./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aef121e0 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 603cfb64133b588a2e9c81e31ac984484d295feb0a468539180131e3ac5a47d6 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-aef121e [2021-11-23 03:36:03,923 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-23 03:36:03,928 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-23 03:36:04,001 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-23 03:36:04,002 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-23 03:36:04,004 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-23 03:36:04,007 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-23 03:36:04,017 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-23 03:36:04,021 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-23 03:36:04,030 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-23 03:36:04,032 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-23 03:36:04,034 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-23 03:36:04,035 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-23 03:36:04,039 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-23 03:36:04,044 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-23 03:36:04,052 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-23 03:36:04,055 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-23 03:36:04,056 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-23 03:36:04,061 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-23 03:36:04,071 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-23 03:36:04,073 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-23 03:36:04,076 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-23 03:36:04,080 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-23 03:36:04,082 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-23 03:36:04,089 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-23 03:36:04,090 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-23 03:36:04,090 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-23 03:36:04,093 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-23 03:36:04,094 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-23 03:36:04,096 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-23 03:36:04,097 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-23 03:36:04,098 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-23 03:36:04,101 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-23 03:36:04,103 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-23 03:36:04,105 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-23 03:36:04,105 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-23 03:36:04,106 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-23 03:36:04,107 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-23 03:36:04,107 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-23 03:36:04,108 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-23 03:36:04,109 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-23 03:36:04,111 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-32bit-Taipan_Default.epf [2021-11-23 03:36:04,178 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-23 03:36:04,179 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-23 03:36:04,180 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-23 03:36:04,180 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-23 03:36:04,182 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-23 03:36:04,182 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-23 03:36:04,182 INFO L138 SettingsManager]: * User list type=DISABLED [2021-11-23 03:36:04,183 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2021-11-23 03:36:04,183 INFO L138 SettingsManager]: * Explicit value domain=true [2021-11-23 03:36:04,183 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2021-11-23 03:36:04,184 INFO L138 SettingsManager]: * Octagon Domain=false [2021-11-23 03:36:04,185 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2021-11-23 03:36:04,185 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2021-11-23 03:36:04,185 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2021-11-23 03:36:04,186 INFO L138 SettingsManager]: * Interval Domain=false [2021-11-23 03:36:04,186 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2021-11-23 03:36:04,186 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2021-11-23 03:36:04,186 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2021-11-23 03:36:04,188 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-23 03:36:04,188 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-23 03:36:04,189 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-23 03:36:04,189 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-23 03:36:04,189 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-23 03:36:04,190 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-23 03:36:04,190 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-23 03:36:04,190 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-23 03:36:04,190 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-23 03:36:04,191 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-23 03:36:04,191 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-23 03:36:04,191 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-23 03:36:04,191 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-23 03:36:04,192 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-23 03:36:04,192 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 03:36:04,193 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-23 03:36:04,193 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-23 03:36:04,193 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-23 03:36:04,194 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2021-11-23 03:36:04,194 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-23 03:36:04,194 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-23 03:36:04,194 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-23 03:36:04,195 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-23 03:36:04,195 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 603cfb64133b588a2e9c81e31ac984484d295feb0a468539180131e3ac5a47d6 [2021-11-23 03:36:04,608 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-23 03:36:04,649 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-23 03:36:04,652 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-23 03:36:04,655 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-23 03:36:04,656 INFO L275 PluginConnector]: CDTParser initialized [2021-11-23 03:36:04,657 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/../../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c [2021-11-23 03:36:04,755 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/data/7c2549974/69ca56e9d938496b825002bdf3243c90/FLAG95937a4ce [2021-11-23 03:36:05,532 INFO L306 CDTParser]: Found 1 translation units. [2021-11-23 03:36:05,532 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c [2021-11-23 03:36:05,548 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/data/7c2549974/69ca56e9d938496b825002bdf3243c90/FLAG95937a4ce [2021-11-23 03:36:05,833 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/data/7c2549974/69ca56e9d938496b825002bdf3243c90 [2021-11-23 03:36:05,836 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-23 03:36:05,838 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-23 03:36:05,841 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-23 03:36:05,841 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-23 03:36:05,862 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-23 03:36:05,863 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:36:05" (1/1) ... [2021-11-23 03:36:05,865 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@49b0b300 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:36:05, skipping insertion in model container [2021-11-23 03:36:05,867 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:36:05" (1/1) ... [2021-11-23 03:36:05,876 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-23 03:36:05,962 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-23 03:36:06,312 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c[3064,3077] [2021-11-23 03:36:06,542 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 03:36:06,560 INFO L203 MainTranslator]: Completed pre-run [2021-11-23 03:36:06,607 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c[3064,3077] [2021-11-23 03:36:06,688 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 03:36:06,712 INFO L208 MainTranslator]: Completed translation [2021-11-23 03:36:06,713 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:36:06 WrapperNode [2021-11-23 03:36:06,713 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-23 03:36:06,714 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-23 03:36:06,715 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-23 03:36:06,715 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-23 03:36:06,725 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:36:06" (1/1) ... [2021-11-23 03:36:06,745 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:36:06" (1/1) ... [2021-11-23 03:36:06,781 INFO L137 Inliner]: procedures = 56, calls = 158, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 264 [2021-11-23 03:36:06,782 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-23 03:36:06,783 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-23 03:36:06,783 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-23 03:36:06,783 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-23 03:36:06,796 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:36:06" (1/1) ... [2021-11-23 03:36:06,798 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:36:06" (1/1) ... [2021-11-23 03:36:06,818 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:36:06" (1/1) ... [2021-11-23 03:36:06,819 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:36:06" (1/1) ... [2021-11-23 03:36:06,827 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:36:06" (1/1) ... [2021-11-23 03:36:06,849 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:36:06" (1/1) ... [2021-11-23 03:36:06,851 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:36:06" (1/1) ... [2021-11-23 03:36:06,855 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-23 03:36:06,871 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-23 03:36:06,871 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-23 03:36:06,871 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-23 03:36:06,873 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:36:06" (1/1) ... [2021-11-23 03:36:06,885 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 03:36:06,902 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:36:06,924 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-23 03:36:06,938 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-23 03:36:06,987 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-23 03:36:06,988 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-23 03:36:06,988 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-23 03:36:06,989 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-23 03:36:06,989 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-23 03:36:06,989 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-23 03:36:06,989 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-23 03:36:06,989 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-23 03:36:06,990 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-23 03:36:06,990 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-11-23 03:36:06,990 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-11-23 03:36:06,990 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-11-23 03:36:06,990 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-11-23 03:36:06,990 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-11-23 03:36:06,991 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-11-23 03:36:06,991 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-23 03:36:06,991 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-23 03:36:06,991 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-23 03:36:06,991 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-23 03:36:06,991 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-23 03:36:07,096 INFO L236 CfgBuilder]: Building ICFG [2021-11-23 03:36:07,099 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-23 03:36:07,721 INFO L277 CfgBuilder]: Performing block encoding [2021-11-23 03:36:07,864 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-23 03:36:07,864 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-23 03:36:07,868 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:36:07 BoogieIcfgContainer [2021-11-23 03:36:07,868 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-23 03:36:07,870 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-23 03:36:07,870 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-23 03:36:07,882 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-23 03:36:07,883 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 03:36:05" (1/3) ... [2021-11-23 03:36:07,884 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@47144348 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:36:07, skipping insertion in model container [2021-11-23 03:36:07,884 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:36:06" (2/3) ... [2021-11-23 03:36:07,884 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@47144348 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:36:07, skipping insertion in model container [2021-11-23 03:36:07,885 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:36:07" (3/3) ... [2021-11-23 03:36:07,887 