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [615086860] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 01:54:52,632 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1905516378] [2021-11-23 01:54:52,632 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:54:52,632 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:54:52,632 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 01:54:52,634 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 01:54:52,657 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-11-23 01:54:52,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:54:52,777 INFO L263 TraceCheckSpWp]: Trace formula consists of 453 conjuncts, 21 conjunts are in the unsatisfiable core [2021-11-23 01:54:52,780 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 01:54:53,125 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 14 proven. 15 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 01:54:53,125 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 01:54:53,575 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 9 proven. 1 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2021-11-23 01:54:53,575 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1905516378] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 01:54:53,575 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [816202277] [2021-11-23 01:54:53,580 INFO L159 IcfgInterpreter]: Started Sifa with 39 locations of interest [2021-11-23 01:54:53,581 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 01:54:53,581 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 01:54:53,581 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 01:54:53,582 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 01:54:56,248 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 48 for LOIs [2021-11-23 01:54:56,261 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 44 for LOIs [2021-11-23 01:54:56,394 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 36 for LOIs [2021-11-23 01:54:56,484 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 24 for LOIs [2021-11-23 01:54:56,637 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 26 for LOIs [2021-11-23 01:54:56,640 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 01:55:01,019 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSifa [816202277] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:55:01,019 INFO L186 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2021-11-23 01:55:01,020 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [26] imperfect sequences [11, 11, 10] total 51 [2021-11-23 01:55:01,020 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1924544871] [2021-11-23 01:55:01,020 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:55:01,020 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2021-11-23 01:55:01,021 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:55:01,021 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2021-11-23 01:55:01,023 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=434, Invalid=2116, Unknown=0, NotChecked=0, Total=2550 [2021-11-23 01:55:01,023 INFO L87 Difference]: Start difference. First operand 479 states and 571 transitions. Second operand has 27 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 22 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 5 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2021-11-23 01:55:12,868 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:55:12,868 INFO L93 Difference]: Finished difference Result 848 states and 1059 transitions. [2021-11-23 01:55:12,869 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2021-11-23 01:55:12,869 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 22 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 5 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) Word has length 67 [2021-11-23 01:55:12,872 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:55:12,877 INFO L225 Difference]: With dead ends: 848 [2021-11-23 01:55:12,878 INFO L226 Difference]: Without dead ends: 691 [2021-11-23 01:55:12,881 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 243 GetRequests, 149 SyntacticMatches, 14 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2983 ImplicationChecksByTransitivity, 14.6s TimeCoverageRelationStatistics Valid=1224, Invalid=5418, Unknown=0, NotChecked=0, Total=6642 [2021-11-23 01:55:12,882 INFO L933 BasicCegarLoop]: 80 mSDtfsCounter, 414 mSDsluCounter, 480 mSDsCounter, 0 mSdLazyCounter, 1413 mSolverCounterSat, 303 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 418 SdHoareTripleChecker+Valid, 525 SdHoareTripleChecker+Invalid, 1716 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 303 IncrementalHoareTripleChecker+Valid, 1413 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2021-11-23 01:55:12,883 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [418 Valid, 525 Invalid, 1716 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [303 Valid, 1413 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2021-11-23 01:55:12,885 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 691 states. [2021-11-23 01:55:12,947 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 691 to 621. [2021-11-23 01:55:12,949 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 621 states, 439 states have (on average 1.246013667425968) internal successors, (547), 474 states have internal predecessors, (547), 87 states have call successors, (87), 77 states have call predecessors, (87), 94 states have return successors, (121), 96 states have call predecessors, (121), 87 states have call successors, (121) [2021-11-23 01:55:12,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 621 states to 621 states and 755 transitions. [2021-11-23 01:55:12,953 INFO L78 Accepts]: Start accepts. Automaton has 621 states and 755 transitions. Word has length 67 [2021-11-23 01:55:12,954 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:55:12,954 INFO L470 AbstractCegarLoop]: Abstraction has 621 states and 755 transitions. [2021-11-23 01:55:12,954 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 22 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 5 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2021-11-23 01:55:12,954 INFO L276 IsEmpty]: Start isEmpty. Operand 621 states and 755 transitions. [2021-11-23 01:55:12,957 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-11-23 01:55:12,957 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:55:12,958 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:55:12,995 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-11-23 01:55:13,172 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-11-23 01:55:13,172 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:55:13,173 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:55:13,173 INFO L85 PathProgramCache]: Analyzing trace with hash 42476523, now seen corresponding path program 1 times [2021-11-23 01:55:13,173 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:55:13,173 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [346395198] [2021-11-23 01:55:13,173 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:55:13,173 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:55:13,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:55:13,289 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2021-11-23 01:55:13,289 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:55:13,290 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [346395198] [2021-11-23 01:55:13,290 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [346395198] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 01:55:13,290 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [235026683] [2021-11-23 01:55:13,290 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:55:13,290 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:55:13,291 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 01:55:13,291 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 01:55:13,312 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-11-23 01:55:13,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:55:13,385 INFO L263 TraceCheckSpWp]: Trace formula consists of 453 conjuncts, 44 conjunts are in the unsatisfiable core [2021-11-23 01:55:13,388 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 01:55:13,738 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 7 proven. 22 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 01:55:13,739 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 01:55:14,487 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 14 proven. 9 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2021-11-23 01:55:14,487 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [235026683] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 01:55:14,487 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [784008546] [2021-11-23 01:55:14,489 INFO L159 IcfgInterpreter]: Started Sifa with 39 locations of interest [2021-11-23 01:55:14,489 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 01:55:14,490 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 01:55:14,490 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 01:55:14,490 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 01:55:21,638 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 48 for LOIs [2021-11-23 01:55:21,780 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 44 for LOIs [2021-11-23 01:55:21,885 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 44 for LOIs [2021-11-23 01:55:22,099 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 38 for LOIs [2021-11-23 01:55:22,108 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 318 for LOIs [2021-11-23 01:55:22,175 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 01:55:36,102 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSifa [784008546] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:55:36,103 INFO L186 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2021-11-23 01:55:36,103 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [26] imperfect sequences [8, 13, 11] total 50 [2021-11-23 01:55:36,103 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [248068694] [2021-11-23 01:55:36,103 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:55:36,104 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2021-11-23 01:55:36,104 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:55:36,105 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2021-11-23 01:55:36,106 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=237, Invalid=2213, Unknown=0, NotChecked=0, Total=2450 [2021-11-23 01:55:36,106 INFO L87 Difference]: Start difference. First operand 621 states and 755 transitions. Second operand has 27 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 22 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 5 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2021-11-23 01:56:03,997 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:56:03,997 INFO L93 Difference]: Finished difference Result 1323 states and 1718 transitions. [2021-11-23 01:56:03,998 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2021-11-23 01:56:03,998 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 22 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 5 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) Word has length 67 [2021-11-23 01:56:03,998 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:56:04,006 INFO L225 Difference]: With dead ends: 1323 [2021-11-23 01:56:04,007 INFO L226 Difference]: Without dead ends: 1050 [2021-11-23 01:56:04,010 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 236 GetRequests, 155 SyntacticMatches, 8 SemanticMatches, 73 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1826 ImplicationChecksByTransitivity, 39.1s TimeCoverageRelationStatistics Valid=611, Invalid=4939, Unknown=0, NotChecked=0, Total=5550 [2021-11-23 01:56:04,011 INFO L933 BasicCegarLoop]: 74 mSDtfsCounter, 260 mSDsluCounter, 494 mSDsCounter, 0 mSdLazyCounter, 1527 mSolverCounterSat, 205 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 261 SdHoareTripleChecker+Valid, 556 SdHoareTripleChecker+Invalid, 1732 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 205 IncrementalHoareTripleChecker+Valid, 1527 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.7s IncrementalHoareTripleChecker+Time [2021-11-23 01:56:04,012 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [261 Valid, 556 Invalid, 1732 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [205 Valid, 1527 Invalid, 0 Unknown, 0 Unchecked, 2.7s Time] [2021-11-23 01:56:04,013 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1050 states. [2021-11-23 01:56:04,162 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1050 to 850. [2021-11-23 01:56:04,164 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 850 states, 599 states have (on average 1.2404006677796326) internal successors, (743), 644 states have internal predecessors, (743), 119 states have call successors, (119), 108 states have call predecessors, (119), 131 states have return successors, (169), 133 states have call predecessors, (169), 119 states have call successors, (169) [2021-11-23 01:56:04,169 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 850 states to 850 states and 1031 transitions. [2021-11-23 01:56:04,169 INFO L78 Accepts]: Start accepts. Automaton has 850 states and 1031 transitions. Word has length 67 [2021-11-23 01:56:04,170 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:56:04,170 INFO L470 AbstractCegarLoop]: Abstraction has 850 states and 1031 transitions. [2021-11-23 01:56:04,170 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 22 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 5 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2021-11-23 01:56:04,170 INFO L276 IsEmpty]: Start isEmpty. Operand 850 states and 1031 transitions. [2021-11-23 01:56:04,173 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2021-11-23 01:56:04,173 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:56:04,174 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:56:04,214 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2021-11-23 01:56:04,390 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:56:04,390 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:56:04,390 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:56:04,390 INFO L85 PathProgramCache]: Analyzing trace with hash 1581910990, now seen corresponding path program 1 times [2021-11-23 01:56:04,390 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:56:04,390 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1746471124] [2021-11-23 01:56:04,391 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:56:04,391 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:56:04,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:56:04,526 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 14 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2021-11-23 01:56:04,526 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:56:04,527 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1746471124] [2021-11-23 01:56:04,527 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1746471124] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 01:56:04,527 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [881180043] [2021-11-23 01:56:04,527 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:56:04,527 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:56:04,528 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 01:56:04,534 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 01:56:04,553 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2021-11-23 01:56:04,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:56:04,627 INFO L263 TraceCheckSpWp]: Trace formula consists of 460 conjuncts, 28 conjunts are in the unsatisfiable core [2021-11-23 01:56:04,630 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 01:56:04,898 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 10 proven. 9 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-11-23 01:56:04,898 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 01:56:05,364 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 1 proven. 8 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2021-11-23 01:56:05,364 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [881180043] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 01:56:05,365 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [164122338] [2021-11-23 01:56:05,368 INFO L159 IcfgInterpreter]: Started Sifa with 48 locations of interest [2021-11-23 01:56:05,368 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 01:56:05,368 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 01:56:05,368 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 01:56:05,368 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 01:56:09,273 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 305 for LOIs [2021-11-23 01:56:09,350 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 42 for LOIs [2021-11-23 01:56:09,535 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 48 for LOIs [2021-11-23 01:56:09,828 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 59 for LOIs [2021-11-23 01:56:10,245 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 48 for LOIs [2021-11-23 01:56:10,260 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 33 for LOIs [2021-11-23 01:56:10,263 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 01:56:20,078 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '16925#(and (<= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483647) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~2#1|) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| 0) (<= 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483648)) (= ~methaneLevelCritical~0 0) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)) (= ~head~0.offset 0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| |timeShift_getWaterLevel_#res#1|) (= 1 ~systemActive~0) (= |timeShift_getWaterLevel_~retValue_acc~9#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1|) (= ~head~0.base 0) (= |#NULL.offset| 0) (<= 0 |#StackHeapBarrier|) (= |timeShift_getWaterLevel_~retValue_acc~9#1| ~waterLevel~0) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~2#1|))' at error location [2021-11-23 01:56:20,078 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 01:56:20,078 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 01:56:20,079 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 9, 11] total 28 [2021-11-23 01:56:20,079 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1409200542] [2021-11-23 01:56:20,079 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 01:56:20,080 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2021-11-23 01:56:20,080 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:56:20,080 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2021-11-23 01:56:20,082 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=407, Invalid=3499, Unknown=0, NotChecked=0, Total=3906 [2021-11-23 01:56:20,082 INFO L87 Difference]: Start difference. First operand 850 states and 1031 transitions. Second operand has 28 states, 25 states have (on average 4.48) internal successors, (112), 25 states have internal predecessors, (112), 13 states have call successors, (24), 10 states have call predecessors, (24), 8 states have return successors, (21), 11 states have call predecessors, (21), 12 states have call successors, (21) [2021-11-23 01:56:22,570 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:56:22,570 INFO L93 Difference]: Finished difference Result 1690 states and 2101 transitions. [2021-11-23 01:56:22,570 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2021-11-23 01:56:22,571 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 25 states have (on average 4.48) internal successors, (112), 25 states have internal predecessors, (112), 13 states have call successors, (24), 10 states have call predecessors, (24), 8 states have return successors, (21), 11 states have call predecessors, (21), 12 states have call successors, (21) Word has length 71 [2021-11-23 01:56:22,571 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:56:22,580 INFO L225 Difference]: With dead ends: 1690 [2021-11-23 01:56:22,581 INFO L226 Difference]: Without dead ends: 1339 [2021-11-23 01:56:22,585 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 269 GetRequests, 162 SyntacticMatches, 9 SemanticMatches, 98 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4401 ImplicationChecksByTransitivity, 11.2s TimeCoverageRelationStatistics Valid=1136, Invalid=8764, Unknown=0, NotChecked=0, Total=9900 [2021-11-23 01:56:22,586 INFO L933 BasicCegarLoop]: 110 mSDtfsCounter, 753 mSDsluCounter, 927 mSDsCounter, 0 mSdLazyCounter, 1758 mSolverCounterSat, 458 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 759 SdHoareTripleChecker+Valid, 881 SdHoareTripleChecker+Invalid, 2216 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 458 IncrementalHoareTripleChecker+Valid, 1758 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2021-11-23 01:56:22,587 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [759 Valid, 881 Invalid, 2216 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [458 Valid, 1758 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2021-11-23 01:56:22,588 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1339 states. [2021-11-23 01:56:22,762 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1339 to 1174. [2021-11-23 01:56:22,764 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1174 states, 823 states have (on average 1.2235722964763063) internal successors, (1007), 886 states have internal predecessors, (1007), 167 states have call successors, (167), 147 states have call predecessors, (167), 183 states have return successors, (238), 185 states have call predecessors, (238), 167 states have call successors, (238) [2021-11-23 01:56:22,769 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1174 states to 1174 states and 1412 transitions. [2021-11-23 01:56:22,769 INFO L78 Accepts]: Start accepts. Automaton has 1174 states and 1412 transitions. Word has length 71 [2021-11-23 01:56:22,770 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:56:22,770 INFO L470 AbstractCegarLoop]: Abstraction has 1174 states and 1412 transitions. [2021-11-23 01:56:22,770 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 25 states have (on average 4.48) internal successors, (112), 25 states have internal predecessors, (112), 13 states have call successors, (24), 10 states have call predecessors, (24), 8 states have return successors, (21), 11 states have call predecessors, (21), 12 states have call successors, (21) [2021-11-23 01:56:22,770 INFO L276 IsEmpty]: Start isEmpty. Operand 1174 states and 1412 transitions. [2021-11-23 01:56:22,773 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2021-11-23 01:56:22,773 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:56:22,774 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:56:22,803 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2021-11-23 01:56:22,990 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-11-23 01:56:22,990 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:56:22,991 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:56:22,991 INFO L85 PathProgramCache]: Analyzing trace with hash -338007072, now seen corresponding path program 1 times [2021-11-23 01:56:22,991 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:56:22,991 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1053296077] [2021-11-23 01:56:22,991 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:56:22,991 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:56:23,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:56:23,116 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 14 proven. 4 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2021-11-23 01:56:23,117 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:56:23,117 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1053296077] [2021-11-23 01:56:23,117 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1053296077] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 01:56:23,117 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1603862395] [2021-11-23 01:56:23,117 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:56:23,118 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:56:23,118 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 01:56:23,119 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 01:56:23,141 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2021-11-23 01:56:23,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:56:23,208 INFO L263 TraceCheckSpWp]: Trace formula consists of 460 conjuncts, 32 conjunts are in the unsatisfiable core [2021-11-23 01:56:23,210 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 01:56:23,431 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 11 proven. 11 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 01:56:23,431 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 01:56:23,798 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 8 proven. 5 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-11-23 01:56:23,798 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1603862395] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 01:56:23,798 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [381361804] [2021-11-23 01:56:23,801 INFO L159 IcfgInterpreter]: Started Sifa with 48 locations of interest [2021-11-23 01:56:23,801 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 01:56:23,802 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 01:56:23,802 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 01:56:23,802 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 01:56:25,643 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 27 for LOIs [2021-11-23 01:56:25,821 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 37 for LOIs [2021-11-23 01:56:25,965 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 37 for LOIs [2021-11-23 01:56:26,170 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 38 for LOIs [2021-11-23 01:56:26,176 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 39 for LOIs [2021-11-23 01:56:26,183 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 40 for LOIs [2021-11-23 01:56:26,189 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 01:56:36,055 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21856#(and (<= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483647) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~2#1|) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| 0) (<= ~methaneLevelCritical~0 1) (<= 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483648)) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)) (= ~head~0.offset 0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| |timeShift_getWaterLevel_#res#1|) (= 1 ~systemActive~0) (<= 0 ~head~0.base) (= |timeShift_getWaterLevel_~retValue_acc~9#1| |timeShift_getWaterLevel_#res#1|) (<= 0 ~methaneLevelCritical~0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1|) (<= ~head~0.base 0) (= |#NULL.offset| 0) (<= 0 |#StackHeapBarrier|) (= |timeShift_getWaterLevel_~retValue_acc~9#1| ~waterLevel~0) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~2#1|))' at error location [2021-11-23 01:56:36,056 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 01:56:36,056 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 01:56:36,056 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 11] total 24 [2021-11-23 01:56:36,056 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1479877365] [2021-11-23 01:56:36,056 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 01:56:36,057 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2021-11-23 01:56:36,057 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:56:36,057 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2021-11-23 01:56:36,058 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=270, Invalid=2700, Unknown=0, NotChecked=0, Total=2970 [2021-11-23 01:56:36,059 INFO L87 Difference]: Start difference. First operand 1174 states and 1412 transitions. Second operand has 24 states, 19 states have (on average 6.315789473684211) internal successors, (120), 19 states have internal predecessors, (120), 11 states have call successors, (26), 8 states have call predecessors, (26), 10 states have return successors, (24), 11 states have call predecessors, (24), 11 states have call successors, (24) [2021-11-23 01:56:39,406 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:56:39,407 INFO L93 Difference]: Finished difference Result 3185 states and 4013 transitions. [2021-11-23 01:56:39,407 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 73 states. [2021-11-23 01:56:39,407 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 19 states have (on average 6.315789473684211) internal successors, (120), 19 states have internal predecessors, (120), 11 states have call successors, (26), 8 states have call predecessors, (26), 10 states have return successors, (24), 11 states have call predecessors, (24), 11 states have call successors, (24) Word has length 71 [2021-11-23 01:56:39,408 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:56:39,426 INFO L225 Difference]: With dead ends: 3185 [2021-11-23 01:56:39,426 INFO L226 Difference]: Without dead ends: 2538 [2021-11-23 01:56:39,434 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 315 GetRequests, 178 SyntacticMatches, 16 SemanticMatches, 121 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5880 ImplicationChecksByTransitivity, 11.5s TimeCoverageRelationStatistics Valid=1281, Invalid=13725, Unknown=0, NotChecked=0, Total=15006 [2021-11-23 01:56:39,436 INFO L933 BasicCegarLoop]: 167 mSDtfsCounter, 1231 mSDsluCounter, 1287 mSDsCounter, 0 mSdLazyCounter, 2712 mSolverCounterSat, 835 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1241 SdHoareTripleChecker+Valid, 1213 SdHoareTripleChecker+Invalid, 3547 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 835 IncrementalHoareTripleChecker+Valid, 2712 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2021-11-23 01:56:39,436 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1241 Valid, 1213 Invalid, 3547 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [835 Valid, 2712 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2021-11-23 01:56:39,439 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2538 states. [2021-11-23 01:56:39,762 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2538 to 2032. [2021-11-23 01:56:39,767 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2032 states, 1428 states have (on average 1.2156862745098038) internal successors, (1736), 1534 states have internal predecessors, (1736), 294 states have call successors, (294), 259 states have call predecessors, (294), 309 states have return successors, (398), 310 states have call predecessors, (398), 294 states have call successors, (398) [2021-11-23 01:56:39,775 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2032 states to 2032 states and 2428 transitions. [2021-11-23 01:56:39,776 INFO L78 Accepts]: Start accepts. Automaton has 2032 states and 2428 transitions. Word has length 71 [2021-11-23 01:56:39,776 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:56:39,777 INFO L470 AbstractCegarLoop]: Abstraction has 2032 states and 2428 transitions. [2021-11-23 01:56:39,777 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 19 states have (on average 6.315789473684211) internal successors, (120), 19 states have internal predecessors, (120), 11 states have call successors, (26), 8 states have call predecessors, (26), 10 states have return successors, (24), 11 states have call predecessors, (24), 11 states have call successors, (24) [2021-11-23 01:56:39,777 INFO L276 IsEmpty]: Start isEmpty. Operand 2032 states and 2428 transitions. [2021-11-23 01:56:39,783 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2021-11-23 01:56:39,783 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:56:39,784 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:56:39,816 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2021-11-23 01:56:39,998 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2021-11-23 01:56:39,999 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:56:39,999 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:56:39,999 INFO L85 PathProgramCache]: Analyzing trace with hash -1688946847, now seen corresponding path program 2 times [2021-11-23 01:56:39,999 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:56:39,999 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1950823649] [2021-11-23 01:56:40,000 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:56:40,000 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:56:40,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:56:40,093 INFO L134 CoverageAnalysis]: Checked inductivity of 83 backedges. 39 proven. 