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product45.cil.c [2021-11-23 03:36:07,894 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-23 03:36:07,894 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-23 03:36:07,988 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-23 03:36:08,002 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-23 03:36:08,002 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-23 03:36:08,054 INFO L276 IsEmpty]: Start isEmpty. Operand has 64 states, 40 states have (on average 1.4) internal successors, (56), 48 states have internal predecessors, (56), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2021-11-23 03:36:08,063 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2021-11-23 03:36:08,064 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:36:08,065 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:36:08,065 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:36:08,075 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:36:08,076 INFO L85 PathProgramCache]: Analyzing trace with hash -1911075339, now seen corresponding path program 1 times [2021-11-23 03:36:08,089 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:36:08,089 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [205961690] [2021-11-23 03:36:08,090 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:36:08,091 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:36:08,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:36:08,457 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 03:36:08,458 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:36:08,459 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [205961690] [2021-11-23 03:36:08,460 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [205961690] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:36:08,460 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:36:08,461 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-23 03:36:08,463 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [487947373] [2021-11-23 03:36:08,464 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:36:08,470 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-23 03:36:08,471 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:36:08,516 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-23 03:36:08,518 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-23 03:36:08,521 INFO L87 Difference]: Start difference. First operand has 64 states, 40 states have (on average 1.4) internal successors, (56), 48 states have internal predecessors, (56), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 03:36:08,631 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:36:08,632 INFO L93 Difference]: Finished difference Result 126 states and 169 transitions. [2021-11-23 03:36:08,633 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-23 03:36:08,635 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 21 [2021-11-23 03:36:08,636 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:36:08,648 INFO L225 Difference]: With dead ends: 126 [2021-11-23 03:36:08,649 INFO L226 Difference]: Without dead ends: 59 [2021-11-23 03:36:08,654 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-23 03:36:08,659 INFO L933 BasicCegarLoop]: 64 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 64 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:36:08,660 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 64 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 03:36:08,683 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2021-11-23 03:36:08,712 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 59. [2021-11-23 03:36:08,714 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 37 states have (on average 1.2972972972972974) internal successors, (48), 44 states have internal predecessors, (48), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2021-11-23 03:36:08,718 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 75 transitions. [2021-11-23 03:36:08,720 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 75 transitions. Word has length 21 [2021-11-23 03:36:08,720 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:36:08,721 INFO L470 AbstractCegarLoop]: Abstraction has 59 states and 75 transitions. [2021-11-23 03:36:08,721 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-23 03:36:08,722 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 75 transitions. [2021-11-23 03:36:08,725 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-11-23 03:36:08,726 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:36:08,726 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:36:08,727 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-23 03:36:08,727 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:36:08,728 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:36:08,729 INFO L85 PathProgramCache]: Analyzing trace with hash 1425674059, now seen corresponding path program 1 times [2021-11-23 03:36:08,729 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:36:08,730 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [736421119] [2021-11-23 03:36:08,730 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:36:08,730 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:36:08,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:36:08,855 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 03:36:08,856 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:36:08,857 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [736421119] [2021-11-23 03:36:08,857 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [736421119] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:36:08,857 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:36:08,858 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 03:36:08,860 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1637283245] [2021-11-23 03:36:08,860 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:36:08,862 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 03:36:08,863 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:36:08,865 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 03:36:08,866 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:36:08,870 INFO L87 Difference]: Start difference. First operand 59 states and 75 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-23 03:36:08,994 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:36:09,005 INFO L93 Difference]: Finished difference Result 116 states and 151 transitions. [2021-11-23 03:36:09,006 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 03:36:09,006 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 24 [2021-11-23 03:36:09,007 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:36:09,009 INFO L225 Difference]: With dead ends: 116 [2021-11-23 03:36:09,009 INFO L226 Difference]: Without dead ends: 59 [2021-11-23 03:36:09,010 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:36:09,012 INFO L933 BasicCegarLoop]: 58 mSDtfsCounter, 62 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 58 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:36:09,013 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [62 Valid, 58 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 03:36:09,015 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2021-11-23 03:36:09,027 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 59. [2021-11-23 03:36:09,028 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 37 states have (on average 1.2702702702702702) internal successors, (47), 44 states have internal predecessors, (47), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2021-11-23 03:36:09,031 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 74 transitions. [2021-11-23 03:36:09,031 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 74 transitions. Word has length 24 [2021-11-23 03:36:09,033 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:36:09,033 INFO L470 AbstractCegarLoop]: Abstraction has 59 states and 74 transitions. [2021-11-23 03:36:09,034 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-23 03:36:09,034 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 74 transitions. [2021-11-23 03:36:09,036 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2021-11-23 03:36:09,037 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:36:09,037 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:36:09,037 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-23 03:36:09,038 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:36:09,039 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:36:09,039 INFO L85 PathProgramCache]: Analyzing trace with hash 149706667, now seen corresponding path program 1 times [2021-11-23 03:36:09,039 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:36:09,040 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2146003978] [2021-11-23 03:36:09,040 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:36:09,040 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:36:09,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:36:09,152 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 03:36:09,152 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:36:09,153 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2146003978] [2021-11-23 03:36:09,153 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2146003978] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:36:09,153 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:36:09,153 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 03:36:09,154 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [207313717] [2021-11-23 03:36:09,154 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:36:09,155 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 03:36:09,155 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:36:09,156 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 03:36:09,156 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:36:09,156 INFO L87 Difference]: Start difference. First operand 59 states and 74 transitions. Second operand has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 3 states have internal predecessors, (23), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-23 03:36:09,338 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:36:09,338 INFO L93 Difference]: Finished difference Result 163 states and 215 transitions. [2021-11-23 03:36:09,339 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 03:36:09,339 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 3 states have internal predecessors, (23), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 31 [2021-11-23 03:36:09,340 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:36:09,343 INFO L225 Difference]: With dead ends: 163 [2021-11-23 03:36:09,343 INFO L226 Difference]: Without dead ends: 106 [2021-11-23 03:36:09,346 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:36:09,348 INFO L933 BasicCegarLoop]: 76 mSDtfsCounter, 53 mSDsluCounter, 60 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 128 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:36:09,349 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [53 Valid, 128 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 03:36:09,350 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 106 states. [2021-11-23 03:36:09,376 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 106 to 104. [2021-11-23 03:36:09,377 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 104 states, 67 states have (on average 1.2388059701492538) internal successors, (83), 74 states have internal predecessors, (83), 22 states have call successors, (22), 16 states have call predecessors, (22), 14 states have return successors, (28), 20 states have call predecessors, (28), 20 states have call successors, (28) [2021-11-23 03:36:09,381 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 104 states to 104 states and 133 transitions. [2021-11-23 03:36:09,381 INFO L78 Accepts]: Start accepts. Automaton has 104 states and 133 transitions. Word has length 31 [2021-11-23 03:36:09,381 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:36:09,382 INFO L470 AbstractCegarLoop]: Abstraction has 104 states and 133 transitions. [2021-11-23 03:36:09,382 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 3 states have internal predecessors, (23), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-23 03:36:09,382 INFO L276 IsEmpty]: Start isEmpty. Operand 104 states and 133 transitions. [2021-11-23 03:36:09,384 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-11-23 03:36:09,385 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:36:09,385 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:36:09,385 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-23 03:36:09,386 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:36:09,386 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:36:09,386 INFO L85 PathProgramCache]: Analyzing trace with hash -924075518, now seen corresponding path program 1 times [2021-11-23 03:36:09,387 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:36:09,387 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1754185563] [2021-11-23 03:36:09,387 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:36:09,387 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:36:09,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:36:09,443 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 03:36:09,443 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:36:09,443 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1754185563] [2021-11-23 03:36:09,444 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1754185563] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:36:09,444 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:36:09,444 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 03:36:09,444 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1628282379] [2021-11-23 03:36:09,444 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:36:09,445 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 03:36:09,445 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:36:09,446 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 03:36:09,446 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:36:09,446 INFO L87 Difference]: Start difference. First operand 104 states and 133 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-23 03:36:09,527 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:36:09,527 INFO L93 Difference]: Finished difference Result 164 states and 204 transitions. [2021-11-23 03:36:09,530 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 03:36:09,530 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 33 [2021-11-23 03:36:09,531 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:36:09,532 INFO L225 Difference]: With dead ends: 164 [2021-11-23 03:36:09,533 INFO L226 Difference]: Without dead ends: 88 [2021-11-23 03:36:09,535 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:36:09,537 INFO L933 BasicCegarLoop]: 49 mSDtfsCounter, 7 mSDsluCounter, 51 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 89 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:36:09,538 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [10 Valid, 89 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 03:36:09,539 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2021-11-23 03:36:09,555 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 88. [2021-11-23 03:36:09,556 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 57 states have (on average 1.2456140350877194) internal successors, (71), 64 states have internal predecessors, (71), 16 states have call successors, (16), 14 states have call predecessors, (16), 14 states have return successors, (20), 16 states have call predecessors, (20), 16 states have call successors, (20) [2021-11-23 03:36:09,558 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 107 transitions. [2021-11-23 03:36:09,559 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 107 transitions. Word has length 33 [2021-11-23 03:36:09,559 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:36:09,559 INFO L470 AbstractCegarLoop]: Abstraction has 88 states and 107 transitions. [2021-11-23 03:36:09,560 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-23 03:36:09,560 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 107 transitions. [2021-11-23 03:36:09,561 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2021-11-23 03:36:09,562 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:36:09,562 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:36:09,562 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-23 03:36:09,563 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:36:09,563 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:36:09,563 INFO L85 PathProgramCache]: Analyzing trace with hash -797057377, now seen corresponding path program 1 times [2021-11-23 03:36:09,564 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:36:09,564 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1275525188] [2021-11-23 03:36:09,564 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:36:09,564 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:36:09,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:36:09,739 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-11-23 03:36:09,740 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:36:09,740 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1275525188] [2021-11-23 03:36:09,741 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1275525188] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:36:09,741 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:36:09,741 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-23 03:36:09,741 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [255545731] [2021-11-23 03:36:09,742 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:36:09,742 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-23 03:36:09,743 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:36:09,743 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-23 03:36:09,743 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-23 03:36:09,744 INFO L87 Difference]: Start difference. First operand 88 states and 107 transitions. Second operand has 7 states, 6 states have (on average 4.333333333333333) internal successors, (26), 6 states have internal predecessors, (26), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-23 03:36:10,180 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:36:10,181 INFO L93 Difference]: Finished difference Result 202 states and 249 transitions. [2021-11-23 03:36:10,181 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-23 03:36:10,182 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 4.333333333333333) internal successors, (26), 6 states have internal predecessors, (26), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 35 [2021-11-23 03:36:10,192 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:36:10,195 INFO L225 Difference]: With dead ends: 202 [2021-11-23 03:36:10,199 INFO L226 Difference]: Without dead ends: 116 [2021-11-23 03:36:10,200 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-11-23 03:36:10,202 INFO L933 BasicCegarLoop]: 49 mSDtfsCounter, 63 mSDsluCounter, 214 mSDsCounter, 0 mSdLazyCounter, 232 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 225 SdHoareTripleChecker+Invalid, 269 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 232 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-23 03:36:10,203 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [70 Valid, 225 Invalid, 269 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 232 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-23 03:36:10,204 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 116 states. [2021-11-23 03:36:10,224 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 116 to 106. [2021-11-23 03:36:10,224 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 106 states, 70 states have (on average 1.2285714285714286) internal successors, (86), 77 states have internal predecessors, (86), 18 states have call successors, (18), 14 states have call predecessors, (18), 17 states have return successors, (25), 19 states have call predecessors, (25), 18 states have call successors, (25) [2021-11-23 03:36:10,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106 states to 106 states and 129 transitions. [2021-11-23 03:36:10,227 INFO L78 Accepts]: Start accepts. Automaton has 106 states and 129 transitions. Word has length 35 [2021-11-23 03:36:10,227 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:36:10,227 INFO L470 AbstractCegarLoop]: Abstraction has 106 states and 129 transitions. [2021-11-23 03:36:10,228 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 4.333333333333333) internal successors, (26), 6 states have internal predecessors, (26), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-23 03:36:10,228 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 129 transitions. [2021-11-23 03:36:10,229 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2021-11-23 03:36:10,230 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:36:10,230 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:36:10,230 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-23 03:36:10,230 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:36:10,231 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:36:10,231 INFO L85 PathProgramCache]: Analyzing trace with hash 2003657004, now seen corresponding path program 1 times [2021-11-23 03:36:10,231 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:36:10,232 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [736448923] [2021-11-23 03:36:10,232 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:36:10,232 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:36:10,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:36:10,504 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 03:36:10,504 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:36:10,504 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [736448923] [2021-11-23 03:36:10,505 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [736448923] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:36:10,505 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:36:10,505 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-23 03:36:10,505 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1081569787] [2021-11-23 03:36:10,505 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:36:10,507 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-23 03:36:10,508 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:36:10,508 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-23 03:36:10,509 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-11-23 03:36:10,510 INFO L87 Difference]: Start difference. First operand 106 states and 129 transitions. Second operand has 7 states, 7 states have (on average 3.7142857142857144) internal successors, (26), 7 states have internal predecessors, (26), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2021-11-23 03:36:10,813 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:36:10,814 INFO L93 Difference]: Finished difference Result 278 states and 340 transitions. [2021-11-23 03:36:10,814 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-23 03:36:10,815 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 3.7142857142857144) internal successors, (26), 7 states have internal predecessors, (26), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 36 [2021-11-23 03:36:10,815 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:36:10,818 INFO L225 Difference]: With dead ends: 278 [2021-11-23 03:36:10,818 INFO L226 Difference]: Without dead ends: 174 [2021-11-23 03:36:10,819 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2021-11-23 03:36:10,821 INFO L933 BasicCegarLoop]: 81 mSDtfsCounter, 78 mSDsluCounter, 261 mSDsCounter, 0 mSdLazyCounter, 208 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 301 SdHoareTripleChecker+Invalid, 218 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 208 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-23 03:36:10,822 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [79 Valid, 301 Invalid, 218 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 208 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-23 03:36:10,823 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 174 states. [2021-11-23 03:36:10,852 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 174 to 168. [2021-11-23 03:36:10,853 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 168 states, 109 states have (on average 1.201834862385321) internal successors, (131), 120 states have internal predecessors, (131), 31 states have call successors, (31), 26 states have call predecessors, (31), 27 states have return successors, (42), 29 states have call predecessors, (42), 31 states have call successors, (42) [2021-11-23 03:36:10,856 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 168 states to 168 states and 204 transitions. [2021-11-23 03:36:10,857 INFO L78 Accepts]: Start accepts. Automaton has 168 states and 204 transitions. Word has length 36 [2021-11-23 03:36:10,857 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:36:10,857 INFO L470 AbstractCegarLoop]: Abstraction has 168 states and 204 transitions. [2021-11-23 03:36:10,858 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 3.7142857142857144) internal successors, (26), 7 states have internal predecessors, (26), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2021-11-23 03:36:10,858 INFO L276 IsEmpty]: Start isEmpty. Operand 168 states and 204 transitions. [2021-11-23 03:36:10,860 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2021-11-23 03:36:10,860 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:36:10,861 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:36:10,861 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-23 03:36:10,861 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:36:10,862 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:36:10,862 INFO L85 PathProgramCache]: Analyzing trace with hash -1526016149, now seen corresponding path program 1 times [2021-11-23 03:36:10,862 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:36:10,862 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [344957388] [2021-11-23 03:36:10,863 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:36:10,863 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:36:10,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:36:11,048 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-23 03:36:11,048 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:36:11,048 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [344957388] [2021-11-23 03:36:11,049 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [344957388] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:36:11,049 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:36:11,049 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-23 03:36:11,049 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [582279025] [2021-11-23 03:36:11,049 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:36:11,051 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-23 03:36:11,051 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:36:11,052 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-23 03:36:11,052 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2021-11-23 