4 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2021-11-23 01:56:40,093 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:56:40,093 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1950823649] [2021-11-23 01:56:40,094 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1950823649] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 01:56:40,094 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1298666681] [2021-11-23 01:56:40,094 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2021-11-23 01:56:40,095 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:56:40,095 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 01:56:40,096 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 01:56:40,116 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2021-11-23 01:56:40,188 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2021-11-23 01:56:40,188 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-23 01:56:40,190 INFO L263 TraceCheckSpWp]: Trace formula consists of 461 conjuncts, 30 conjunts are in the unsatisfiable core [2021-11-23 01:56:40,195 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 01:56:40,358 INFO L134 CoverageAnalysis]: Checked inductivity of 83 backedges. 68 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2021-11-23 01:56:40,358 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-23 01:56:40,358 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1298666681] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:56:40,358 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-23 01:56:40,358 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [5] total 6 [2021-11-23 01:56:40,359 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [502995767] [2021-11-23 01:56:40,359 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:56:40,359 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-23 01:56:40,359 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:56:40,360 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-23 01:56:40,360 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-11-23 01:56:40,360 INFO L87 Difference]: Start difference. First operand 2032 states and 2428 transitions. Second operand has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 3 states have call successors, (14), 3 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2021-11-23 01:56:40,732 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:56:40,732 INFO L93 Difference]: Finished difference Result 3391 states and 4115 transitions. [2021-11-23 01:56:40,733 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-23 01:56:40,733 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 3 states have call successors, (14), 3 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 106 [2021-11-23 01:56:40,733 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:56:40,747 INFO L225 Difference]: With dead ends: 3391 [2021-11-23 01:56:40,748 INFO L226 Difference]: Without dead ends: 2222 [2021-11-23 01:56:40,752 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 114 GetRequests, 108 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2021-11-23 01:56:40,753 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 67 mSDsluCounter, 301 mSDsCounter, 0 mSdLazyCounter, 151 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 366 SdHoareTripleChecker+Invalid, 158 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 151 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 01:56:40,753 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [68 Valid, 366 Invalid, 158 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 151 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 01:56:40,756 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2222 states. [2021-11-23 01:56:41,044 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2222 to 2069. [2021-11-23 01:56:41,048 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2069 states, 1454 states have (on average 1.2118294360385145) internal successors, (1762), 1564 states have internal predecessors, (1762), 294 states have call successors, (294), 266 states have call predecessors, (294), 320 states have return successors, (392), 313 states have call predecessors, (392), 294 states have call successors, (392) [2021-11-23 01:56:41,058 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2069 states to 2069 states and 2448 transitions. [2021-11-23 01:56:41,059 INFO L78 Accepts]: Start accepts. Automaton has 2069 states and 2448 transitions. Word has length 106 [2021-11-23 01:56:41,059 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:56:41,060 INFO L470 AbstractCegarLoop]: Abstraction has 2069 states and 2448 transitions. [2021-11-23 01:56:41,060 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 3 states have call successors, (14), 3 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2021-11-23 01:56:41,060 INFO L276 IsEmpty]: Start isEmpty. Operand 2069 states and 2448 transitions. [2021-11-23 01:56:41,067 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 123 [2021-11-23 01:56:41,067 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:56:41,067 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:56:41,105 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2021-11-23 01:56:41,294 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13,8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:56:41,294 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:56:41,294 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:56:41,294 INFO L85 PathProgramCache]: Analyzing trace with hash -381832471, now seen corresponding path program 1 times [2021-11-23 01:56:41,295 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:56:41,295 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1961439036] [2021-11-23 01:56:41,295 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:56:41,295 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:56:41,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:56:41,611 INFO L134 CoverageAnalysis]: Checked inductivity of 141 backedges. 9 proven. 83 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2021-11-23 01:56:41,611 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:56:41,611 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1961439036] [2021-11-23 01:56:41,611 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1961439036] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 01:56:41,611 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [188146526] [2021-11-23 01:56:41,612 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:56:41,612 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:56:41,612 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 01:56:41,614 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 01:56:41,631 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2021-11-23 01:56:41,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:56:41,739 INFO L263 TraceCheckSpWp]: Trace formula consists of 627 conjuncts, 29 conjunts are in the unsatisfiable core [2021-11-23 01:56:41,743 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 01:56:42,116 INFO L134 CoverageAnalysis]: Checked inductivity of 141 backedges. 91 proven. 11 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2021-11-23 01:56:42,117 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 01:56:42,493 INFO L134 CoverageAnalysis]: Checked inductivity of 141 backedges. 67 proven. 5 refuted. 0 times theorem prover too weak. 69 trivial. 0 not checked. [2021-11-23 01:56:42,494 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [188146526] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 01:56:42,494 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1818464028] [2021-11-23 01:56:42,496 INFO L159 IcfgInterpreter]: Started Sifa with 45 locations of interest [2021-11-23 01:56:42,497 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 01:56:42,497 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 01:56:42,497 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 01:56:42,498 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 01:56:46,329 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 307 for LOIs [2021-11-23 01:56:46,380 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 43 for LOIs [2021-11-23 01:56:46,547 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 36 for LOIs [2021-11-23 01:56:46,604 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 24 for LOIs [2021-11-23 01:56:46,709 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 50 for LOIs [2021-11-23 01:56:46,721 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 01:56:56,585 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSifa [1818464028] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:56:56,585 INFO L186 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2021-11-23 01:56:56,585 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [29] imperfect sequences [20, 8, 8] total 56 [2021-11-23 01:56:56,586 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1468441338] [2021-11-23 01:56:56,586 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:56:56,586 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2021-11-23 01:56:56,586 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:56:56,587 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2021-11-23 01:56:56,588 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=397, Invalid=2683, Unknown=0, NotChecked=0, Total=3080 [2021-11-23 01:56:56,588 INFO L87 Difference]: Start difference. First operand 2069 states and 2448 transitions. Second operand has 30 states, 23 states have (on average 1.4782608695652173) internal successors, (34), 24 states have internal predecessors, (34), 7 states have call successors, (7), 5 states have call predecessors, (7), 6 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2021-11-23 01:57:20,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:57:20,002 INFO L93 Difference]: Finished difference Result 3466 states and 4155 transitions. [2021-11-23 01:57:20,003 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2021-11-23 01:57:20,003 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 23 states have (on average 1.4782608695652173) internal successors, (34), 24 states have internal predecessors, (34), 7 states have call successors, (7), 5 states have call predecessors, (7), 6 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) Word has length 122 [2021-11-23 01:57:20,003 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:57:20,015 INFO L225 Difference]: With dead ends: 3466 [2021-11-23 01:57:20,016 INFO L226 Difference]: Without dead ends: 2177 [2021-11-23 01:57:20,022 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 419 GetRequests, 305 SyntacticMatches, 29 SemanticMatches, 85 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3943 ImplicationChecksByTransitivity, 31.6s TimeCoverageRelationStatistics Valid=1045, Invalid=6437, Unknown=0, NotChecked=0, Total=7482 [2021-11-23 01:57:20,023 INFO L933 BasicCegarLoop]: 74 mSDtfsCounter, 219 mSDsluCounter, 723 mSDsCounter, 0 mSdLazyCounter, 1898 mSolverCounterSat, 138 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 220 SdHoareTripleChecker+Valid, 744 SdHoareTripleChecker+Invalid, 2036 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 138 IncrementalHoareTripleChecker+Valid, 1898 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2021-11-23 01:57:20,023 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [220 Valid, 744 Invalid, 2036 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [138 Valid, 1898 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2021-11-23 01:57:20,026 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2177 states. [2021-11-23 01:57:20,318 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2177 to 2133. [2021-11-23 01:57:20,322 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2133 states, 1500 states have (on average 1.212) internal successors, (1818), 1612 states have internal predecessors, (1818), 304 states have call successors, (304), 274 states have call predecessors, (304), 328 states have return successors, (404), 323 states have call predecessors, (404), 304 states have call successors, (404) [2021-11-23 01:57:20,331 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2133 states to 2133 states and 2526 transitions. [2021-11-23 01:57:20,332 INFO L78 Accepts]: Start accepts. Automaton has 2133 states and 2526 transitions. Word has length 122 [2021-11-23 01:57:20,332 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:57:20,333 INFO L470 AbstractCegarLoop]: Abstraction has 2133 states and 2526 transitions. [2021-11-23 01:57:20,333 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 23 states have (on average 1.4782608695652173) internal successors, (34), 24 states have internal predecessors, (34), 7 states have call successors, (7), 5 states have call predecessors, (7), 6 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2021-11-23 01:57:20,333 INFO L276 IsEmpty]: Start isEmpty. Operand 2133 states and 2526 transitions. [2021-11-23 01:57:20,338 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 126 [2021-11-23 01:57:20,339 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:57:20,339 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:57:20,377 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2021-11-23 01:57:20,554 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2021-11-23 01:57:20,554 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:57:20,554 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:57:20,554 INFO L85 PathProgramCache]: Analyzing trace with hash -1828390536, now seen corresponding path program 1 times [2021-11-23 01:57:20,554 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:57:20,555 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [641265632] [2021-11-23 01:57:20,555 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:57:20,555 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:57:20,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:57:20,847 INFO L134 CoverageAnalysis]: Checked inductivity of 141 backedges. 9 proven. 83 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2021-11-23 01:57:20,847 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:57:20,848 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [641265632] [2021-11-23 01:57:20,848 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [641265632] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 01:57:20,848 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [822723780] [2021-11-23 01:57:20,848 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:57:20,848 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:57:20,848 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 01:57:20,849 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 01:57:20,865 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2021-11-23 01:57:20,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:57:20,968 INFO L263 TraceCheckSpWp]: Trace formula consists of 633 conjuncts, 35 conjunts are in the unsatisfiable core [2021-11-23 01:57:20,971 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 01:57:21,276 INFO L134 CoverageAnalysis]: Checked inductivity of 141 backedges. 100 proven. 7 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2021-11-23 01:57:21,276 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 01:57:21,897 INFO L134 CoverageAnalysis]: Checked inductivity of 141 backedges. 71 proven. 10 refuted. 0 times theorem prover too weak. 60 trivial. 