03:36:11,053 INFO L87 Difference]: Start difference. First operand 168 states and 204 transitions. Second operand has 8 states, 7 states have (on average 3.857142857142857) internal successors, (27), 7 states have internal predecessors, (27), 5 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2021-11-23 03:36:11,653 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:36:11,653 INFO L93 Difference]: Finished difference Result 421 states and 531 transitions. [2021-11-23 03:36:11,654 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-11-23 03:36:11,655 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.857142857142857) internal successors, (27), 7 states have internal predecessors, (27), 5 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) Word has length 39 [2021-11-23 03:36:11,655 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:36:11,665 INFO L225 Difference]: With dead ends: 421 [2021-11-23 03:36:11,665 INFO L226 Difference]: Without dead ends: 303 [2021-11-23 03:36:11,666 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2021-11-23 03:36:11,670 INFO L933 BasicCegarLoop]: 73 mSDtfsCounter, 203 mSDsluCounter, 184 mSDsCounter, 0 mSdLazyCounter, 264 mSolverCounterSat, 99 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 209 SdHoareTripleChecker+Valid, 230 SdHoareTripleChecker+Invalid, 363 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 99 IncrementalHoareTripleChecker+Valid, 264 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-23 03:36:11,672 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [209 Valid, 230 Invalid, 363 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [99 Valid, 264 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-23 03:36:11,677 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 303 states. [2021-11-23 03:36:11,783 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 303 to 250. [2021-11-23 03:36:11,789 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 250 states, 166 states have (on average 1.2108433734939759) internal successors, (201), 182 states have internal predecessors, (201), 44 states have call successors, (44), 33 states have call predecessors, (44), 39 states have return successors, (61), 46 states have call predecessors, (61), 44 states have call successors, (61) [2021-11-23 03:36:11,796 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 250 states to 250 states and 306 transitions. [2021-11-23 03:36:11,799 INFO L78 Accepts]: Start accepts. Automaton has 250 states and 306 transitions. Word has length 39 [2021-11-23 03:36:11,800 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:36:11,800 INFO L470 AbstractCegarLoop]: Abstraction has 250 states and 306 transitions. [2021-11-23 03:36:11,800 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.857142857142857) internal successors, (27), 7 states have internal predecessors, (27), 5 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2021-11-23 03:36:11,801 INFO L276 IsEmpty]: Start isEmpty. Operand 250 states and 306 transitions. [2021-11-23 03:36:11,807 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2021-11-23 03:36:11,817 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:36:11,817 INFO L514 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:36:11,818 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-23 03:36:11,818 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:36:11,819 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:36:11,820 INFO L85 PathProgramCache]: Analyzing trace with hash 41164400, now seen corresponding path program 1 times [2021-11-23 03:36:11,821 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:36:11,829 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [23176040] [2021-11-23 03:36:11,829 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:36:11,830 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:36:11,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:36:11,989 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 15 proven. 1 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2021-11-23 03:36:11,989 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:36:11,990 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [23176040] [2021-11-23 03:36:11,990 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [23176040] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:36:11,990 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [953532116] [2021-11-23 03:36:11,991 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:36:11,991 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:36:11,992 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:36:11,994 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:36:11,998 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-23 03:36:12,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:36:12,145 INFO L263 TraceCheckSpWp]: Trace formula consists of 476 conjuncts, 22 conjunts are in the unsatisfiable core [2021-11-23 03:36:12,156 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:36:12,561 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 30 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 03:36:12,561 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 03:36:12,917 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 15 proven. 1 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2021-11-23 03:36:12,918 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [953532116] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 03:36:12,918 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [875025860] [2021-11-23 03:36:12,953 INFO L159 IcfgInterpreter]: Started Sifa with 40 locations of interest [2021-11-23 03:36:12,953 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 03:36:12,961 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 03:36:12,968 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 03:36:12,970 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 03:36:26,851 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 320 for LOIs [2021-11-23 03:36:26,952 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 52 for LOIs [2021-11-23 03:36:27,900 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 25 for LOIs [2021-11-23 03:36:27,905 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 42 for LOIs [2021-11-23 03:36:28,140 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 28 for LOIs [2021-11-23 03:36:28,145 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 03:36:44,595 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4077#(and (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (= |timeShift_getWaterLevel_~retValue_acc~1#1| ~waterLevel~0) (= ~head~0.offset 0) (<= |#NULL.offset| 0) (= 1 ~systemActive~0) (= |old(~pumpRunning~0)| 0) (= |timeShift_getWaterLevel_~retValue_acc~1#1| |timeShift_getWaterLevel_#res#1|) (<= ~methaneLevelCritical~0 0) (<= 0 ~head~0.base) (<= 0 ~methaneLevelCritical~0) (= |old(~waterLevel~0)| ~waterLevel~0) (<= 2 |timeShift_getWaterLevel_#res#1|) (<= ~head~0.base 0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| 2)) (<= 0 |#NULL.offset|) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| |timeShift_getWaterLevel_#res#1|) (= ~switchedOnBeforeTS~0 0) (<= 0 |#StackHeapBarrier|) (<= |timeShift_getWaterLevel_~retValue_acc~1#1| 2147483647) (= ~pumpRunning~0 1) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0) (= |old(~switchedOnBeforeTS~0)| 0))' at error location [2021-11-23 03:36:44,595 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 03:36:44,595 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 03:36:44,595 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 8 [2021-11-23 03:36:44,596 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [659032195] [2021-11-23 03:36:44,596 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 03:36:44,597 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-23 03:36:44,597 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:36:44,597 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-23 03:36:44,599 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=171, Invalid=1311, Unknown=0, NotChecked=0, Total=1482 [2021-11-23 03:36:44,599 INFO L87 Difference]: Start difference. First operand 250 states and 306 transitions. Second operand has 8 states, 8 states have (on average 6.75) internal successors, (54), 8 states have internal predecessors, (54), 3 states have call successors, (13), 3 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2021-11-23 03:36:45,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:36:45,175 INFO L93 Difference]: Finished difference Result 800 states and 1008 transitions. [2021-11-23 03:36:45,176 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-11-23 03:36:45,176 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.75) internal successors, (54), 8 states have internal predecessors, (54), 3 states have call successors, (13), 3 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) Word has length 68 [2021-11-23 03:36:45,177 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:36:45,182 INFO L225 Difference]: With dead ends: 800 [2021-11-23 03:36:45,182 INFO L226 Difference]: Without dead ends: 552 [2021-11-23 03:36:45,186 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 216 GetRequests, 167 SyntacticMatches, 7 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 658 ImplicationChecksByTransitivity, 16.7s TimeCoverageRelationStatistics Valid=212, Invalid=1680, Unknown=0, NotChecked=0, Total=1892 [2021-11-23 03:36:45,187 INFO L933 BasicCegarLoop]: 108 mSDtfsCounter, 174 mSDsluCounter, 362 mSDsCounter, 0 mSdLazyCounter, 303 mSolverCounterSat, 103 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 175 SdHoareTripleChecker+Valid, 401 SdHoareTripleChecker+Invalid, 406 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 103 IncrementalHoareTripleChecker+Valid, 303 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-23 03:36:45,188 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [175 Valid, 401 Invalid, 406 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [103 Valid, 303 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-23 03:36:45,189 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 552 states. [2021-11-23 03:36:45,231 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 552 to 410. [2021-11-23 03:36:45,233 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 410 states, 268 states have (on average 1.1828358208955223) internal successors, (317), 297 states have internal predecessors, (317), 70 states have call successors, (70), 59 states have call predecessors, (70), 71 states have return successors, (120), 71 states have call predecessors, (120), 70 states have call successors, (120) [2021-11-23 03:36:45,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 410 states to 410 states and 507 transitions. [2021-11-23 03:36:45,239 INFO L78 Accepts]: Start accepts. Automaton has 410 states and 507 transitions. Word has length 68 [2021-11-23 03:36:45,239 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:36:45,240 INFO L470 AbstractCegarLoop]: Abstraction has 410 states and 507 transitions. [2021-11-23 03:36:45,240 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.75) internal successors, (54), 8 states have internal predecessors, (54), 3 states have call successors, (13), 3 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2021-11-23 03:36:45,240 INFO L276 IsEmpty]: Start isEmpty. Operand 410 states and 507 transitions. [2021-11-23 03:36:45,244 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2021-11-23 03:36:45,244 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:36:45,245 INFO L514 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:36:45,290 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-23 03:36:45,460 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:36:45,460 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:36:45,461 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:36:45,461 INFO L85 PathProgramCache]: Analyzing trace with hash -223573989, now seen corresponding path program 1 times [2021-11-23 03:36:45,461 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:36:45,462 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1353741692] [2021-11-23 03:36:45,462 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:36:45,462 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:36:45,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:36:45,688 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 1 proven. 20 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2021-11-23 03:36:45,688 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:36:45,688 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1353741692] [2021-11-23 03:36:45,689 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1353741692] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:36:45,689 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1202265431] [2021-11-23 03:36:45,692 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:36:45,692 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:36:45,692 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:36:45,695 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:36:45,714 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-23 03:36:45,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:36:45,817 INFO L263 TraceCheckSpWp]: Trace formula consists of 465 conjuncts, 13 conjunts are in the unsatisfiable core [2021-11-23 03:36:45,822 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:36:45,970 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 16 proven. 