0 not checked. [2021-11-23 01:57:21,897 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [822723780] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 01:57:21,897 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [688719909] [2021-11-23 01:57:21,899 INFO L159 IcfgInterpreter]: Started Sifa with 48 locations of interest [2021-11-23 01:57:21,899 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 01:57:21,900 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 01:57:21,900 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 01:57:21,900 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 01:57:24,308 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 50 for LOIs [2021-11-23 01:57:24,317 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 43 for LOIs [2021-11-23 01:57:24,550 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 39 for LOIs [2021-11-23 01:57:24,627 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 39 for LOIs [2021-11-23 01:57:24,796 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 40 for LOIs [2021-11-23 01:57:24,803 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 43 for LOIs [2021-11-23 01:57:24,810 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 26 for LOIs [2021-11-23 01:57:24,813 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 01:57:30,223 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '48827#(and (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~2#1|) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| 0) (<= ~methaneLevelCritical~0 1) (<= ~pumpRunning~0 1) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)) (= ~head~0.offset 0) (<= 1 ~systemActive~0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| |timeShift_getWaterLevel_#res#1|) (<= |#NULL.offset| 0) (= |old(~pumpRunning~0)| 0) (<= 0 ~head~0.base) (= |timeShift_getWaterLevel_~retValue_acc~9#1| |timeShift_getWaterLevel_#res#1|) (<= 0 ~methaneLevelCritical~0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1|) (<= 0 ~pumpRunning~0) (<= ~head~0.base 0) (<= 0 |#NULL.offset|) (<= 0 |#StackHeapBarrier|) (= |timeShift_getWaterLevel_~retValue_acc~9#1| ~waterLevel~0) (<= ~systemActive~0 1) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~2#1|))' at error location [2021-11-23 01:57:30,223 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 01:57:30,223 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 01:57:30,224 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 11, 11] total 34 [2021-11-23 01:57:30,224 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [122115843] [2021-11-23 01:57:30,224 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 01:57:30,225 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2021-11-23 01:57:30,225 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:57:30,225 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2021-11-23 01:57:30,226 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=396, Invalid=4296, Unknown=0, NotChecked=0, Total=4692 [2021-11-23 01:57:30,227 INFO L87 Difference]: Start difference. First operand 2133 states and 2526 transitions. Second operand has 34 states, 29 states have (on average 4.827586206896552) internal successors, (140), 27 states have internal predecessors, (140), 12 states have call successors, (28), 7 states have call predecessors, (28), 13 states have return successors, (32), 17 states have call predecessors, (32), 12 states have call successors, (32) [2021-11-23 01:57:37,903 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:57:37,904 INFO L93 Difference]: Finished difference Result 9954 states and 13400 transitions. [2021-11-23 01:57:37,904 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 143 states. [2021-11-23 01:57:37,905 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 29 states have (on average 4.827586206896552) internal successors, (140), 27 states have internal predecessors, (140), 12 states have call successors, (28), 7 states have call predecessors, (28), 13 states have return successors, (32), 17 states have call predecessors, (32), 12 states have call successors, (32) Word has length 125 [2021-11-23 01:57:37,905 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:57:37,970 INFO L225 Difference]: With dead ends: 9954 [2021-11-23 01:57:37,971 INFO L226 Difference]: Without dead ends: 8632 [2021-11-23 01:57:37,987 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 577 GetRequests, 375 SyntacticMatches, 4 SemanticMatches, 198 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16211 ImplicationChecksByTransitivity, 9.7s TimeCoverageRelationStatistics Valid=4071, Invalid=35729, Unknown=0, NotChecked=0, Total=39800 [2021-11-23 01:57:37,987 INFO L933 BasicCegarLoop]: 152 mSDtfsCounter, 2115 mSDsluCounter, 1522 mSDsCounter, 0 mSdLazyCounter, 4778 mSolverCounterSat, 1693 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2122 SdHoareTripleChecker+Valid, 1313 SdHoareTripleChecker+Invalid, 6471 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1693 IncrementalHoareTripleChecker+Valid, 4778 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.6s IncrementalHoareTripleChecker+Time [2021-11-23 01:57:37,988 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2122 Valid, 1313 Invalid, 6471 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1693 Valid, 4778 Invalid, 0 Unknown, 0 Unchecked, 2.6s Time] [2021-11-23 01:57:37,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8632 states. [2021-11-23 01:57:38,816 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8632 to 4804. [2021-11-23 01:57:38,826 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4804 states, 3455 states have (on average 1.220260492040521) internal successors, (4216), 3661 states have internal predecessors, (4216), 637 states have call successors, (637), 570 states have call predecessors, (637), 711 states have return successors, (936), 692 states have call predecessors, (936), 637 states have call successors, (936) [2021-11-23 01:57:38,840 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4804 states to 4804 states and 5789 transitions. [2021-11-23 01:57:38,842 INFO L78 Accepts]: Start accepts. Automaton has 4804 states and 5789 transitions. Word has length 125 [2021-11-23 01:57:38,843 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:57:38,843 INFO L470 AbstractCegarLoop]: Abstraction has 4804 states and 5789 transitions. [2021-11-23 01:57:38,843 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 29 states have (on average 4.827586206896552) internal successors, (140), 27 states have internal predecessors, (140), 12 states have call successors, (28), 7 states have call predecessors, (28), 13 states have return successors, (32), 17 states have call predecessors, (32), 12 states have call successors, (32) [2021-11-23 01:57:38,844 INFO L276 IsEmpty]: Start isEmpty. Operand 4804 states and 5789 transitions. [2021-11-23 01:57:38,855 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 133 [2021-11-23 01:57:38,856 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:57:38,856 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:57:38,893 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2021-11-23 01:57:39,082 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2021-11-23 01:57:39,082 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:57:39,082 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:57:39,083 INFO L85 PathProgramCache]: Analyzing trace with hash 899699374, now seen corresponding path program 1 times [2021-11-23 01:57:39,083 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:57:39,083 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1314726557] [2021-11-23 01:57:39,083 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:57:39,083 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:57:39,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:57:39,400 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 56 proven. 46 refuted. 0 times theorem prover too weak. 35 trivial. 0 not checked. [2021-11-23 01:57:39,400 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:57:39,400 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1314726557] [2021-11-23 01:57:39,400 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1314726557] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 01:57:39,400 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1833176942] [2021-11-23 01:57:39,401 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:57:39,401 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 01:57:39,401 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 01:57:39,401 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 01:57:39,402 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2021-11-23 01:57:39,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:57:39,518 INFO L263 TraceCheckSpWp]: Trace formula consists of 646 conjuncts, 36 conjunts are in the unsatisfiable core [2021-11-23 01:57:39,521 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 01:57:40,058 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 78 proven. 41 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2021-11-23 01:57:40,058 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 01:57:40,990 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 74 proven. 23 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2021-11-23 01:57:40,990 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1833176942] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 01:57:40,990 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [5975824] [2021-11-23 01:57:40,993 INFO L159 IcfgInterpreter]: Started Sifa with 54 locations of interest [2021-11-23 01:57:40,993 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 01:57:40,994 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 01:57:40,994 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 01:57:40,994 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 01:57:43,295 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 29 for LOIs [2021-11-23 01:57:43,300 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 37 for LOIs [2021-11-23 01:57:43,470 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 47 for LOIs [2021-11-23 01:57:43,790 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 58 for LOIs [2021-11-23 01:57:44,156 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 49 for LOIs [2021-11-23 01:57:44,168 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 41 for LOIs [2021-11-23 01:57:44,175 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 34 for LOIs [2021-11-23 01:57:44,178 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 24 for LOIs [2021-11-23 01:57:44,180 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 01:57:49,240 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '72326#(and (<= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483647) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~2#1|) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| 0) (<= ~methaneLevelCritical~0 1) (<= 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 2147483648)) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)) (= ~head~0.offset 0) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| |timeShift_getWaterLevel_#res#1|) (= 1 ~systemActive~0) (= |timeShift_getWaterLevel_~retValue_acc~9#1| |timeShift_getWaterLevel_#res#1|) (<= 0 ~methaneLevelCritical~0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1|) (= ~head~0.base 0) (= |#NULL.offset| 0) (<= 0 |#StackHeapBarrier|) (= |timeShift_getWaterLevel_~retValue_acc~9#1| ~waterLevel~0) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~2#1|))' at error location [2021-11-23 01:57:49,240 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 01:57:49,240 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 01:57:49,241 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 13, 13] total 38 [2021-11-23 01:57:49,241 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1531410851] [2021-11-23 01:57:49,241 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 01:57:49,242 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2021-11-23 01:57:49,242 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:57:49,242 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2021-11-23 01:57:49,243 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=563, Invalid=5289, Unknown=0, NotChecked=0, Total=5852 [2021-11-23 01:57:49,244 INFO L87 Difference]: Start difference. First operand 4804 states and 5789 transitions. Second operand has 38 states, 35 states have (on average 4.885714285714286) internal successors, (171), 36 states have internal predecessors, (171), 18 states have call successors, (39), 11 states have call predecessors, (39), 17 states have return successors, (43), 19 states have call predecessors, (43), 18 states have call successors, (43) [2021-11-23 01:57:50,643 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:57:50,643 INFO L93 Difference]: Finished difference Result 6579 states and 8004 transitions. [2021-11-23 01:57:50,644 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2021-11-23 01:57:50,644 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 35 states have (on average 4.885714285714286) internal successors, (171), 36 states have internal predecessors, (171), 18 states have call successors, (39), 11 states have call predecessors, (39), 17 states have return successors, (43), 19 states have call predecessors, (43), 18 states have call successors, (43) Word has length 132 [2021-11-23 01:57:50,645 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:57:50,646 INFO L225 Difference]: With dead ends: 6579 [2021-11-23 01:57:50,647 INFO L226 Difference]: Without dead ends: 0 [2021-11-23 01:57:50,664 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 444 GetRequests, 343 SyntacticMatches, 8 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4196 ImplicationChecksByTransitivity, 6.0s TimeCoverageRelationStatistics Valid=990, Invalid=7940, Unknown=0, NotChecked=0, Total=8930 [2021-11-23 01:57:50,665 INFO L933 BasicCegarLoop]: 61 mSDtfsCounter, 546 mSDsluCounter, 456 mSDsCounter, 0 mSdLazyCounter, 862 mSolverCounterSat, 329 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 548 SdHoareTripleChecker+Valid, 409 SdHoareTripleChecker+Invalid, 1191 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 329 IncrementalHoareTripleChecker+Valid, 862 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-23 01:57:50,665 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [548 Valid, 409 Invalid, 1191 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [329 Valid, 862 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-23 01:57:50,666 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-23 01:57:50,666 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-23 01:57:50,666 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 01:57:50,667 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-23 01:57:50,668 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 132 [2021-11-23 01:57:50,668 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:57:50,668 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-23 01:57:50,668 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 35 states have (on average 4.885714285714286) internal successors, (171), 36 states have internal predecessors, (171), 18 states have call successors, (39), 11 states have call predecessors, (39), 17 states have return successors, (43), 19 states have call predecessors, (43), 18 states have call successors, (43) [2021-11-23 01:57:50,669 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-23 01:57:50,669 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-23 01:57:50,671 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-23 01:57:50,707 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2021-11-23 01:57:50,886 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2021-11-23 01:57:50,887 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-23 01:58:15,253 WARN L227 SmtUtils]: Spent 16.23s on a formula simplification. DAG size of input: 631 DAG size of output: 550 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2021-11-23 01:58:58,157 WARN L227 SmtUtils]: Spent 16.82s on a formula simplification. DAG size of input: 450 DAG size of output: 446 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2021-11-23 01:59:25,148 WARN L227 SmtUtils]: Spent 18.63s on a formula simplification. DAG size of input: 634 DAG size of output: 537 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2021-11-23 02:00:39,674 WARN L227 SmtUtils]: Spent 1.24m on a formula simplification. DAG size of input: 811 DAG size of output: 677 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2021-11-23 02:01:00,033 WARN L227 SmtUtils]: Spent 20.26s on a formula simplification. DAG size of input: 539 DAG size of output: 529 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2021-11-23 02:01:28,435 WARN L227 SmtUtils]: Spent 27.37s on a formula simplification. DAG size of input: 717 DAG size of output: 587 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2021-11-23 02:01:40,236 WARN L227 SmtUtils]: Spent 11.80s on a formula simplification. DAG size of input: 641 DAG size of output: 606 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2021-11-23 02:02:03,271 WARN L227 SmtUtils]: Spent 5.66s on a formula simplification. DAG size of input: 958 DAG size of output: 46 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2021-11-23 02:02:08,790 WARN L227 SmtUtils]: Spent 5.17s on a formula simplification. DAG size of input: 958 DAG size of output: 104 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2021-11-23 02:02:59,591 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 406 413) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= 0 ~systemActive~0)) (.cse8 (= 2 ~waterLevel~0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (= ~waterLevel~0 1))) (.cse0 (not .cse8)) (.cse1 (= |old(~pumpRunning~0)| 0)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse3 (and .cse6 (not (= ~pumpRunning~0 0)) .cse8 (not .cse4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse1 .cse2 .cse4) (or .cse5 .cse6 .cse1 .cse7 .cse4) (or .cse0 .cse1 .cse7 .cse3 .cse4)))) [2021-11-23 02:02:59,591 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 406 413) no Hoare annotation was computed. [2021-11-23 02:02:59,591 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 296 302) no Hoare annotation was computed. [2021-11-23 02:02:59,591 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 296 302) the Hoare annotation is: true [2021-11-23 02:02:59,592 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 924 935) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 1)) (.cse4 (not (= |old(~methaneLevelCritical~0)| 1))) (.cse6 (not (= ~waterLevel~0 1))) (.cse5 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse7 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse1 (not (<= 2 ~waterLevel~0))) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 (= ~methaneLevelCritical~0 0) (not (= 2 ~waterLevel~0)) (= 0 ~systemActive~0)) (or .cse6 .cse0 .cse2 .cse4) (or .cse6 .cse5 .cse0 .cse7) (or .cse5 .cse0 .cse7 .cse1 .cse3))) [2021-11-23 02:02:59,592 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 924 935) no Hoare annotation was computed. [2021-11-23 02:02:59,592 INFO L854 garLoopResultBuilder]: At program point L283-1(lines 283 289) the Hoare annotation is: (let ((.cse14 (= 0 ~systemActive~0))) (let ((.cse15 (= |old(~pumpRunning~0)| 0)) (.cse8 (not .cse14)) (.cse16 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= ~pumpRunning~0 0)) (.cse11 (= ~waterLevel~0 1))) (let ((.cse5 (not (= |old(~waterLevel~0)| 1))) (.cse7 (and .cse9 .cse11)) (.cse1 (and .cse9 .cse16)) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse12 (and (= 2 ~waterLevel~0) .cse15 .cse16 .cse8)) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse13 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not .cse15)) (.cse10 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse6 .cse7) (or .cse0 .cse5 .cse7 .cse2) (or .cse0 .cse1 .cse6 .cse3 .cse8 .cse4) (or (and .cse9 .cse10 .cse11) .cse12 .cse2 .cse13 .cse14) (or .cse12 .cse6 .cse13 .cse14 (and .cse0 .cse9 .cse10 .cse11)) (or (not (<= 0 ~head~0.base)) (not (<= 0 |#NULL.offset|)) (not (<= ~head~0.base 0)) (not (= 1 ~systemActive~0)) (not (= ~head~0.offset 0)) (not (<= ~methaneLevelCritical~0 0)) (not (<= |#NULL.offset| 0)) (not (<= 0 ~methaneLevelCritical~0)) (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) .cse3 (and (<= ~pumpRunning~0 1) (<= 0 ~pumpRunning~0)) (not (= ~cleanupTimeShifts~0 4)) .cse4))))) [2021-11-23 02:02:59,593 INFO L854 garLoopResultBuilder]: At program point L370(line 370) the Hoare annotation is: (let ((.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~waterLevel~0)| 2))) (.cse6 (= 0 ~systemActive~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse2 .cse3) (or .cse1 .cse5 .cse6) (or .cse0 .cse7 .cse4) (or .cse4 .cse5 .cse6 (and (not (= ~pumpRunning~0 0)) (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0) (= ~waterLevel~0 1))) (or .cse0 .cse7 .cse1))) [2021-11-23 02:02:59,593 INFO L854 garLoopResultBuilder]: At program point L366(line 366) the Hoare annotation is: (let ((.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~waterLevel~0)| 2))) (.cse6 (= 0 ~systemActive~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse2 .cse3) (or .cse4 .cse5 .cse6) (or .cse0 .cse7 .cse4) (or .cse1 .cse5 .cse6 (and (not (= ~pumpRunning~0 0)) (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0) (= ~waterLevel~0 1))) (or .cse0 .cse7 .cse1))) [2021-11-23 02:02:59,593 INFO L854 garLoopResultBuilder]: At program point L362(line 362) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0))) (let ((.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse8 (and (not (= ~pumpRunning~0 0)) (= ~waterLevel~0 1) (not .cse7)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 0 ~head~0.base)) (not (<= 0 |#NULL.offset|)) (not (<= ~head~0.base 0)) (not (= 1 ~systemActive~0)) (not (= ~head~0.offset 0)) (not (<= ~methaneLevelCritical~0 0)) (not (<= |#NULL.offset| 0)) (not (<= 0 ~methaneLevelCritical~0)) (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) .cse2 (not (<= 0 |old(~pumpRunning~0)|)) (not (= ~cleanupTimeShifts~0 4)) .cse3) (or .cse0 .cse5 .cse4) (or .cse1 .cse6 .cse7 .cse8) (or .cse0 .cse5 .cse1) (or .cse4 .cse6 .cse7 .cse8)))) [2021-11-23 02:02:59,593 INFO L858 garLoopResultBuilder]: For program point L362-1(line 362) no Hoare annotation was computed. [2021-11-23 02:02:59,594 INFO L854 garLoopResultBuilder]: At program point L375(line 375) the Hoare annotation is: (let ((.cse10 (= 0 ~systemActive~0))) (let ((.cse12 (= ~pumpRunning~0 0)) (.cse11 (= |old(~pumpRunning~0)| 0)) (.cse6 (not .cse10))) (let ((.cse8 (and .cse12 (= 2 ~waterLevel~0) .cse11 (= |old(~waterLevel~0)| ~waterLevel~0) .cse6)) (.cse9 (not (= |old(~waterLevel~0)| 2))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (and .cse12 (= ~waterLevel~0 1) .cse6)) (.cse1 (not .cse11)) (.cse2 (not (= |old(~waterLevel~0)| 1))) (.cse4 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse6 .cse7) (or .cse3 .cse8 .cse9 .cse10) (or .cse8 .cse4 .cse9 .cse10) (or .cse1 .cse3 .cse5 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse4))))) [2021-11-23 02:02:59,594 INFO L854 garLoopResultBuilder]: At program point L375-1(lines 356 380) the Hoare annotation is: (let ((.cse13 (= 0 ~systemActive~0))) (let ((.cse8 (= ~pumpRunning~0 0)) (.cse10 (= ~waterLevel~0 1)) (.cse14 (= 2 ~waterLevel~0)) (.cse15 (= |old(~pumpRunning~0)| 0)) (.cse16 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (not .cse13))) (let ((.cse11 (and .cse14 .cse15 .cse16 .cse6)) (.cse9 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (and .cse8 .cse10 .cse6)) (.cse2 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not .cse15)) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse12 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse6 .cse7) (or (and .cse8 .cse9 .cse10) .cse11 .cse4 .cse12 .cse13) (or .cse11 .cse3 .cse12 .cse13 (and .cse1 .cse8 .cse9 .cse10)) (or .cse1 .cse3 .cse5 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse4) (or .cse1 (and .cse8 .cse14 .cse15 .cse16 .cse6) .cse4 .cse12 .cse13) (or (not (<= 0 ~head~0.base)) (not (<= 0 |#NULL.offset|)) (not (<= ~head~0.base 0)) (not (= 1 ~systemActive~0)) (not (= ~head~0.offset 0)) (not (<= ~methaneLevelCritical~0 0)) (not (<= |#NULL.offset| 0)) (not (<= 0 ~methaneLevelCritical~0)) (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) .cse5 (and (<= ~pumpRunning~0 1) (<= 0 ~pumpRunning~0)) (not (= ~cleanupTimeShifts~0 4)) .cse7))))) [2021-11-23 02:02:59,594 INFO L858 garLoopResultBuilder]: For program point L276-1(lines 275 294) no Hoare annotation was computed. [2021-11-23 02:02:59,595 INFO L858 garLoopResultBuilder]: For program point L177(lines 177 183) no Hoare annotation was computed. [2021-11-23 02:02:59,595 INFO L854 garLoopResultBuilder]: At program point L173(lines 173 186) the Hoare annotation is: (let ((.cse6 (= |old(~pumpRunning~0)| 0)) (.cse11 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| ~waterLevel~0)) (.cse4 (= ~waterLevel~0 1))) (let ((.cse2 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse10 (not (= |old(~waterLevel~0)| 2))) (.cse5 (= 2 ~waterLevel~0)) (.cse7 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)) (.cse13 (not (= |old(~waterLevel~0)| 1))) (.cse14 (and .cse1 .cse3 .cse4)) (.cse15 (not (<= 0 ~head~0.base))) (.cse16 (not (<= ~head~0.base 0))) (.cse17 (not (= 1 ~systemActive~0))) (.cse22 (= |timeShift_getWaterLevel_~retValue_acc~9#1| |timeShift_getWaterLevel_#res#1|)) (.cse23 (= |timeShift_getWaterLevel_~retValue_acc~9#1| ~waterLevel~0)) (.cse18 (not (= ~head~0.offset 0))) (.cse19 (not (= |#NULL.base| 0))) (.cse20 (not (<= 0 |#StackHeapBarrier|))) (.cse24 (not (= ~cleanupTimeShifts~0 4))) (.cse9 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not .cse11)) (.cse0 (not .cse6)) (.cse12 (not (= ~methaneLevelCritical~0 1))) (.cse21 (not (<= |old(~waterLevel~0)| 2))) (.cse26 (and .cse1 .cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse25 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse7 .cse3 .cse8) .cse9 .cse10 .cse11) (or (and .cse1 .cse2 .cse3 .cse4) .cse12 .cse10 .cse11 (and .cse5 .cse6 .cse7 .cse8)) (or .cse0 .cse13 .cse9 .cse14) (or .cse15 .cse0 (not (= |#NULL.offset| 0)) .cse16 .cse17 .cse18 .cse19 .cse12 .cse20 .cse21 (and .cse22 .cse23) .cse24 .cse25) (or .cse0 .cse13 .cse12 .cse14) (or .cse15 (not (<= 0 |#NULL.offset|)) .cse16 .cse17 (and .cse22 (or .cse1 (= ~pumpRunning~0 1)) .cse23) .cse18 (not (<= ~methaneLevelCritical~0 0)) (not (<= |#NULL.offset| 0)) (not (<= 0 ~methaneLevelCritical~0)) .cse19 .cse20 .cse4 .cse21 .cse24 .cse25) (or .cse0 .cse9 .cse21 .cse8 .cse26 .cse25) (or .cse0 .cse12 .cse21 .cse26 .cse25)))) [2021-11-23 02:02:59,596 INFO L854 garLoopResultBuilder]: At program point L173-1(lines 165 189) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0)) (.cse8 (= 0 ~systemActive~0))) (let ((.cse4 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| ~waterLevel~0)) (.cse13 (= ~pumpRunning~0 0)) (.cse28 (= ~methaneLevelCritical~0 0)) (.cse25 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse26 (= ~waterLevel~0 1)) (.cse5 (not .cse8)) (.cse21 (not .cse2))) (let ((.cse0 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| 1) .cse13 .cse28 .cse25 .cse26 .cse5 (or .cse21 (<= |old(~waterLevel~0)| ~waterLevel~0)))) (.cse7 (not (= |old(~waterLevel~0)| 2))) (.cse1 (= 2 ~waterLevel~0)) (.cse3 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)) (.cse9 (not (<= 0 ~head~0.base))) (.cse10 (not (<= ~head~0.base 0))) (.cse11 (not (= 1 ~systemActive~0))) (.cse15 (not (= ~head~0.offset 0))) (.cse16 (not (= |#NULL.base| 0))) (.cse17 (not (<= 0 |#StackHeapBarrier|))) (.cse12 (= |timeShift_getWaterLevel_~retValue_acc~9#1| |timeShift_getWaterLevel_#res#1|)) (.cse14 (= |timeShift_getWaterLevel_~retValue_acc~9#1| ~waterLevel~0)) (.cse19 (not (= ~cleanupTimeShifts~0 4))) (.cse22 (not (= |old(~waterLevel~0)| 1))) (.cse23 (and .cse13 .cse4 .cse26)) (.cse6 (not .cse28)) (.cse24 (not (= ~methaneLevelCritical~0 1))) (.cse18 (not (<= |old(~waterLevel~0)| 2))) (.cse27 (and .cse13 .cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse20 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (and .cse1 .cse2 .cse3 .cse4 .cse5) .cse6 .cse7 .cse8) (or .cse9 (not (<= 0 |#NULL.offset|)) .cse10 .cse0 .cse11 (and .cse12 (or .cse13 (= ~pumpRunning~0 1)) .cse14) .cse15 (not (<= ~methaneLevelCritical~0 0)) (not (<= |#NULL.offset| 0)) (not (<= 0 ~methaneLevelCritical~0)) .cse16 .cse17 .cse18 .cse19 .cse20) (or .cse21 .cse22 .cse6 .cse23) (or .cse24 (and .cse13 .cse25 .cse4 .cse26 .cse5) .cse7 .cse8 (and .cse1 .cse2 .cse3 .cse5)) (or .cse9 .cse21 (not (= |#NULL.offset| 0)) .cse10 .cse11 .cse15 .cse16 .cse24 .cse17 .cse18 (and .cse12 .cse14) .cse19 .cse20) (or .cse21 .cse22 .cse24 .cse23) (or .cse21 .cse6 .cse18 .cse5 .cse27 .cse20) (or .cse21 .cse24 .cse18 .cse27 .cse20))))) [2021-11-23 02:02:59,596 INFO L858 garLoopResultBuilder]: For program point L364(lines 364 372) no Hoare annotation was computed. [2021-11-23 02:02:59,596 INFO L858 garLoopResultBuilder]: For program point L360(lines 360 377) no Hoare annotation was computed. [2021-11-23 02:02:59,596 INFO L854 garLoopResultBuilder]: At program point L158(line 158) the Hoare annotation is: (let ((.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not (= |old(~waterLevel~0)| 2))) (.cse6 (= 0 ~systemActive~0)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse2 .cse3) (or .cse4 .cse5 .cse6) (or .cse1 .cse5 .cse6) (or .cse0 .cse7 .cse4) (or .cse0 .cse7 .cse1))) [2021-11-23 02:02:59,597 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 272 295) the Hoare annotation is: (let ((.cse10 (= 0 ~systemActive~0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (= ~pumpRunning~0 0))) (let ((.cse5 (not (= |old(~waterLevel~0)| 1))) (.cse7 (and .cse12 (= ~waterLevel~0 1))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse12 .cse11)) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse8 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= 2 ~waterLevel~0) .cse11 (not .cse10))) (.cse9 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse6 .cse7) (or .cse0 .cse5 .cse7 .cse2) (or .cse8 .cse2 .cse9 .cse10) (or .cse0 .cse1 .cse6 .cse3 .cse4) (or .cse6 .cse8 .cse9 .cse10)))) [2021-11-23 02:02:59,597 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 272 295) no Hoare annotation was computed. [2021-11-23 02:02:59,597 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 158) no Hoare annotation was computed. [2021-11-23 02:02:59,597 INFO L861 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2021-11-23 02:02:59,597 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2021-11-23 02:02:59,597 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2021-11-23 02:02:59,598 INFO L861 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2021-11-23 02:02:59,598 INFO L861 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2021-11-23 02:02:59,598 INFO L858 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2021-11-23 02:02:59,598 INFO L861 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2021-11-23 02:02:59,598 INFO L858 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2021-11-23 02:02:59,598 INFO L858 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2021-11-23 02:02:59,599 INFO L854 garLoopResultBuilder]: At program point L225(line 225) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse4 (= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse5 (= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse6 (= ~methaneLevelCritical~0 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse1 .cse2 .cse3) (and .cse5 .cse1 .cse2 .cse3 (not (= 0 ~systemActive~0))) (and .cse0 .cse2 .cse6 .cse3 .cse4) (and .cse0 .cse5 .cse2 .cse6 .cse3))) [2021-11-23 02:02:59,599 INFO L854 garLoopResultBuilder]: At program point L250(lines 203 252) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse4 (= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse5 (= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse6 (= ~methaneLevelCritical~0 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse1 .cse2 .cse3) (and .cse5 .cse1 .cse2 .cse3 (not (= 0 ~systemActive~0))) (and .cse0 .cse2 .cse6 .cse3 .cse4) (and .cse0 .cse5 .cse2 .cse6 .cse3))) [2021-11-23 02:02:59,599 INFO L858 garLoopResultBuilder]: For program point L213(lines 213 219) no Hoare annotation was computed. [2021-11-23 02:02:59,599 INFO L858 garLoopResultBuilder]: For program point L213-1(lines 213 219) no Hoare annotation was computed. [2021-11-23 02:02:59,599 INFO L861 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2021-11-23 02:02:59,600 INFO L854 garLoopResultBuilder]: At program point L140(lines 140 147) the Hoare annotation is: (let ((.cse2 (select |#memory_int| 11)) (.cse8 (select |#memory_int| 8)) (.cse4 (select |#memory_int| 9)) (.cse10 (select |#memory_int| 28)) (.cse5 (select |#memory_int| 7)) (.cse1 (select |#memory_int| 6)) (.cse11 (select |#memory_int| 1)) (.cse9 (select |#memory_int| 25)) (.cse3 (select |#memory_int| 10)) (.cse7 (select |#memory_int| 5)) (.cse6 (select |#memory_int| 27)) (.cse0 (select |#memory_int| 26))) (and (= (select .cse0 3) 84) (= (select .cse1 2) 102) (= (select .cse2 1) 0) (= 1 (select |#valid| 5)) (= 32 (select .cse3 1)) (= (select |#length| 3) 12) (= (select .cse4 0) 79) (= (select |#valid| 15) 1) (= 112 (select .cse5 4)) (= (select .cse1 0) 79) (= 82 (select .cse0 1)) (= 3 (select |#length| 10)) (= ~pumpRunning~0 0) (= (select |#valid| 26) 1) (= 67 (select .cse0 0)) (= (select .cse5 1) 80) (= (select .cse6 2) 0) (= 9 (select |#length| 16)) (= (select |#length| 8) 3) (= (select |#length| 6) 4) (= (select |#length| 20) 25) (= (select .cse6 1) 75) (= (select |#valid| 9) 1) (= (select |#length| 4) 13) (= 117 (select .cse5 2)) (= (select .cse7 2) 0) (= 7 (select |#length| 7)) (= (select |#length| 28) 2) (= 110 (select .cse8 1)) (= (select .cse1 1) 102) (= (select |#length| 15) 30) (= (select |#valid| 11) 1) (= (select |#valid| 27) 1) (= ~methaneLevelCritical~0 0) (= 58 (select .cse5 5)) (= (select .cse8 0) 79) (= 44 (select .cse5 0)) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= 30 (select |#length| 12)) (= (select |#length| 24) 13) (= (select |#length| 27) 3) (= (select .cse2 0) 10) (= 2 (select |#length| 1)) (= (select .cse9 5) 58) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~13#1|) (= (select |#valid| 3) 1) (= (select |#valid| 7) 1) (= 5 (select |#length| 26)) (= 77 (select .cse9 1)) (= (select |#valid| 18) 1) (= (select |#valid| 22) 1) (= 3 (select |#length| 5)) (= 25 (select |#length| 23)) (= 2 (select |#length| 11)) (= 1 ~systemActive~0) (= (select .cse9 6) 0) (= (select |#valid| 24) 1) (= (select .cse0 4) 0) (= (select .cse4 3) 0) (= (select |#valid| 12) 1) (= (select |#length| 19) 9) (= (select |#valid| 28) 1) (= (select .cse10 1) 0) (= (select |#valid| 4) 1) (= (select .cse4 1) 102) (= 9 (select |#length| 13)) (= (select .cse8 2) 0) (= (select |#valid| 1) 1) (= (select .cse5 6) 0) (= (select .cse4 2) 102) (= (select |#valid| 20) 1) (= (select .cse7 0) 79) (= (select |#valid| 21) 1) (= (select |#length| 9) 4) (= (select |#length| 22) 9) (= (select |#valid| 14) 1) (= (select |#length| 21) 30) (= (select |#valid| 0) 0) (= (select |#valid| 25) 1) (= (select |#length| 17) 21) (= ~head~0.base 0) (= 101 (select .cse9 2)) (= (select |#valid| 2) 1) (= |#NULL.offset| 0) (= ~waterLevel~0 1) (= (select .cse3 2) 0) (= (select .cse9 0) 44) (= (select .cse11 0) 48) (= (select |#valid| 23) 1) (= 41 (select .cse10 0)) (= 116 (select .cse9 3)) (= 7 (select |#length| 25)) (= (select |#valid| 19) 1) (= 109 (select .cse5 3)) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_valid_product_~retValue_acc~13#1|) (= (select .cse1 3) 0) (= (select |#valid| 16) 1) (= (select |#valid| 6) 1) (= 30 (select |#length| 18)) (= (select .cse11 1) 0) (= 104 (select .cse9 4)) (= (select .cse3 0) 41) (= (select |#valid| 17) 1) (= (select |#valid| 10) 1) (= (select .cse7 1) 110) (= (select .cse6 0) 79) (= (select |#valid| 8) 1) (= (select |#valid| 13) 1) (= (select .cse0 2) 73) (< 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0) (= 21 (select |#length| 14)))) [2021-11-23 02:02:59,601 INFO L861 garLoopResultBuilder]: At program point L140-2(lines 140 147) the Hoare annotation is: true [2021-11-23 02:02:59,601 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-23 02:02:59,601 INFO L858 garLoopResultBuilder]: For program point L512(lines 512 518) no Hoare annotation was computed. [2021-11-23 02:02:59,601 INFO L861 garLoopResultBuilder]: At program point L256(lines 193 260) the Hoare annotation is: true [2021-11-23 02:02:59,601 INFO L858 garLoopResultBuilder]: For program point L223(lines 223 229) no Hoare annotation was computed. [2021-11-23 02:02:59,602 INFO L854 garLoopResultBuilder]: At program point L512-1(lines 512 518) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse4 (= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse5 (= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse6 (= ~methaneLevelCritical~0 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse1 .cse2 .cse3) (and .cse0 .cse2 .cse6 .cse3 .cse4) (and .cse0 .cse5 .cse2 .cse6 .cse3))) [2021-11-23 02:02:59,602 INFO L858 garLoopResultBuilder]: For program point L223-1(lines 223 229) no Hoare annotation was computed. [2021-11-23 02:02:59,602 INFO L854 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= ~waterLevel~0 1))) (let ((.cse4 (and .cse0 .cse2 .cse3 .cse6)) (.cse1 (= 2 ~waterLevel~0)) (.cse5 (= ~methaneLevelCritical~0 0))) (or (and (or (and .cse0 .cse1 .cse2 .cse3) .cse4) (= ~methaneLevelCritical~0 1)) (and .cse5 (let ((.cse7 (or .cse4 (and .cse0 .cse2 (<= 2 ~waterLevel~0) .cse3)))) (or (and .cse6 .cse7) (and .cse1 .cse7)))) (and .cse1 .cse5 .cse2 .cse3 (not (= 0 ~systemActive~0)))))) [2021-11-23 02:02:59,602 INFO L854 garLoopResultBuilder]: At program point L253(lines 202 254) the Hoare annotation is: false [2021-11-23 02:02:59,603 INFO L858 garLoopResultBuilder]: For program point L241(lines 241 247) no Hoare annotation was computed. [2021-11-23 02:02:59,603 INFO L854 garLoopResultBuilder]: At program point L241-2(lines 233 248) the Hoare annotation is: (let ((.cse6 (= ~methaneLevelCritical~0 0)) (.cse4 (not (= 0 ~systemActive~0))) (.cse7 (= ~waterLevel~0 1)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= ~methaneLevelCritical~0 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse3 .cse7) (and .cse5 .cse0 .cse6 .cse1 .cse3) (and .cse0 .cse6 .cse1 .cse3 .cse4) (and .cse5 .cse1 .cse2 .cse3 .cse7) (and .cse5 .cse0 .cse1 .cse2 .cse3))) [2021-11-23 02:02:59,603 INFO L858 garLoopResultBuilder]: For program point L204(lines 203 252) no Hoare annotation was computed. [2021-11-23 02:02:59,603 INFO L854 garLoopResultBuilder]: At program point L233(lines 233 248) the Hoare annotation is: (let ((.cse6 (= ~methaneLevelCritical~0 0)) (.cse4 (not (= 0 ~systemActive~0))) (.cse7 (= ~waterLevel~0 1)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= ~methaneLevelCritical~0 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse3 .cse7) (and .cse5 .cse0 .cse6 .cse1 .cse3) (and .cse0 .cse6 .cse1 .cse3 .cse4) (and .cse5 .cse1 .cse2 .cse3 .cse7) (and .cse5 .cse0 .cse1 .cse2 .cse3))) [2021-11-23 02:02:59,603 INFO L854 garLoopResultBuilder]: At program point L514(line 514) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (= ~methaneLevelCritical~0 0) .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 (= ~methaneLevelCritical~0 1) .cse3 .cse4))) [2021-11-23 02:02:59,604 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 304 328) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse8 (= |old(~pumpRunning~0)| 0)) (.cse4 (= 0 ~systemActive~0)) (.cse9 (= 2 ~waterLevel~0))) (let ((.cse1 (not .cse9)) (.cse3 (and .cse7 .cse9 .cse8 (not .cse4))) (.cse5 (not (= ~methaneLevelCritical~0 1))) (.cse6 (not (= ~waterLevel~0 1))) (.cse0 (not .cse8)) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse3 .cse4) (or .cse6 .cse0 .cse7 .cse5 .cse4) (or .cse6 .cse0 .cse7 .cse2 .cse4)))) [2021-11-23 02:02:59,604 INFO L854 garLoopResultBuilder]: At program point L318(line 318) the Hoare annotation is: (let ((.cse12 (not (= 2 ~waterLevel~0))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse15 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0))) (.cse14 (= 0 ~systemActive~0)) (.cse0 (not (= ~waterLevel~0 1))) (.cse1 (not (<= 0 ~head~0.base))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (let ((.cse16 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~10#1|))) (or (and .cse16 (= 0 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~10#1|) (<= 2 ~waterLevel~0)) (and .cse16 (= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~10#1|) (< ~waterLevel~0 2)))))) (.cse5 (not (<= ~head~0.base 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~head~0.offset 0))) (.cse9 (not (= |#NULL.base| 0))) (.cse13 (not (= ~methaneLevelCritical~0 1))) (.cse10 (not (<= 0 |#StackHeapBarrier|))) (.cse11 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (or .cse2 .cse12 .cse13 .cse14) (or .cse2 .cse12 .cse8 .cse14) (or .cse0 .cse2 .cse15 .cse8 .cse14) (or .cse0 .cse2 .cse15 .cse13 .cse14) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse9 .cse13 .cse10 .cse11))) [2021-11-23 02:02:59,604 INFO L858 garLoopResultBuilder]: For program point L312(lines 312 320) no Hoare annotation was computed. [2021-11-23 02:02:59,605 INFO L854 garLoopResultBuilder]: At program point L308(lines 308 325) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse8 (= |old(~pumpRunning~0)| 0)) (.cse4 (= 0 ~systemActive~0)) (.cse9 (= 2 ~waterLevel~0))) (let ((.cse1 (not .cse9)) (.cse3 (and .cse7 .cse9 .cse8 (not .cse4))) (.cse5 (not (= ~methaneLevelCritical~0 1))) (.cse6 (not (= ~waterLevel~0 1))) (.cse0 (not .cse8)) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse3 .cse4) (or .cse6 .cse0 .cse7 .cse5 .cse4) (or .cse6 .cse0 .cse7 .cse2 .cse4)))) [2021-11-23 02:02:59,605 INFO L854 garLoopResultBuilder]: At program point L323(line 323) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 2 ~waterLevel~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse1 .cse5 .cse2 .cse3) (or .cse1 .cse5 .cse4 .cse3))) [2021-11-23 02:02:59,605 INFO L858 garLoopResultBuilder]: For program point L323-1(lines 304 328) no Hoare annotation was computed. [2021-11-23 02:02:59,605 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 304 328) no Hoare annotation was computed. [2021-11-23 02:02:59,605 INFO L854 garLoopResultBuilder]: At program point L394(line 394) the Hoare annotation is: (let ((.cse18 (= 2 ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0)) (.cse19 (= |old(~pumpRunning~0)| 0))) (let ((.cse4 (not (<= 0 ~head~0.base))) (.cse5 (not (= |#NULL.offset| 0))) (.cse6 (not (<= ~head~0.base 0))) (.cse7 (and (= 0 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~10#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|))) (.cse8 (not (= 1 ~systemActive~0))) (.cse9 (not (= ~head~0.offset 0))) (.cse10 (not (<= 2 ~waterLevel~0))) (.cse11 (not (<= ~waterLevel~0 2))) (.cse12 (not (= |#NULL.base| 0))) (.cse13 (not (<= 0 |#StackHeapBarrier|))) (.cse14 (not (= ~cleanupTimeShifts~0 4))) (.cse0 (not (= ~waterLevel~0 1))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not .cse19)) (.cse16 (and (= ~pumpRunning~0 0) .cse18 (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 1) .cse19 (not .cse3))) (.cse17 (not .cse18)) (.cse15 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= |old(~pumpRunning~0)| 0)) .cse10 (not (<= ~methaneLevelCritical~0 0)) .cse11 (not (<= 0 ~methaneLevelCritical~0)) .cse12 .cse13 (not (<= 0 |old(~pumpRunning~0)|)) .cse14) (or .cse4 .cse1 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse2 .cse13 .cse14) (or .cse0 .cse1 .cse15 .cse3) (or .cse1 .cse16 .cse17 .cse2 .cse3) (or .cse1 .cse16 .cse17 .cse15 .cse3)))) [2021-11-23 02:02:59,606 INFO L854 garLoopResultBuilder]: At program point L394-1(line 394) the Hoare annotation is: (let ((.cse4 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 1))) (.cse6 (not (= ~waterLevel~0 1))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= 2 ~waterLevel~0))) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse5 (= 0 ~systemActive~0)) (.cse9 (not (<= 0 ~head~0.base))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (<= ~head~0.base 0))) (.cse12 (not (= 1 ~systemActive~0))) (.cse14 (<= 0 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~10#1|)) (.cse15 (<= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~3#1| 1)) (.cse16 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~3#1|)) (.cse17 (<= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~10#1| 0)) (.cse18 (<= 0 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1|)) (.cse19 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|)) (.cse20 (<= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 1)) (.cse21 (<= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 1)) (.cse22 (<= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse23 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (.cse24 (<= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0)) (.cse25 (<= 0 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)) (.cse13 (not (= ~head~0.offset 0))) (.cse1 (not (<= 2 ~waterLevel~0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse26 (not (= |#NULL.base| 0))) (.cse27 (not (<= 0 |#StackHeapBarrier|))) (.cse28 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse7 .cse5) (or .cse0 .cse8 .cse4 .cse7 .cse5) (or .cse9 .cse0 .cse10 .cse11 .cse12 .cse13 .cse1 (and .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25) .cse3 .cse26 .cse7 .cse27 .cse28) (or .cse6 .cse0 .cse2 .cse5) (or .cse0 .cse8 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_#t~ret14#1|) .cse7 .cse5) (or .cse9 .cse10 .cse11 .cse12 (and .cse14 (<= |processEnvironment__wrappee__highWaterSensor_activatePump_#t~ret14#1| 0) .cse15 .cse16 .cse17 (<= 0 |processEnvironment__wrappee__highWaterSensor_activatePump_#t~ret14#1|) .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25) .cse13 (not (<= |old(~pumpRunning~0)| 0)) .cse1 (not (<= ~methaneLevelCritical~0 0)) .cse3 (not (<= 0 ~methaneLevelCritical~0)) .cse26 .cse27 (not (<= 0 |old(~pumpRunning~0)|)) .cse28))) [2021-11-23 02:02:59,606 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 912 923) no Hoare annotation was computed. [2021-11-23 02:02:59,606 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 912 923) the Hoare annotation is: (let ((.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse8 (not (= ~pumpRunning~0 0))) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse7 (= 0 ~systemActive~0))) (let ((.cse0 (let ((.cse9 (not .cse7))) (and (or .cse8 .cse6 .cse9) (or .cse8 .cse3 .cse9)))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (and (or .cse8 .cse6 .cse7) (or .cse8 .cse3 .cse7))) (.cse1 (not (= ~methaneLevelCritical~0 1))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5 (= ~waterLevel~0 1)) (or .cse0 .cse4 .cse2) (or .cse4 .cse6 .cse2 .cse7) (or .cse5 .cse1 .cse2)))) [2021-11-23 02:02:59,607 INFO L854 garLoopResultBuilder]: At program point L349(line 349) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse8 (= |old(~pumpRunning~0)| 0)) (.cse4 (= 0 ~systemActive~0)) (.cse9 (= 2 ~waterLevel~0))) (let ((.cse1 (not .cse9)) (.cse3 (and .cse7 .cse9 .cse8 (not .cse4))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= ~waterLevel~0 1))) (.cse0 (not .cse8)) (.cse5 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse3 .cse4) (or .cse6 .cse2 .cse4 (and .cse7 .cse8)) (or .cse6 .cse0 .cse7 .cse5 .cse4)))) [2021-11-23 02:02:59,607 INFO L858 garLoopResultBuilder]: For program point L349-1(lines 330 354) no Hoare annotation was computed. [2021-11-23 02:02:59,607 INFO L854 garLoopResultBuilder]: At program point L344(line 344) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 2 ~waterLevel~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse2) (or .cse3 .cse5 .cse4 .cse2) (or .cse3 .cse5 .cse1 .cse2))) [2021-11-23 02:02:59,607 INFO L854 garLoopResultBuilder]: At program point L340(line 340) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 2 ~waterLevel~0))) (.cse0 (not (= ~waterLevel~0 1))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse1 .cse5 .cse2 .cse3) (or .cse1 .cse5 .cse4 .cse3) (or .cse0 .cse4 .cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~4#1|))))) [2021-11-23 02:02:59,608 INFO L858 garLoopResultBuilder]: For program point L338(lines 338 346) no Hoare annotation was computed. [2021-11-23 02:02:59,608 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 330 354) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse8 (= |old(~pumpRunning~0)| 0)) (.cse4 (= 0 ~systemActive~0)) (.cse9 (= 2 ~waterLevel~0))) (let ((.cse1 (not .cse9)) (.cse3 (and .cse7 .cse9 .cse8 (not .cse4))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= ~waterLevel~0 1))) (.cse0 (not .cse8)) (.cse5 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse3 .cse4) (or .cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse4) (or .cse6 .cse0 .cse7 .cse5 .cse4)))) [2021-11-23 02:02:59,608 INFO L854 garLoopResultBuilder]: At program point L334(lines 334 351) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse8 (= |old(~pumpRunning~0)| 0)) (.cse4 (= 0 ~systemActive~0)) (.cse9 (= 2 ~waterLevel~0))) (let ((.cse1 (not .cse9)) (.cse3 (and .cse7 .cse9 .cse8 (not .cse4))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= ~waterLevel~0 1))) (.cse0 (not .cse8)) (.cse5 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse3 .cse4) (or .cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse4) (or .cse6 .cse0 .cse7 .cse5 .cse4)))) [2021-11-23 02:02:59,608 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 330 354) no Hoare annotation was computed. [2021-11-23 02:02:59,608 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 414 424) the Hoare annotation is: true [2021-11-23 02:02:59,609 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 414 424) no Hoare annotation was computed. [2021-11-23 02:02:59,612 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:02:59,614 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-23 02:02:59,669 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 02:02:59 BoogieIcfgContainer [2021-11-23 02:02:59,670 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-23 02:02:59,670 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-23 02:02:59,670 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-23 02:02:59,672 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-23 02:02:59,672 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:54:28" (3/4) ... [2021-11-23 02:02:59,675 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-23 02:02:59,680 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-11-23 02:02:59,680 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-23 02:02:59,681 