1 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2021-11-23 03:36:45,971 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 03:36:46,159 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2021-11-23 03:36:46,160 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1202265431] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 03:36:46,160 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [291595685] [2021-11-23 03:36:46,169 INFO L159 IcfgInterpreter]: Started Sifa with 47 locations of interest [2021-11-23 03:36:46,169 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 03:36:46,170 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 03:36:46,171 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 03:36:46,171 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 03:36:56,500 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 321 for LOIs [2021-11-23 03:36:56,599 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 53 for LOIs [2021-11-23 03:36:57,570 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 26 for LOIs [2021-11-23 03:36:57,574 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 63 for LOIs [2021-11-23 03:36:58,233 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 30 for LOIs [2021-11-23 03:36:58,239 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 32 for LOIs [2021-11-23 03:36:58,242 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 03:37:10,907 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6392#(and (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 0)) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (= ~methaneLevelCritical~0 0) (= |timeShift_getWaterLevel_~retValue_acc~1#1| ~waterLevel~0) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (= ~head~0.offset 0) (<= |old(~switchedOnBeforeTS~0)| 2147483647) (<= |old(~pumpRunning~0)| 2147483647) (= 1 ~systemActive~0) (= |timeShift_getWaterLevel_~retValue_acc~1#1| |timeShift_getWaterLevel_#res#1|) (<= 0 (+ |old(~switchedOnBeforeTS~0)| 2147483648)) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 2147483648)) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 2147483647) (= ~head~0.base 0) (<= 0 (+ |timeShift_getWaterLevel_~retValue_acc~1#1| 2147483648)) (= |#NULL.offset| 0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| 2)) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| |timeShift_getWaterLevel_#res#1|) (= ~switchedOnBeforeTS~0 0) (<= 0 |#StackHeapBarrier|) (<= |timeShift_getWaterLevel_~retValue_acc~1#1| 2147483647) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2021-11-23 03:37:10,908 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 03:37:10,908 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 03:37:10,908 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 14 [2021-11-23 03:37:10,909 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1806749425] [2021-11-23 03:37:10,909 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 03:37:10,910 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2021-11-23 03:37:10,910 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:37:10,910 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2021-11-23 03:37:10,912 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=299, Invalid=2151, Unknown=0, NotChecked=0, Total=2450 [2021-11-23 03:37:10,912 INFO L87 Difference]: Start difference. First operand 410 states and 507 transitions. Second operand has 14 states, 12 states have (on average 5.916666666666667) internal successors, (71), 12 states have internal predecessors, (71), 5 states have call successors, (18), 3 states have call predecessors, (18), 6 states have return successors, (21), 7 states have call predecessors, (21), 5 states have call successors, (21) [2021-11-23 03:37:12,296 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:37:12,296 INFO L93 Difference]: Finished difference Result 781 states and 1002 transitions. [2021-11-23 03:37:12,297 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-11-23 03:37:12,297 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 12 states have (on average 5.916666666666667) internal successors, (71), 12 states have internal predecessors, (71), 5 states have call successors, (18), 3 states have call predecessors, (18), 6 states have return successors, (21), 7 states have call predecessors, (21), 5 states have call successors, (21) Word has length 71 [2021-11-23 03:37:12,299 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:37:12,303 INFO L225 Difference]: With dead ends: 781 [2021-11-23 03:37:12,304 INFO L226 Difference]: Without dead ends: 503 [2021-11-23 03:37:12,308 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 259 GetRequests, 187 SyntacticMatches, 1 SemanticMatches, 71 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1814 ImplicationChecksByTransitivity, 13.4s TimeCoverageRelationStatistics Valid=589, Invalid=4667, Unknown=0, NotChecked=0, Total=5256 [2021-11-23 03:37:12,312 INFO L933 BasicCegarLoop]: 83 mSDtfsCounter, 356 mSDsluCounter, 455 mSDsCounter, 0 mSdLazyCounter, 682 mSolverCounterSat, 226 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 361 SdHoareTripleChecker+Valid, 438 SdHoareTripleChecker+Invalid, 908 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 226 IncrementalHoareTripleChecker+Valid, 682 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-11-23 03:37:12,312 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [361 Valid, 438 Invalid, 908 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [226 Valid, 682 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-11-23 03:37:12,314 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 503 states. [2021-11-23 03:37:12,367 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 503 to 445. [2021-11-23 03:37:12,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 445 states, 291 states have (on average 1.1546391752577319) internal successors, (336), 321 states have internal predecessors, (336), 75 states have call successors, (75), 67 states have call predecessors, (75), 78 states have return successors, (118), 78 states have call predecessors, (118), 75 states have call successors, (118) [2021-11-23 03:37:12,373 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 445 states to 445 states and 529 transitions. [2021-11-23 03:37:12,375 INFO L78 Accepts]: Start accepts. Automaton has 445 states and 529 transitions. Word has length 71 [2021-11-23 03:37:12,377 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:37:12,378 INFO L470 AbstractCegarLoop]: Abstraction has 445 states and 529 transitions. [2021-11-23 03:37:12,378 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 12 states have (on average 5.916666666666667) internal successors, (71), 12 states have internal predecessors, (71), 5 states have call successors, (18), 3 states have call predecessors, (18), 6 states have return successors, (21), 7 states have call predecessors, (21), 5 states have call successors, (21) [2021-11-23 03:37:12,378 INFO L276 IsEmpty]: Start isEmpty. Operand 445 states and 529 transitions. [2021-11-23 03:37:12,382 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2021-11-23 03:37:12,383 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:37:12,383 INFO L514 BasicCegarLoop]: trace histogram [5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:37:12,431 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-23 03:37:12,610 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2021-11-23 03:37:12,610 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:37:12,611 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:37:12,611 INFO L85 PathProgramCache]: Analyzing trace with hash 610013678, now seen corresponding path program 1 times [2021-11-23 03:37:12,611 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:37:12,611 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2125226236] [2021-11-23 03:37:12,611 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:37:12,611 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:37:12,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:37:12,814 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 40 proven. 1 refuted. 0 times theorem prover too weak. 43 trivial. 0 not checked. [2021-11-23 03:37:12,814 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:37:12,815 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2125226236] [2021-11-23 03:37:12,815 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2125226236] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 03:37:12,815 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [815655922] [2021-11-23 03:37:12,815 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:37:12,815 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 03:37:12,816 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:37:12,817 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 03:37:12,846 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-11-23 03:37:12,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:37:12,966 INFO L263 TraceCheckSpWp]: Trace formula consists of 574 conjuncts, 30 conjunts are in the unsatisfiable core [2021-11-23 03:37:12,971 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 03:37:13,514 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 61 proven. 15 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-11-23 03:37:13,514 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 03:37:14,205 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 51 proven. 5 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2021-11-23 03:37:14,205 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [815655922] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-23 03:37:14,206 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [578105948] [2021-11-23 03:37:14,210 INFO L159 IcfgInterpreter]: Started Sifa with 43 locations of interest [2021-11-23 03:37:14,210 INFO L166 IcfgInterpreter]: Building call graph [2021-11-23 03:37:14,211 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2021-11-23 03:37:14,211 INFO L176 IcfgInterpreter]: Starting interpretation [2021-11-23 03:37:14,211 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2021-11-23 03:37:22,670 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 324 for LOIs [2021-11-23 03:37:22,757 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 36 for LOIs [2021-11-23 03:37:23,329 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 29 for LOIs [2021-11-23 03:37:23,333 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 26 for LOIs [2021-11-23 03:37:23,490 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 57 for LOIs [2021-11-23 03:37:23,513 INFO L180 IcfgInterpreter]: Interpretation finished [2021-11-23 03:37:34,201 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8950#(and (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|) (= ~methaneLevelCritical~0 0) (= |timeShift_getWaterLevel_~retValue_acc~1#1| ~waterLevel~0) (= ~head~0.offset 0) (<= |old(~switchedOnBeforeTS~0)| 2147483647) (= 1 ~systemActive~0) (= |old(~pumpRunning~0)| 0) (= |timeShift_getWaterLevel_~retValue_acc~1#1| |timeShift_getWaterLevel_#res#1|) (<= 2 |old(~waterLevel~0)|) (<= 0 (+ |old(~switchedOnBeforeTS~0)| 2147483648)) (<= 2 |timeShift_getWaterLevel_#res#1|) (= ~head~0.base 0) (= |#NULL.offset| 0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| 2)) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| |timeShift_getWaterLevel_#res#1|) (= ~switchedOnBeforeTS~0 0) (<= 0 |#StackHeapBarrier|) (<= |timeShift_getWaterLevel_~retValue_acc~1#1| 2147483647) (= ~pumpRunning~0 1) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2021-11-23 03:37:34,201 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2021-11-23 03:37:34,201 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-23 03:37:34,201 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 11, 11] total 24 [2021-11-23 03:37:34,202 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1368775495] [2021-11-23 03:37:34,202 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-23 03:37:34,203 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2021-11-23 03:37:34,203 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:37:34,203 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2021-11-23 03:37:34,204 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=355, Invalid=2837, Unknown=0, NotChecked=0, Total=3192 [2021-11-23 03:37:34,205 INFO L87 Difference]: Start difference. First operand 445 states and 529 transitions. Second operand has 24 states, 23 states have (on average 5.782608695652174) internal successors, (133), 23 states have internal predecessors, (133), 13 states have call successors, (30), 5 states have call predecessors, (30), 10 states have return successors, (29), 14 states have call predecessors, (29), 12 states have call successors, (29) [2021-11-23 03:37:40,090 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:37:40,091 INFO L93 Difference]: Finished difference Result 1563 states and 1921 transitions. [2021-11-23 03:37:40,091 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 88 states. [2021-11-23 03:37:40,092 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 23 states have (on average 5.782608695652174) internal successors, (133), 23 states have internal predecessors, (133), 13 states have call successors, (30), 5 states have call predecessors, (30), 10 states have return successors, (29), 14 states have call predecessors, (29), 12 states have call successors, (29) Word has length 97 [2021-11-23 03:37:40,092 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:37:40,093 INFO L225 Difference]: With dead ends: 1563 [2021-11-23 03:37:40,093 INFO L226 Difference]: Without dead ends: 0 [2021-11-23 03:37:40,108 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 440 GetRequests, 297 SyntacticMatches, 2 SemanticMatches, 141 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7368 ImplicationChecksByTransitivity, 14.2s TimeCoverageRelationStatistics Valid=2088, Invalid=18218, Unknown=0, NotChecked=0, Total=20306 [2021-11-23 03:37:40,109 INFO L933 BasicCegarLoop]: 149 mSDtfsCounter, 1220 mSDsluCounter, 1038 mSDsCounter, 0 mSdLazyCounter, 2868 mSolverCounterSat, 1137 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1220 SdHoareTripleChecker+Valid, 938 SdHoareTripleChecker+Invalid, 4005 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1137 IncrementalHoareTripleChecker+Valid, 2868 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.5s IncrementalHoareTripleChecker+Time [2021-11-23 03:37:40,111 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1220 Valid, 938 Invalid, 4005 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1137 Valid, 2868 Invalid, 0 Unknown, 0 Unchecked, 2.5s Time] [2021-11-23 03:37:40,111 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-23 03:37:40,112 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-23 03:37:40,112 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 03:37:40,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-23 03:37:40,113 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 97 [2021-11-23 03:37:40,113 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:37:40,113 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-23 03:37:40,114 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 23 states have (on average 5.782608695652174) internal successors, (133), 23 states have internal predecessors, (133), 13 states have call successors, (30), 5 states have call predecessors, (30), 10 states have return successors, (29), 14 states have call predecessors, (29), 12 states have call successors, (29) [2021-11-23 03:37:40,114 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-23 03:37:40,114 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-23 03:37:40,117 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-23 03:37:40,167 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-11-23 03:37:40,346 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-11-23 03:37:40,348 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-23 03:37:53,821 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 610 616) no Hoare annotation was computed. [2021-11-23 03:37:53,821 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 610 616) the Hoare annotation is: true [2021-11-23 03:37:53,822 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 83 94) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse6 (= |old(~methaneLevelCritical~0)| 0))) (let ((.cse0 (not .cse6)) (.cse3 (not (= 2 ~waterLevel~0))) (.cse5 (not (<= ~waterLevel~0 1))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (not .cse1)) (.cse4 (not (= ~pumpRunning~0 ~switchedOnBeforeTS~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4 .cse5) (or .cse2 .cse3 .cse6 .cse7) (or (not (= ~pumpRunning~0 0)) .cse2 .cse6 .cse7 .cse5) (or .cse2 .cse6 .cse7 (not (<= ~waterLevel~0 2)) .cse4)))) [2021-11-23 03:37:53,822 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2021-11-23 03:37:53,822 INFO L858 garLoopResultBuilder]: For program point L897(lines 897 901) no Hoare annotation was computed. [2021-11-23 03:37:53,822 INFO L861 garLoopResultBuilder]: At program point L897-1(lines 897 901) the Hoare annotation is: true [2021-11-23 03:37:53,822 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 883 912) no Hoare annotation was computed. [2021-11-23 03:37:53,822 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 883 912) the Hoare annotation is: true [2021-11-23 03:37:53,823 INFO L861 garLoopResultBuilder]: At program point L893-2(lines 893 907) the Hoare annotation is: true [2021-11-23 03:37:53,823 INFO L861 garLoopResultBuilder]: At program point L889(line 889) the Hoare annotation is: true [2021-11-23 03:37:53,823 INFO L858 garLoopResultBuilder]: For program point L889-1(line 889) no Hoare annotation was computed. [2021-11-23 03:37:53,823 INFO L861 garLoopResultBuilder]: At program point L908(lines 883 912) the Hoare annotation is: true [2021-11-23 03:37:53,823 INFO L858 garLoopResultBuilder]: For program point L904(line 904) no Hoare annotation was computed. [2021-11-23 03:37:53,823 INFO L854 garLoopResultBuilder]: At program point L155(line 155) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 2))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) .cse0 .cse1))) [2021-11-23 03:37:53,824 INFO L854 garLoopResultBuilder]: At program point L663(line 663) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) (not (= |old(~waterLevel~0)| 2))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) .cse2) (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) .cse0 .cse2 (= |old(~switchedOnBeforeTS~0)| 0)))) [2021-11-23 03:37:53,824 INFO L854 garLoopResultBuilder]: At program point L663-1(lines 644 668) the Hoare annotation is: (let ((.cse16 (not (<= |old(~waterLevel~0)| 1))) (.cse18 (not (= |old(~pumpRunning~0)| 0))) (.cse20 (<= |old(~waterLevel~0)| 0)) (.cse19 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (<= |timeShift_processEnvironment_~tmp~5#1| 0)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse15 (< 0 (+ |timeShift_processEnvironment_~tmp~5#1| 1))) (.cse13 (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (let ((.cse4 (and .cse14 .cse12 .cse15 .cse13)) (.cse6 (and .cse19 (or .cse12 (and (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 1))))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse11 (not (= |old(~waterLevel~0)| 2))) (.cse7 (not (= ~switchedOnBeforeTS~0 0))) (.cse0 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse9 (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|))) (.cse10 (and .cse20 .cse19)) (.cse5 (= |old(~switchedOnBeforeTS~0)| 0)) (.cse17 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (and (or .cse16 .cse18) (not .cse20))) (.cse8 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse2 .cse6 (and .cse7 .cse8 (or .cse9 .cse10)) .cse11 (and .cse12 (= ~waterLevel~0 1) .cse13)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3 .cse4 .cse5) (or .cse2 .cse6 .cse3 (and .cse14 .cse15 .cse13) .cse11) (or .cse0 .cse16 .cse2 (and .cse12 .cse13) (and .cse7 .cse8) .cse5) (or .cse0 .cse2 .cse9 .cse10 .cse17 .cse5) (or .cse18 .cse2 .cse19 .cse17) (or .cse18 .cse1 (and .cse8 .cse13) .cse2)))) [2021-11-23 03:37:53,825 INFO L854 garLoopResultBuilder]: At program point L597-1(lines 597 603) the Hoare annotation is: (let ((.cse16 (not (<= |old(~waterLevel~0)| 1))) (.cse18 (not (= |old(~pumpRunning~0)| 0))) (.cse20 (<= |old(~waterLevel~0)| 0)) (.cse19 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (<= |timeShift_processEnvironment_~tmp~5#1| 0)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse15 (< 0 (+ |timeShift_processEnvironment_~tmp~5#1| 1))) (.cse13 (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (let ((.cse4 (and .cse14 .cse12 .cse15 .cse13)) (.cse6 (and .cse19 (or .cse12 (and (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 1))))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse11 (not (= |old(~waterLevel~0)| 2))) (.cse7 (not (= ~switchedOnBeforeTS~0 0))) (.cse0 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse9 (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|))) (.cse10 (and .cse20 .cse19)) (.cse5 (= |old(~switchedOnBeforeTS~0)| 0)) (.cse17 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (and (or .cse16 .cse18) (not .cse20))) (.cse8 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse2 .cse6 (and .cse7 .cse8 (or .cse9 .cse10)) .cse11 (and .cse12 (= ~waterLevel~0 1) .cse13)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3 .cse4 .cse5) (or .cse2 .cse6 .cse3 (and .cse14 .cse15 .cse13) .cse11) (or .cse0 .cse16 .cse2 (and .cse12 .cse13) (and .cse7 .cse8) .cse5) (or .cse0 .cse2 .cse9 .cse10 .cse17 .cse5) (or .cse18 .cse2 .cse19 .cse17) (or .cse18 .cse1 (and .cse8 .cse13) .cse2)))) [2021-11-23 03:37:53,825 INFO L854 garLoopResultBuilder]: At program point L556(line 556) the Hoare annotation is: (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse11 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse8 (= ~pumpRunning~0 0)) (.cse13 (= 1 ~systemActive~0)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse14 (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|)) (and (<= |old(~waterLevel~0)| 0) .cse9))) (.cse10 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| ~waterLevel~0))) (let ((.cse0 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse5 (and (not (= ~switchedOnBeforeTS~0 0)) .cse8 (<= ~waterLevel~0 1) .cse13 .cse3 .cse14 .cse10)) (.cse12 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse14 .cse10 .cse11)) (.cse4 (= |old(~switchedOnBeforeTS~0)| 0)) (.cse1 (and (<= |timeShift_processEnvironment_~tmp~5#1| 0) (< 0 (+ |timeShift_processEnvironment_~tmp~5#1| 1)))) (.cse2 (not .cse13)) (.cse6 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= |old(~waterLevel~0)| 1)) .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse5 .cse6 .cse7) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse8 .cse9 .cse10 .cse11) .cse2 .cse12) (or .cse0 .cse2 .cse5 .cse12 .cse7 .cse4) (or .cse1 .cse2 .cse3 .cse6))))) [2021-11-23 03:37:53,825 INFO L858 garLoopResultBuilder]: For program point L556-1(line 556) no Hoare annotation was computed. [2021-11-23 03:37:53,826 INFO L858 garLoopResultBuilder]: For program point L590-2(lines 586 608) no Hoare annotation was computed. [2021-11-23 03:37:53,826 INFO L854 garLoopResultBuilder]: At program point L652(lines 652 660) the Hoare annotation is: (let ((.cse8 (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|))) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (or .cse8 (and (<= |old(~waterLevel~0)| 0) .cse9))) (.cse10 (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (and (<= |timeShift_processEnvironment_~tmp~5#1| 0) .cse7 (< 0 (+ |timeShift_processEnvironment_~tmp~5#1| 1)) .cse11 .cse10)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse6 (= |old(~switchedOnBeforeTS~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse3 .cse5 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse5) (or .cse4 (not (<= |old(~waterLevel~0)| 1)) (and .cse7 (<= ~waterLevel~0 0) (or .cse8 .cse9) .cse10) .cse0 .cse6) (or .cse0 (and .cse7 .cse11 .cse10) .cse2))))) [2021-11-23 03:37:53,826 INFO L858 garLoopResultBuilder]: For program point L648(lines 648 665) no Hoare annotation was computed. [2021-11-23 03:37:53,827 INFO L854 garLoopResultBuilder]: At program point L541(line 541) the Hoare annotation is: (let ((.cse0 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse3 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse4 (not (<= |old(~waterLevel~0)| 1))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~switchedOnBeforeTS~0 0))) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= |old(~switchedOnBeforeTS~0)| 0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse1 (and .cse5 .cse6 .cse3)) (or .cse7 .cse8 .cse1 .cse2 .cse9) (or .cse1 (and .cse5 .cse6) .cse2) (or .cse4 .cse8 .cse1 (and .cse7 (= ~pumpRunning~0 0) .cse6) .cse9))) [2021-11-23 03:37:53,827 INFO L854 garLoopResultBuilder]: At program point L541-1(line 541) the Hoare annotation is: (let ((.cse8 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse3 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not .cse8)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__2_#t~ret32#1|)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse3) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 .cse4 (and (= ~pumpRunning~0 0) .cse5 .cse6)) (or .cse0 .cse1 (and .cse7 .cse5 .cse8 .cse6 .cse3) .cse4 (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse1 (and .cse7 .cse5 .cse8 .cse6) .cse2)))) [2021-11-23 03:37:53,827 INFO L858 garLoopResultBuilder]: For program point L558(lines 558 568) no Hoare annotation was computed. [2021-11-23 03:37:53,827 INFO L858 garLoopResultBuilder]: For program point L554(lines 554 571) no Hoare annotation was computed. [2021-11-23 03:37:53,828 INFO L854 garLoopResultBuilder]: At program point L554-1(lines 546 574) the Hoare annotation is: (let ((.cse11 (<= |old(~waterLevel~0)| 0)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse16 (= ~pumpRunning~0 0)) (.cse23 (= 2 ~waterLevel~0)) (.cse19 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (let ((.cse14 (or .cse19 (and (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 1)))) (.cse21 (<= |timeShift_processEnvironment_~tmp~5#1| 0)) (.cse22 (< 0 (+ |timeShift_processEnvironment_~tmp~5#1| 1))) (.cse24 (or (and (not .cse16) (= ~waterLevel~0 1)) (and .cse16 .cse23))) (.cse20 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse15 (not (= ~switchedOnBeforeTS~0 0))) (.cse25 (<= ~waterLevel~0 1)) (.cse17 (= 1 ~systemActive~0)) (.cse3 (not .cse6)) (.cse18 (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|)) (and .cse11 .cse12))) (.cse13 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| ~waterLevel~0))) (let ((.cse7 (and .cse15 .cse16 .cse25 .cse17 .cse3 .cse18 .cse13)) (.cse9 (and .cse19 .cse25 .cse24 .cse17 .cse3 .cse18 .cse13 .cse20)) (.cse1 (and .cse21 .cse19 .cse22 .cse6 .cse24 .cse17 .cse18 .cse13 .cse20)) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse8 (and .cse23 .cse12 .cse13 .cse14)) (.cse0 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse2 (not .cse17)) (.cse10 (and .cse21 .cse22 .cse20)) (.cse5 (= |old(~switchedOnBeforeTS~0)| 0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse2 .cse7 .cse8 .cse4 .cse9) (or .cse0 .cse6 .cse2 .cse7 .cse4 .cse9 .cse5) (or .cse0 .cse2 .cse3 .cse10 (not .cse11) .cse5) (or .cse1 .cse2 .cse3 .cse4 (and .cse12 .cse13 .cse14)) (or .cse0 (not (<= |old(~waterLevel~0)| 1)) (and .cse15 .cse16 .cse17 .cse18 .cse13) .cse2 (and .cse19 .cse17 .cse18 .cse13 .cse20) .cse5) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse16 .cse12 .cse13 .cse20) .cse2 .cse8 (not (<= |old(~waterLevel~0)| 2))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3 .cse10 .cse5))))) [2021-11-23 03:37:53,828 INFO L854 garLoopResultBuilder]: At program point L658(line 658) the Hoare annotation is: (let ((.cse8 (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|))) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (or .cse8 (and (<= |old(~waterLevel~0)| 0) .cse9))) (.cse10 (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (and (<= |timeShift_processEnvironment_~tmp~5#1| 0) .cse7 (< 0 (+ |timeShift_processEnvironment_~tmp~5#1| 1)) .cse11 .cse10)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse6 (= |old(~switchedOnBeforeTS~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse3 .cse5 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse5) (or .cse4 (not (<= |old(~waterLevel~0)| 1)) (and .cse7 (<= ~waterLevel~0 0) (or .cse8 .cse9) .cse10) .cse0 .cse6) (or .cse0 (and .cse7 .cse11 .cse10) .cse2))))) [2021-11-23 03:37:53,829 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 583 609) the Hoare annotation is: (let ((.cse0 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse3 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse4 (not (<= |old(~waterLevel~0)| 1))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~switchedOnBeforeTS~0 0))) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= |old(~switchedOnBeforeTS~0)| 0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse1 (and .cse5 .cse6 .cse3)) (or .cse7 .cse8 .cse1 .cse2 .cse9) (or .cse1 (and .cse5 .cse6) .cse2) (or .cse4 .cse8 .cse1 (and .cse7 (= ~pumpRunning~0 0) .cse6) .cse9))) [2021-11-23 03:37:53,829 INFO L858 garLoopResultBuilder]: For program point L559(lines 559 565) no Hoare annotation was computed. [2021-11-23 03:37:53,829 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 583 609) no Hoare annotation was computed. [2021-11-23 03:37:53,829 INFO L854 garLoopResultBuilder]: At program point L650(line 650) the Hoare annotation is: (let ((.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|)) (and (<= |old(~waterLevel~0)| 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (= ~pumpRunning~0 ~switchedOnBeforeTS~0)))) (and (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2))))) [2021-11-23 03:37:53,830 INFO L858 garLoopResultBuilder]: For program point L650-1(line 650) no Hoare annotation was computed. [2021-11-23 03:37:53,830 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 155) no Hoare annotation was computed. [2021-11-23 03:37:53,830 INFO L854 garLoopResultBuilder]: At program point L832(lines 789 834) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (and (= 2 ~waterLevel~0) .cse1 .cse2) (and .cse0 .cse1 .cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)))) [2021-11-23 03:37:53,830 INFO L858 garLoopResultBuilder]: For program point L799(lines 799 805) no Hoare annotation was computed. [2021-11-23 03:37:53,831 INFO L858 garLoopResultBuilder]: For program point L799-1(lines 799 805) no Hoare annotation was computed. [2021-11-23 03:37:53,831 INFO L854 garLoopResultBuilder]: At program point L965(lines 965 972) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1) (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) [2021-11-23 03:37:53,831 INFO L861 garLoopResultBuilder]: At program point L965-2(lines 965 972) the Hoare annotation is: true [2021-11-23 03:37:53,831 INFO L861 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2021-11-23 03:37:53,832 INFO L854 garLoopResultBuilder]: At program point L825-2(lines 819 830) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1) (and .cse0 .cse1 (<= ~waterLevel~0 2) (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) .cse0 .cse1))) [2021-11-23 03:37:53,832 INFO L858 garLoopResultBuilder]: For program point L809(lines 809 815) no Hoare annotation was computed. [2021-11-23 03:37:53,832 INFO L858 garLoopResultBuilder]: For program point L809-1(lines 809 815) no Hoare annotation was computed. [2021-11-23 03:37:53,832 INFO L861 garLoopResultBuilder]: At program point L838(lines 779 842) the Hoare annotation is: true [2021-11-23 03:37:53,832 INFO L854 garLoopResultBuilder]: At program point L801(line 801) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (and (= 2 ~waterLevel~0) .cse1 .cse2) (and .cse0 .cse1 .cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)))) [2021-11-23 03:37:53,833 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-23 03:37:53,833 INFO L854 garLoopResultBuilder]: At program point L835(lines 788 836) the Hoare annotation is: false [2021-11-23 03:37:53,833 INFO L858 garLoopResultBuilder]: For program point L790(lines 789 834) no Hoare annotation was computed. [2021-11-23 03:37:53,833 INFO L854 garLoopResultBuilder]: At program point L811(line 811) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (and (= 2 ~waterLevel~0) .cse0 .cse1) (and .cse0 .cse1 (<= ~waterLevel~0 2) (= ~pumpRunning~0 ~switchedOnBeforeTS~0)))) [2021-11-23 03:37:53,833 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2021-11-23 03:37:53,833 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 71 82) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 (not (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) .cse2) (or .cse0 (not (= ~pumpRunning~0 0)) (= ~methaneLevelCritical~0 0) .cse1 .cse2) (or .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2))) [2021-11-23 03:37:53,834 INFO L854 garLoopResultBuilder]: At program point L632(line 632) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (= ~switchedOnBeforeTS~0 0) .cse2) (or .cse0 (and (or (< 1 ~waterLevel~0) (= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0)) (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) .cse1 .cse2))) [2021-11-23 03:37:53,834 INFO L858 garLoopResultBuilder]: For program point L626(lines 626 634) no Hoare annotation was computed. [2021-11-23 03:37:53,834 INFO L854 garLoopResultBuilder]: At program point L622(lines 622 639) the Hoare annotation is: (or (not (= 1 ~systemActive~0)) (not (<= ~waterLevel~0 2)) (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|))) [2021-11-23 03:37:53,834 INFO L854 garLoopResultBuilder]: At program point L682(line 682) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or (and (= ~pumpRunning~0 0) (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) .cse0 (not (<= ~waterLevel~0 2)) .cse1) (or .cse0 (not (<= ~waterLevel~0 1)) .cse1))) [2021-11-23 03:37:53,835 INFO L854 garLoopResultBuilder]: At program point L682-1(line 682) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or (and (= ~pumpRunning~0 0) (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) .cse0 (not (<= ~waterLevel~0 2)) .cse1) (or .cse0 (not (<= ~waterLevel~0 1)) .cse1))) [2021-11-23 03:37:53,835 INFO L854 garLoopResultBuilder]: At program point L637(line 637) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2))) [2021-11-23 03:37:53,835 INFO L858 garLoopResultBuilder]: For program point L637-1(lines 618 642) no Hoare annotation was computed. [2021-11-23 03:37:53,835 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 618 642) the Hoare annotation is: (or (not (= 1 ~systemActive~0)) (not (<= ~waterLevel~0 2)) (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|))) [2021-11-23 03:37:53,835 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 618 642) no Hoare annotation was computed. [2021-11-23 03:37:53,836 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 713 721) no Hoare annotation was computed. [2021-11-23 03:37:53,836 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 713 721) the Hoare annotation is: true [2021-11-23 03:37:53,836 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 702 712) the Hoare annotation is: true [2021-11-23 03:37:53,836 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 702 712) no Hoare annotation was computed. [2021-11-23 03:37:53,840 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:37:53,842 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-23 03:37:53,912 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 03:37:53 BoogieIcfgContainer [2021-11-23 03:37:53,913 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-23 03:37:53,913 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-23 03:37:53,914 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-23 03:37:53,914 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-23 03:37:53,915 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:36:07" (3/4) ... [2021-11-23 03:37:53,918 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-23 03:37:53,925 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-23 03:37:53,925 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-23 03:37:53,925 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-23 03:37:53,925 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-23 03:37:53,926 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-23 03:37:53,926 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-11-23 03:37:53,926 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-11-23 03:37:53,927 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-11-23 03:37:53,939 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 78 nodes and edges [2021-11-23 03:37:53,940 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 24 nodes and edges [2021-11-23 03:37:53,941 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 14 nodes and edges [2021-11-23 03:37:53,942 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-23 03:37:53,943 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-23 03:37:53,944 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-23 03:37:53,945 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-23 03:37:53,990 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || pumpRunning == switchedOnBeforeTS) && (((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || pumpRunning == switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == 0 && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel))) && ((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == aux-isPumpRunning()-aux) && 1 == systemActive) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || \old(switchedOnBeforeTS) == 0)) && ((!(1 == systemActive) || (((pumpRunning == \old(pumpRunning) && pumpRunning == aux-isPumpRunning()-aux) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2)) [2021-11-23 03:37:53,992 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) && !(\old(waterLevel) <= 0))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && pumpRunning == switchedOnBeforeTS)) || \old(switchedOnBeforeTS) == 0) && ((((!(1 == systemActive) || (\old(waterLevel) == waterLevel && (pumpRunning == \old(pumpRunning) || (!(0 == systemActive) && pumpRunning == 1)))) || ((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel)))) || !(\old(waterLevel) == 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && pumpRunning == switchedOnBeforeTS)) || \old(switchedOnBeforeTS) == 0)) && ((((!(1 == systemActive) || (\old(waterLevel) == waterLevel && (pumpRunning == \old(pumpRunning) || (!(0 == systemActive) && pumpRunning == 1)))) || !(methaneLevelCritical == 0)) || ((tmp <= 0 && 0 < tmp + 1) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && pumpRunning == switchedOnBeforeTS)) || (!(switchedOnBeforeTS == 0) && pumpRunning == 0)) || \old(switchedOnBeforeTS) == 0)) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || \old(switchedOnBeforeTS) == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) && !(\old(waterLevel) <= 0))) || (pumpRunning == 0 && pumpRunning == switchedOnBeforeTS)) || !(1 == systemActive)) [2021-11-23 03:37:53,994 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || ((((((((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && methaneLevelCritical == 0) && ((!(pumpRunning == 0) && waterLevel == 1) || (pumpRunning == 0 && 2 == waterLevel))) && 1 == systemActive) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && tmp == waterLevel) && pumpRunning == switchedOnBeforeTS)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || \old(switchedOnBeforeTS) == 0) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || ((((((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && tmp == waterLevel)) || (((2 == waterLevel && \old(waterLevel) == waterLevel) && tmp == waterLevel) && (pumpRunning == \old(pumpRunning) || (!(0 == systemActive) && pumpRunning == 1)))) || !(\old(waterLevel) == 2)) || (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && ((!(pumpRunning == 0) && waterLevel == 1) || (pumpRunning == 0 && 2 == waterLevel))) && 1 == systemActive) && !(methaneLevelCritical == 0)) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && tmp == waterLevel) && pumpRunning == switchedOnBeforeTS))) && ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && tmp == waterLevel)) || !(\old(waterLevel) == 2)) || (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && ((!(pumpRunning == 0) && waterLevel == 1) || (pumpRunning == 0 && 2 == waterLevel))) && 1 == systemActive) && !(methaneLevelCritical == 0)) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && tmp == waterLevel) && pumpRunning == switchedOnBeforeTS)) || \old(switchedOnBeforeTS) == 0)) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((tmp <= 0 && 0 < tmp + 1) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || \old(switchedOnBeforeTS) == 0)) && ((((((((((((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && methaneLevelCritical == 0) && ((!(pumpRunning == 0) && waterLevel == 1) || (pumpRunning == 0 && 2 == waterLevel))) && 1 == systemActive) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && tmp == waterLevel) && pumpRunning == switchedOnBeforeTS) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || ((\old(waterLevel) == waterLevel && tmp == waterLevel) && (pumpRunning == \old(pumpRunning) || (!