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-23 02:02:59,681 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-23 02:02:59,681 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-23 02:02:59,681 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-11-23 02:02:59,681 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-23 02:02:59,682 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-11-23 02:02:59,682 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-11-23 02:02:59,691 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 81 nodes and edges [2021-11-23 02:02:59,692 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 27 nodes and edges [2021-11-23 02:02:59,693 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2021-11-23 02:02:59,693 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-23 02:02:59,694 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-23 02:02:59,695 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-23 02:02:59,696 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-23 02:02:59,718 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((unknown-#memory_int-unknown[26][3] == 84 && unknown-#memory_int-unknown[6][2] == 102) && unknown-#memory_int-unknown[11][1] == 0) && 1 == \valid[5]) && 32 == unknown-#memory_int-unknown[10][1]) && unknown-#length-unknown[3] == 12) && unknown-#memory_int-unknown[9][0] == 79) && \valid[15] == 1) && 112 == unknown-#memory_int-unknown[7][4]) && unknown-#memory_int-unknown[6][0] == 79) && 82 == unknown-#memory_int-unknown[26][1]) && 3 == unknown-#length-unknown[10]) && pumpRunning == 0) && \valid[26] == 1) && 67 == unknown-#memory_int-unknown[26][0]) && unknown-#memory_int-unknown[7][1] == 80) && unknown-#memory_int-unknown[27][2] == 0) && 9 == unknown-#length-unknown[16]) && unknown-#length-unknown[8] == 3) && unknown-#length-unknown[6] == 4) && unknown-#length-unknown[20] == 25) && unknown-#memory_int-unknown[27][1] == 75) && \valid[9] == 1) && unknown-#length-unknown[4] == 13) && 117 == unknown-#memory_int-unknown[7][2]) && unknown-#memory_int-unknown[5][2] == 0) && 7 == unknown-#length-unknown[7]) && unknown-#length-unknown[28] == 2) && 110 == unknown-#memory_int-unknown[8][1]) && unknown-#memory_int-unknown[6][1] == 102) && unknown-#length-unknown[15] == 30) && \valid[11] == 1) && \valid[27] == 1) && methaneLevelCritical == 0) && 58 == unknown-#memory_int-unknown[7][5]) && unknown-#memory_int-unknown[8][0] == 79) && 44 == unknown-#memory_int-unknown[7][0]) && 31 == unknown-#length-unknown[2]) && head == 0) && tmp == 1) && 30 == unknown-#length-unknown[12]) && unknown-#length-unknown[24] == 13) && unknown-#length-unknown[27] == 3) && unknown-#memory_int-unknown[11][0] == 10) && 2 == unknown-#length-unknown[1]) && unknown-#memory_int-unknown[25][5] == 58) && 1 == retValue_acc) && \valid[3] == 1) && \valid[7] == 1) && 5 == unknown-#length-unknown[26]) && 77 == unknown-#memory_int-unknown[25][1]) && \valid[18] == 1) && \valid[22] == 1) && 3 == unknown-#length-unknown[5]) && 25 == unknown-#length-unknown[23]) && 2 == unknown-#length-unknown[11]) && 1 == systemActive) && unknown-#memory_int-unknown[25][6] == 0) && \valid[24] == 1) && unknown-#memory_int-unknown[26][4] == 0) && unknown-#memory_int-unknown[9][3] == 0) && \valid[12] == 1) && unknown-#length-unknown[19] == 9) && \valid[28] == 1) && unknown-#memory_int-unknown[28][1] == 0) && \valid[4] == 1) && unknown-#memory_int-unknown[9][1] == 102) && 9 == unknown-#length-unknown[13]) && unknown-#memory_int-unknown[8][2] == 0) && \valid[1] == 1) && unknown-#memory_int-unknown[7][6] == 0) && unknown-#memory_int-unknown[9][2] == 102) && \valid[20] == 1) && unknown-#memory_int-unknown[5][0] == 79) && \valid[21] == 1) && unknown-#length-unknown[9] == 4) && unknown-#length-unknown[22] == 9) && \valid[14] == 1) && unknown-#length-unknown[21] == 30) && \valid[0] == 0) && \valid[25] == 1) && unknown-#length-unknown[17] == 21) && head == 0) && 101 == unknown-#memory_int-unknown[25][2]) && \valid[2] == 1) && #NULL == 0) && waterLevel == 1) && unknown-#memory_int-unknown[10][2] == 0) && unknown-#memory_int-unknown[25][0] == 44) && unknown-#memory_int-unknown[1][0] == 48) && \valid[23] == 1) && 41 == unknown-#memory_int-unknown[28][0]) && 116 == unknown-#memory_int-unknown[25][3]) && 7 == unknown-#length-unknown[25]) && \valid[19] == 1) && 109 == unknown-#memory_int-unknown[7][3]) && \result == retValue_acc) && unknown-#memory_int-unknown[6][3] == 0) && \valid[16] == 1) && \valid[6] == 1) && 30 == unknown-#length-unknown[18]) && unknown-#memory_int-unknown[1][1] == 0) && 104 == unknown-#memory_int-unknown[25][4]) && unknown-#memory_int-unknown[10][0] == 41) && \valid[17] == 1) && \valid[10] == 1) && unknown-#memory_int-unknown[5][1] == 110) && unknown-#memory_int-unknown[27][0] == 79) && \valid[8] == 1) && \valid[13] == 1) && unknown-#memory_int-unknown[26][2] == 73) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0) && 21 == unknown-#length-unknown[14] [2021-11-23 02:02:59,719 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(methaneLevelCritical == 1))) && ((((((pumpRunning == \old(pumpRunning) && 2 == waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(methaneLevelCritical == 0) || (((pumpRunning == \old(pumpRunning) && 2 == waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) == 2)) || 0 == systemActive) [2021-11-23 02:02:59,720 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(methaneLevelCritical == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) || (((2 == waterLevel && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((((2 == waterLevel && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == 1))) && (((((((((((((!(0 <= head) || !(0 <= #NULL)) || !(head <= 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical <= 0)) || !(#NULL <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || (pumpRunning <= 1 && 0 <= pumpRunning)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel))) [2021-11-23 02:02:59,720 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) || (((2 == waterLevel && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((((2 == waterLevel && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 1))) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && 2 == waterLevel) && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((((((((((!(0 <= head) || !(0 <= #NULL)) || !(head <= 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical <= 0)) || !(#NULL <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || (pumpRunning <= 1 && 0 <= pumpRunning)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel))) [2021-11-23 02:02:59,721 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(2 == waterLevel)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && 2 == waterLevel) && \old(pumpRunning) == 0) && !(0 == systemActive))) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(2 == waterLevel)) || !(methaneLevelCritical == 1)) || (((pumpRunning == 0 && 2 == waterLevel) && \old(pumpRunning) == 0) && !(0 == systemActive))) || 0 == systemActive)) && (((!(waterLevel == 1) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(methaneLevelCritical == 1)) || 0 == systemActive) [2021-11-23 02:02:59,721 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(2 == waterLevel)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && 2 == waterLevel) && \old(pumpRunning) == 0) && !(0 == systemActive))) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(2 == waterLevel)) || !(methaneLevelCritical == 1)) || (((pumpRunning == 0 && 2 == waterLevel) && \old(pumpRunning) == 0) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-11-23 02:02:59,722 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && tmp == methaneLevelCritical) && tmp == waterLevel) && waterLevel == 1) || ((((2 == waterLevel && \old(pumpRunning) == 0) && 1 <= tmp) && tmp == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((((((pumpRunning == 0 && tmp == methaneLevelCritical) && tmp == waterLevel) && waterLevel == 1) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((2 == waterLevel && \old(pumpRunning) == 0) && 1 <= tmp) && !(0 == systemActive)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp == waterLevel) && waterLevel == 1))) && ((((((((((((!(0 <= head) || !(\old(pumpRunning) == 0)) || !(#NULL == 0)) || !(head <= 0)) || !(1 == systemActive)) || !(head == 0)) || !(#NULL == 0)) || !(methaneLevelCritical == 1)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || (retValue_acc == \result && retValue_acc == waterLevel)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 1)) || ((pumpRunning == 0 && tmp == waterLevel) && waterLevel == 1))) && ((((((((((((((!(0 <= head) || !(0 <= #NULL)) || !(head <= 0)) || !(1 == systemActive)) || ((retValue_acc == \result && (pumpRunning == 0 || pumpRunning == 1)) && retValue_acc == waterLevel)) || !(head == 0)) || !(methaneLevelCritical <= 0)) || !(#NULL <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || waterLevel == 1) || !(\old(waterLevel) <= 2)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || ((pumpRunning == 0 && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == 0 && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) [2021-11-23 02:02:59,723 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((tmp == 1 && pumpRunning == 0) && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive)) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel)) || ((((2 == waterLevel && \old(pumpRunning) == 0) && 1 <= tmp) && tmp == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && ((((((((((((((!(0 <= head) || !(0 <= #NULL)) || !(head <= 0)) || ((((((tmp == 1 && pumpRunning == 0) && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive)) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(1 == systemActive)) || ((retValue_acc == \result && (pumpRunning == 0 || pumpRunning == 1)) && retValue_acc == waterLevel)) || !(head == 0)) || !(methaneLevelCritical <= 0)) || !(#NULL <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp == waterLevel) && waterLevel == 1))) && ((((!(methaneLevelCritical == 1) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && tmp == waterLevel) && waterLevel == 1) && !(0 == systemActive))) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((2 == waterLevel && \old(pumpRunning) == 0) && 1 <= tmp) && !(0 == systemActive)))) && ((((((((((((!(0 <= head) || !(\old(pumpRunning) == 0)) || !(#NULL == 0)) || !(head <= 0)) || !(1 == systemActive)) || !(head == 0)) || !(#NULL == 0)) || !(methaneLevelCritical == 1)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || (retValue_acc == \result && retValue_acc == waterLevel)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 1)) || ((pumpRunning == 0 && tmp == waterLevel) && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || ((pumpRunning == 0 && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == 0 && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) [2021-11-23 02:02:59,723 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && tmp == 1)) || 0 == systemActive) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(2 == waterLevel)) || (pumpRunning == 0 && tmp == 1)) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && ((((((((((((!(0 <= head) || !(\old(pumpRunning) == 0)) || !(#NULL == 0)) || !(head <= 0)) || !(1 == systemActive)) || !(head == 0)) || !(2 <= waterLevel)) || (((((((((((0 <= retValue_acc && retValue_acc <= 1) && 1 <= retValue_acc) && retValue_acc <= 0) && 0 <= tmp) && 1 <= tmp___0) && \result <= 1) && tmp___0 <= 1) && \result <= 0) && 1 <= \result) && tmp <= 0) && 0 <= \result)) || !(waterLevel <= 2)) || !(#NULL == 0)) || !(methaneLevelCritical == 1)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(cleanupTimeShifts == 4))) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(2 == waterLevel)) || methaneLevelCritical == aux-isMethaneAlarm()-aux) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && ((((((((((((((!(0 <= head) || !(#NULL == 0)) || !(head <= 0)) || !(1 == systemActive)) || (((((((((((((0 <= retValue_acc && aux-isMethaneAlarm()-aux <= 0) && retValue_acc <= 1) && 1 <= retValue_acc) && retValue_acc <= 0) && 0 <= aux-isMethaneAlarm()-aux) && 0 <= tmp) && 1 <= tmp___0) && \result <= 1) && tmp___0 <= 1) && \result <= 0) && 1 <= \result) && tmp <= 0) && 0 <= \result)) || !(head == 0)) || !(\old(pumpRunning) <= 0)) || !(2 <= waterLevel)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(pumpRunning))) || !(cleanupTimeShifts == 4)) [2021-11-23 02:02:59,724 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((!(methaneLevelCritical == 0) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((!(methaneLevelCritical == 1) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 1)) [2021-11-23 02:02:59,764 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/witness.graphml [2021-11-23 02:02:59,764 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-23 02:02:59,765 INFO L158 Benchmark]: Toolchain (without parser) took 513120.33ms. Allocated memory was 111.1MB in the beginning and 1.5GB in the end (delta: 1.4GB). Free memory was 68.7MB in the beginning and 790.7MB in the end (delta: -722.0MB). Peak memory consumption was 698.4MB. Max. memory is 16.1GB. [2021-11-23 02:02:59,765 INFO L158 Benchmark]: CDTParser took 0.28ms. Allocated memory is still 111.1MB. Free memory is still 86.3MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-23 02:02:59,766 INFO L158 Benchmark]: CACSL2BoogieTranslator took 548.96ms. Allocated memory is still 111.1MB. Free memory was 68.4MB in the beginning and 76.6MB in the end (delta: -8.2MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-11-23 02:02:59,766 INFO L158 Benchmark]: Boogie Procedure Inliner took 71.06ms. Allocated memory is still 111.1MB. Free memory was 76.6MB in the beginning and 73.8MB in the end (delta: 2.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-23 02:02:59,766 INFO L158 Benchmark]: Boogie Preprocessor took 65.73ms. Allocated memory is still 111.1MB. Free memory was 73.8MB in the beginning and 71.9MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-23 02:02:59,767 INFO L158 Benchmark]: RCFGBuilder took 742.04ms. Allocated memory is still 111.1MB. Free memory was 71.9MB in the beginning and 48.9MB in the end (delta: 23.0MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. [2021-11-23 02:02:59,767 INFO L158 Benchmark]: TraceAbstraction took 511588.33ms. Allocated memory was 111.1MB in the beginning and 1.5GB in the end (delta: 1.4GB). Free memory was 48.6MB in the beginning and 798.0MB in the end (delta: -749.4MB). Peak memory consumption was 940.3MB. Max. memory is 16.1GB. [2021-11-23 02:02:59,767 INFO L158 Benchmark]: Witness Printer took 94.09ms. Allocated memory is still 1.5GB. Free memory was 798.0MB in the beginning and 790.7MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-11-23 02:02:59,769 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.28ms. Allocated memory is still 111.1MB. Free memory is still 86.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 548.96ms. Allocated memory is still 111.1MB. Free memory was 68.4MB in the beginning and 76.6MB in the end (delta: -8.2MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 71.06ms. Allocated memory is still 111.1MB. Free memory was 76.6MB in the beginning and 73.8MB in the end (delta: 2.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 65.73ms. Allocated memory is still 111.1MB. Free memory was 73.8MB in the beginning and 71.9MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 742.04ms. Allocated memory is still 111.1MB. Free memory was 71.9MB in the beginning and 48.9MB in the end (delta: 23.0MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. * TraceAbstraction took 511588.33ms. Allocated memory was 111.1MB in the beginning and 1.5GB in the end (delta: 1.4GB). Free memory was 48.6MB in the beginning and 798.0MB in the end (delta: -749.4MB). Peak memory consumption was 940.3MB. Max. memory is 16.1GB. * Witness Printer took 94.09ms. Allocated memory is still 1.5GB. Free memory was 798.0MB in the beginning and 790.7MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 158]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 73 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 511.5s, OverallIterations: 17, TraceHistogramMax: 4, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 91.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 308.7s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 6456 SdHoareTripleChecker+Valid, 14.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 6396 mSDsluCounter, 8075 SdHoareTripleChecker+Invalid, 11.