(0 == systemActive) && pumpRunning == 1))))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || ((((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && 1 == systemActive) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && tmp == waterLevel)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && 1 == systemActive) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && tmp == waterLevel) && pumpRunning == switchedOnBeforeTS)) || \old(switchedOnBeforeTS) == 0)) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && \old(waterLevel) == waterLevel) && tmp == waterLevel) && pumpRunning == switchedOnBeforeTS)) || !(1 == systemActive)) || (((2 == waterLevel && \old(waterLevel) == waterLevel) && tmp == waterLevel) && (pumpRunning == \old(pumpRunning) || (!(0 == systemActive) && pumpRunning == 1)))) || !(\old(waterLevel) <= 2))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((tmp <= 0 && 0 < tmp + 1) && pumpRunning == switchedOnBeforeTS)) || \old(switchedOnBeforeTS) == 0) [2021-11-23 03:37:53,995 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(\old(waterLevel) == 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-11-23 03:37:53,995 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) && !(\old(waterLevel) <= 0))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && pumpRunning == switchedOnBeforeTS)) || \old(switchedOnBeforeTS) == 0) && ((((!(1 == systemActive) || (\old(waterLevel) == waterLevel && (pumpRunning == \old(pumpRunning) || (!(0 == systemActive) && pumpRunning == 1)))) || ((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel)))) || !(\old(waterLevel) == 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && pumpRunning == switchedOnBeforeTS)) || \old(switchedOnBeforeTS) == 0)) && ((((!(1 == systemActive) || (\old(waterLevel) == waterLevel && (pumpRunning == \old(pumpRunning) || (!(0 == systemActive) && pumpRunning == 1)))) || !(methaneLevelCritical == 0)) || ((tmp <= 0 && 0 < tmp + 1) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && pumpRunning == switchedOnBeforeTS)) || (!(switchedOnBeforeTS == 0) && pumpRunning == 0)) || \old(switchedOnBeforeTS) == 0)) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || \old(switchedOnBeforeTS) == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) && !(\old(waterLevel) <= 0))) || (pumpRunning == 0 && pumpRunning == switchedOnBeforeTS)) || !(1 == systemActive)) [2021-11-23 03:37:53,996 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(waterLevel <= 2)) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning)) [2021-11-23 03:37:53,996 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || ((((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && pumpRunning == switchedOnBeforeTS)) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || \old(switchedOnBeforeTS) == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && pumpRunning == switchedOnBeforeTS)) || !(1 == systemActive)) || \old(switchedOnBeforeTS) == 0)) && ((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) [2021-11-23 03:37:53,997 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && pumpRunning == switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(switchedOnBeforeTS == \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 1)) || !(switchedOnBeforeTS == \old(pumpRunning))) [2021-11-23 03:37:54,074 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/witness.graphml [2021-11-23 03:37:54,076 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-23 03:37:54,078 INFO L158 Benchmark]: Toolchain (without parser) took 108238.90ms. Allocated memory was 96.5MB in the beginning and 572.5MB in the end (delta: 476.1MB). Free memory was 60.1MB in the beginning and 335.0MB in the end (delta: -274.8MB). Peak memory consumption was 201.2MB. Max. memory is 16.1GB. [2021-11-23 03:37:54,078 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 96.5MB. Free memory was 66.2MB in the beginning and 66.2MB in the end (delta: 26.8kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-23 03:37:54,079 INFO L158 Benchmark]: CACSL2BoogieTranslator took 873.01ms. Allocated memory is still 96.5MB. Free memory was 59.9MB in the beginning and 62.6MB in the end (delta: -2.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-11-23 03:37:54,079 INFO L158 Benchmark]: Boogie Procedure Inliner took 67.40ms. Allocated memory is still 96.5MB. Free memory was 62.6MB in the beginning and 60.4MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-23 03:37:54,080 INFO L158 Benchmark]: Boogie Preprocessor took 87.23ms. Allocated memory is still 96.5MB. Free memory was 60.4MB in the beginning and 58.8MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-23 03:37:54,081 INFO L158 Benchmark]: RCFGBuilder took 997.19ms. Allocated memory was 96.5MB in the beginning and 127.9MB in the end (delta: 31.5MB). Free memory was 58.4MB in the beginning and 102.1MB in the end (delta: -43.7MB). Peak memory consumption was 31.0MB. Max. memory is 16.1GB. [2021-11-23 03:37:54,082 INFO L158 Benchmark]: TraceAbstraction took 106042.64ms. Allocated memory was 127.9MB in the beginning and 572.5MB in the end (delta: 444.6MB). Free memory was 101.4MB in the beginning and 341.2MB in the end (delta: -239.8MB). Peak memory consumption was 353.8MB. Max. memory is 16.1GB. [2021-11-23 03:37:54,082 INFO L158 Benchmark]: Witness Printer took 162.89ms. Allocated memory is still 572.5MB. Free memory was 341.2MB in the beginning and 335.0MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-11-23 03:37:54,086 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 96.5MB. Free memory was 66.2MB in the beginning and 66.2MB in the end (delta: 26.8kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 873.01ms. Allocated memory is still 96.5MB. Free memory was 59.9MB in the beginning and 62.6MB in the end (delta: -2.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 67.40ms. Allocated memory is still 96.5MB. Free memory was 62.6MB in the beginning and 60.4MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 87.23ms. Allocated memory is still 96.5MB. Free memory was 60.4MB in the beginning and 58.8MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 997.19ms. Allocated memory was 96.5MB in the beginning and 127.9MB in the end (delta: 31.5MB). Free memory was 58.4MB in the beginning and 102.1MB in the end (delta: -43.7MB). Peak memory consumption was 31.0MB. Max. memory is 16.1GB. * TraceAbstraction took 106042.64ms. Allocated memory was 127.9MB in the beginning and 572.5MB in the end (delta: 444.6MB). Free memory was 101.4MB in the beginning and 341.2MB in the end (delta: -239.8MB). Peak memory consumption was 353.8MB. Max. memory is 16.1GB. * Witness Printer took 162.89ms. Allocated memory is still 572.5MB. Free memory was 341.2MB in the beginning and 335.0MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 155]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 64 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 105.9s, OverallIterations: 10, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 9.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 13.5s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2239 SdHoareTripleChecker+Valid, 4.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2216 mSDsluCounter, 2872 SdHoareTripleChecker+Invalid, 3.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2625 mSDsCounter, 1617 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4644 IncrementalHoareTripleChecker+Invalid, 6261 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1617 mSolverCounterUnsat, 790 mSDtfsCounter, 4644 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 973 GetRequests, 674 SyntacticMatches, 10 SemanticMatches, 289 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9898 ImplicationChecksByTransitivity, 44.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=445occurred in iteration=9, InterpolantAutomatonStates: 173, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 10 MinimizatonAttempts, 271 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 37 LocationsWithAnnotation, 1756 PreInvPairs, 2170 NumberOfFragments, 2768 HoareAnnotationTreeSize, 1756 FomulaSimplifications, 9732 FormulaSimplificationTreeSizeReduction, 1.0s HoareSimplificationTime, 37 FomulaSimplificationsInter, 59884 FormulaSimplificationTreeSizeReductionInter, 12.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.7s SatisfiabilityAnalysisTime, 3.6s InterpolantComputationTime, 691 NumberOfCodeBlocks, 691 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 911 ConstructedInterpolants, 0 QuantifiedInterpolants, 2365 SizeOfPredicates, 26 NumberOfNonLiveVariables, 1515 ConjunctsInSsa, 65 ConjunctsInUnsatCore, 16 InterpolantComputations, 7 PerfectInterpolantSequences, 394/440 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 597]: Loop Invariant Derived loop invariant: (((((((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) && !(\old(waterLevel) <= 0))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && pumpRunning == switchedOnBeforeTS)) || \old(switchedOnBeforeTS) == 0) && ((((!(1 == systemActive) || (\old(waterLevel) == waterLevel && (pumpRunning == \old(pumpRunning) || (!(0 == systemActive) && pumpRunning == 1)))) || ((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel)))) || !(\old(waterLevel) == 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && pumpRunning == switchedOnBeforeTS)) || \old(switchedOnBeforeTS) == 0)) && ((((!(1 == systemActive) || (\old(waterLevel) == waterLevel && (pumpRunning == \old(pumpRunning) || (!(0 == systemActive) && pumpRunning == 1)))) || !(methaneLevelCritical == 0)) || ((tmp <= 0 && 0 < tmp + 1) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && pumpRunning == switchedOnBeforeTS)) || (!(switchedOnBeforeTS == 0) && pumpRunning == 0)) || \old(switchedOnBeforeTS) == 0)) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || \old(switchedOnBeforeTS) == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) && !(\old(waterLevel) <= 0))) || (pumpRunning == 0 && pumpRunning == switchedOnBeforeTS)) || !(1 == systemActive)) - InvariantResult [Line: 622]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(waterLevel <= 2)) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning)) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 652]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || ((((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && pumpRunning == switchedOnBeforeTS)) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || \old(switchedOnBeforeTS) == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && pumpRunning == switchedOnBeforeTS)) || !(1 == systemActive)) || \old(switchedOnBeforeTS) == 0)) && ((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) - InvariantResult [Line: 789]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && splverifierCounter == 0) || ((2 == waterLevel && 1 == systemActive) && splverifierCounter == 0)) || (((waterLevel <= 1 && 1 == systemActive) && splverifierCounter == 0) && pumpRunning == switchedOnBeforeTS) - InvariantResult [Line: 644]: Loop Invariant Derived loop invariant: (((((((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) && !(\old(waterLevel) <= 0))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && pumpRunning == switchedOnBeforeTS)) || \old(switchedOnBeforeTS) == 0) && ((((!(1 == systemActive) || (\old(waterLevel) == waterLevel && (pumpRunning == \old(pumpRunning) || (!(0 == systemActive) && pumpRunning == 1)))) || ((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel)))) || !(\old(waterLevel) == 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && pumpRunning == switchedOnBeforeTS)) || \old(switchedOnBeforeTS) == 0)) && ((((!(1 == systemActive) || (\old(waterLevel) == waterLevel && (pumpRunning == \old(pumpRunning) || (!(0 == systemActive) && pumpRunning == 1)))) || !(methaneLevelCritical == 0)) || ((tmp <= 0 && 0 < tmp + 1) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && pumpRunning == switchedOnBeforeTS)) || (!(switchedOnBeforeTS == 0) && pumpRunning == 0)) || \old(switchedOnBeforeTS) == 0)) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || \old(switchedOnBeforeTS) == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) && !(\old(waterLevel) <= 0))) || (pumpRunning == 0 && pumpRunning == switchedOnBeforeTS)) || !(1 == systemActive)) - InvariantResult [Line: 546]: Loop Invariant Derived loop invariant: (((((((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || ((((((((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && methaneLevelCritical == 0) && ((!(pumpRunning == 0) && waterLevel == 1) || (pumpRunning == 0 && 2 == waterLevel))) && 1 == systemActive) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && tmp == waterLevel) && pumpRunning == switchedOnBeforeTS)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || \old(switchedOnBeforeTS) == 0) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || ((((((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && tmp == waterLevel)) || (((2 == waterLevel && \old(waterLevel) == waterLevel) && tmp == waterLevel) && (pumpRunning == \old(pumpRunning) || (!(0 == systemActive) && pumpRunning == 1)))) || !(\old(waterLevel) == 2)) || (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && ((!(pumpRunning == 0) && waterLevel == 1) || (pumpRunning == 0 && 2 == waterLevel))) && 1 == systemActive) && !(methaneLevelCritical == 0)) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && tmp == waterLevel) && pumpRunning == switchedOnBeforeTS))) && ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && tmp == waterLevel)) || !(\old(waterLevel) == 2)) || (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && ((!(pumpRunning == 0) && waterLevel == 1) || (pumpRunning == 0 && 2 == waterLevel))) && 1 == systemActive) && !(methaneLevelCritical == 0)) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && tmp