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 7783 mSDsCounter, 4197 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 17208 IncrementalHoareTripleChecker+Invalid, 21405 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 4197 mSolverCounterUnsat, 1519 mSDtfsCounter, 17208 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 3031 GetRequests, 2101 SyntacticMatches, 95 SemanticMatches, 835 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 40454 ImplicationChecksByTransitivity, 137.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=4804occurred in iteration=16, InterpolantAutomatonStates: 478, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 2.6s AutomataMinimizationTime, 17 MinimizatonAttempts, 5051 StatesRemovedByMinimization, 14 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 7449 PreInvPairs, 8175 NumberOfFragments, 4940 HoareAnnotationTreeSize, 7449 FomulaSimplifications, 604944 FormulaSimplificationTreeSizeReduction, 229.3s HoareSimplificationTime, 43 FomulaSimplificationsInter, 5599077 FormulaSimplificationTreeSizeReductionInter, 78.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 1.0s SatisfiabilityAnalysisTime, 9.8s InterpolantComputationTime, 1998 NumberOfCodeBlocks, 1964 NumberOfCodeBlocksAsserted, 28 NumberOfCheckSat, 2753 ConstructedInterpolants, 0 QuantifiedInterpolants, 9107 SizeOfPredicates, 97 NumberOfNonLiveVariables, 5113 ConjunctsInSsa, 279 ConjunctsInUnsatCore, 36 InterpolantComputations, 9 PerfectInterpolantSequences, 1469/1956 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 19.2s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 23, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 193, DAG_INTERPRETER_EARLY_EXITS: 5, TOOLS_POST_APPLICATIONS: 258, TOOLS_POST_TIME: 4.7s, TOOLS_POST_CALL_APPLICATIONS: 120, TOOLS_POST_CALL_TIME: 7.6s, TOOLS_POST_RETURN_APPLICATIONS: 100, TOOLS_POST_RETURN_TIME: 4.6s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 478, TOOLS_QUANTIFIERELIM_TIME: 16.8s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.8s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 607, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 104, DOMAIN_JOIN_TIME: 1.7s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 4, DOMAIN_WIDEN_TIME: 0.1s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 8, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 193, DOMAIN_ISBOTTOM_TIME: 0.3s, LOOP_SUMMARIZER_APPLICATIONS: 4, LOOP_SUMMARIZER_CACHE_MISSES: 4, LOOP_SUMMARIZER_OVERALL_TIME: 8.3s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 8.3s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 8, CALL_SUMMARIZER_APPLICATIONS: 100, CALL_SUMMARIZER_CACHE_MISSES: 20, CALL_SUMMARIZER_OVERALL_TIME: 0.7s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.7s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 2018, DAG_COMPRESSION_RETAINED_NODES: 511, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 202]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 140]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 173]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && tmp == methaneLevelCritical) && tmp == waterLevel) && waterLevel == 1) || ((((2 == waterLevel && \old(pumpRunning) == 0) && 1 <= tmp) && tmp == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((((((pumpRunning == 0 && tmp == methaneLevelCritical) && tmp == waterLevel) && waterLevel == 1) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((2 == waterLevel && \old(pumpRunning) == 0) && 1 <= tmp) && !(0 == systemActive)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp == waterLevel) && waterLevel == 1))) && ((((((((((((!(0 <= head) || !(\old(pumpRunning) == 0)) || !(#NULL == 0)) || !(head <= 0)) || !(1 == systemActive)) || !(head == 0)) || !(#NULL == 0)) || !(methaneLevelCritical == 1)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || (retValue_acc == \result && retValue_acc == waterLevel)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 1)) || ((pumpRunning == 0 && tmp == waterLevel) && waterLevel == 1))) && ((((((((((((((!(0 <= head) || !(0 <= #NULL)) || !(head <= 0)) || !(1 == systemActive)) || ((retValue_acc == \result && (pumpRunning == 0 || pumpRunning == 1)) && retValue_acc == waterLevel)) || !(head == 0)) || !(methaneLevelCritical <= 0)) || !(#NULL <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || waterLevel == 1) || !(\old(waterLevel) <= 2)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || ((pumpRunning == 0 && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == 0 && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 203]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && methaneLevelCritical == 0) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) || ((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && tmp == 1) && splverifierCounter == 0)) || ((((2 == waterLevel && methaneLevelCritical == 0) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((pumpRunning == 0 && tmp == 1) && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel == 1)) || ((((pumpRunning == 0 && 2 == waterLevel) && tmp == 1) && methaneLevelCritical == 1) && splverifierCounter == 0) - InvariantResult [Line: 140]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((unknown-#memory_int-unknown[26][3] == 84 && unknown-#memory_int-unknown[6][2] == 102) && unknown-#memory_int-unknown[11][1] == 0) && 1 == \valid[5]) && 32 == unknown-#memory_int-unknown[10][1]) && unknown-#length-unknown[3] == 12) && unknown-#memory_int-unknown[9][0] == 79) && \valid[15] == 1) && 112 == unknown-#memory_int-unknown[7][4]) && unknown-#memory_int-unknown[6][0] == 79) && 82 == unknown-#memory_int-unknown[26][1]) && 3 == unknown-#length-unknown[10]) && pumpRunning == 0) && \valid[26] == 1) && 67 == unknown-#memory_int-unknown[26][0]) && unknown-#memory_int-unknown[7][1] == 80) && unknown-#memory_int-unknown[27][2] == 0) && 9 == unknown-#length-unknown[16]) && unknown-#length-unknown[8] == 3) && unknown-#length-unknown[6] == 4) && unknown-#length-unknown[20] == 25) && unknown-#memory_int-unknown[27][1] == 75) && \valid[9] == 1) && unknown-#length-unknown[4] == 13) && 117 == unknown-#memory_int-unknown[7][2]) && unknown-#memory_int-unknown[5][2] == 0) && 7 == unknown-#length-unknown[7]) && unknown-#length-unknown[28] == 2) && 110 == unknown-#memory_int-unknown[8][1]) && unknown-#memory_int-unknown[6][1] == 102) && unknown-#length-unknown[15] == 30) && \valid[11] == 1) && \valid[27] == 1) && methaneLevelCritical == 0) && 58 == unknown-#memory_int-unknown[7][5]) && unknown-#memory_int-unknown[8][0] == 79) && 44 == unknown-#memory_int-unknown[7][0]) && 31 == unknown-#length-unknown[2]) && head == 0) && tmp == 1) && 30 == unknown-#length-unknown[12]) && unknown-#length-unknown[24] == 13) && unknown-#length-unknown[27] == 3) && unknown-#memory_int-unknown[11][0] == 10) && 2 == unknown-#length-unknown[1]) && unknown-#memory_int-unknown[25][5] == 58) && 1 == retValue_acc) && \valid[3] == 1) && \valid[7] == 1) && 5 == unknown-#length-unknown[26]) && 77 == unknown-#memory_int-unknown[25][1]) && \valid[18] == 1) && \valid[22] == 1) && 3 == unknown-#length-unknown[5]) && 25 == unknown-#length-unknown[23]) && 2 == unknown-#length-unknown[11]) && 1 == systemActive) && unknown-#memory_int-unknown[25][6] == 0) && \valid[24] == 1) && unknown-#memory_int-unknown[26][4] == 0) && unknown-#memory_int-unknown[9][3] == 0) && \valid[12] == 1) && unknown-#length-unknown[19] == 9) && \valid[28] == 1) && unknown-#memory_int-unknown[28][1] == 0) && \valid[4] == 1) && unknown-#memory_int-unknown[9][1] == 102) && 9 == unknown-#length-unknown[13]) && unknown-#memory_int-unknown[8][2] == 0) && \valid[1] == 1) && unknown-#memory_int-unknown[7][6] == 0) && unknown-#memory_int-unknown[9][2] == 102) && \valid[20] == 1) && unknown-#memory_int-unknown[5][0] == 79) && \valid[21] == 1) && unknown-#length-unknown[9] == 4) && unknown-#length-unknown[22] == 9) && \valid[14] == 1) && unknown-#length-unknown[21] == 30) && \valid[0] == 0) && \valid[25] == 1) && unknown-#length-unknown[17] == 21) && head == 0) && 101 == unknown-#memory_int-unknown[25][2]) && \valid[2] == 1) && #NULL == 0) && waterLevel == 1) && unknown-#memory_int-unknown[10][2] == 0) && unknown-#memory_int-unknown[25][0] == 44) && unknown-#memory_int-unknown[1][0] == 48) && \valid[23] == 1) && 41 == unknown-#memory_int-unknown[28][0]) && 116 == unknown-#memory_int-unknown[25][3]) && 7 == unknown-#length-unknown[25]) && \valid[19] == 1) && 109 == unknown-#memory_int-unknown[7][3]) && \result == retValue_acc) && unknown-#memory_int-unknown[6][3] == 0) && \valid[16] == 1) && \valid[6] == 1) && 30 == unknown-#length-unknown[18]) && unknown-#memory_int-unknown[1][1] == 0) && 104 == unknown-#memory_int-unknown[25][4]) && unknown-#memory_int-unknown[10][0] == 41) && \valid[17] == 1) && \valid[10] == 1) && unknown-#memory_int-unknown[5][1] == 110) && unknown-#memory_int-unknown[27][0] == 79) && \valid[8] == 1) && \valid[13] == 1) && unknown-#memory_int-unknown[26][2] == 73) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0) && 21 == unknown-#length-unknown[14] - InvariantResult [Line: 272]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(methaneLevelCritical == 1))) && ((((((pumpRunning == \old(pumpRunning) && 2 == waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(methaneLevelCritical == 0) || (((pumpRunning == \old(pumpRunning) && 2 == waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) == 2)) || 0 == systemActive) - InvariantResult [Line: 308]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(2 == waterLevel)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && 2 == waterLevel) && \old(pumpRunning) == 0) && !(0 == systemActive))) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(2 == waterLevel)) || !(methaneLevelCritical == 1)) || (((pumpRunning == 0 && 2 == waterLevel) && \old(pumpRunning) == 0) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 512]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && methaneLevelCritical == 0) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) || ((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && tmp == 1) && splverifierCounter == 0)) || ((((pumpRunning == 0 && tmp == 1) && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel == 1)) || ((((pumpRunning == 0 && 2 == waterLevel) && tmp == 1) && methaneLevelCritical == 1) && splverifierCounter == 0) - InvariantResult [Line: 414]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: ((((((((((((((((tmp == 1 && pumpRunning == 0) && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive)) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel)) || ((((2 == waterLevel && \old(pumpRunning) == 0) && 1 <= tmp) && tmp == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && ((((((((((((((!(0 <= head) || !(0 <= #NULL)) || !(head <= 0)) || ((((((tmp == 1 && pumpRunning == 0) && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive)) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(1 == systemActive)) || ((retValue_acc == \result && (pumpRunning == 0 || pumpRunning == 1)) && retValue_acc == waterLevel)) || !(head == 0)) || !(methaneLevelCritical <= 0)) || !(#NULL <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp == waterLevel) && waterLevel == 1))) && ((((!(methaneLevelCritical == 1) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && tmp == waterLevel) && waterLevel == 1) && !(0 == systemActive))) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((2 == waterLevel && \old(pumpRunning) == 0) && 1 <= tmp) && !(0 == systemActive)))) && ((((((((((((!(0 <= head) || !(\old(pumpRunning) == 0)) || !(#NULL == 0)) || !(head <= 0)) || !(1 == systemActive)) || !(head == 0)) || !(#NULL == 0)) || !(methaneLevelCritical == 1)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || (retValue_acc == \result && retValue_acc == waterLevel)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 1)) || ((pumpRunning == 0 && tmp == waterLevel) && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || ((pumpRunning == 0 && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == 0 && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 283]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(methaneLevelCritical == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) || (((2 == waterLevel && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((((2 == waterLevel && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == 1))) && (((((((((((((!(0 <= head) || !(0 <= #NULL)) || !(head <= 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical <= 0)) || !(#NULL <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || (pumpRunning <= 1 && 0 <= pumpRunning)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 334]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(2 == waterLevel)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && 2 == waterLevel) && \old(pumpRunning) == 0) && !(0 == systemActive))) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(2 == waterLevel)) || !(methaneLevelCritical == 1)) || (((pumpRunning == 0 && 2 == waterLevel) && \old(pumpRunning) == 0) && !(0 == systemActive))) || 0 == systemActive)) && (((!(waterLevel == 1) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(methaneLevelCritical == 1)) || 0 == systemActive) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: ((((((((2 == waterLevel && tmp == 1) && methaneLevelCritical == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((pumpRunning == 0 && methaneLevelCritical == 0) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1)) || ((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && tmp == 1) && splverifierCounter == 0)) || ((((2 == waterLevel && methaneLevelCritical == 0) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((pumpRunning == 0 && tmp == 1) && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel == 1)) || ((((pumpRunning == 0 && 2 == waterLevel) && tmp == 1) && methaneLevelCritical == 1) && splverifierCounter == 0) - InvariantResult [Line: 158]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((!(methaneLevelCritical == 0) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((!(methaneLevelCritical == 1) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 1)) - InvariantResult [Line: 394]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && tmp == 1)) || 0 == systemActive) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(2 == waterLevel)) || (pumpRunning == 0 && tmp == 1)) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && ((((((((((((!(0 <= head) || !(\old(pumpRunning) == 0)) || !(#NULL == 0)) || !(head <= 0)) || !(1 == systemActive)) || !(head == 0)) || !(2 <= waterLevel)) || (((((((((((0 <= retValue_acc && retValue_acc <= 1) && 1 <= retValue_acc) && retValue_acc <= 0) && 0 <= tmp) && 1 <= tmp___0) && \result <= 1) && tmp___0 <= 1) && \result <= 0) && 1 <= \result) && tmp <= 0) && 0 <= \result)) || !(waterLevel <= 2)) || !(#NULL == 0)) || !(methaneLevelCritical == 1)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(cleanupTimeShifts == 4))) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(2 == waterLevel)) || methaneLevelCritical == aux-isMethaneAlarm()-aux) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && ((((((((((((((!(0 <= head) || !(#NULL == 0)) || !(head <= 0)) || !(1 == systemActive)) || (((((((((((((0 <= retValue_acc && aux-isMethaneAlarm()-aux <= 0) && retValue_acc <= 1) && 1 <= retValue_acc) && retValue_acc <= 0) && 0 <= aux-isMethaneAlarm()-aux) && 0 <= tmp) && 1 <= tmp___0) && \result <= 1) && tmp___0 <= 1) && \result <= 0) && 1 <= \result) && tmp <= 0) && 0 <= \result)) || !(head == 0)) || !(\old(pumpRunning) <= 0)) || !(2 <= waterLevel)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(pumpRunning))) || !(cleanupTimeShifts == 4)) - InvariantResult [Line: 356]: Loop Invariant Derived loop invariant: (((((((((((pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) || (((2 == waterLevel && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((((2 == waterLevel && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 1))) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && 2 == waterLevel) && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((((((((((!(0 <= head) || !(0 <= #NULL)) || !(head <= 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical <= 0)) || !(#NULL <= 0)) || !(0 <= methaneLevelCritical)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || (pumpRunning <= 1 && 0 <= pumpRunning)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2021-11-23 02:02:59,851 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_edd04d7f-c488-43dc-9642-ab0fffa0e027/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE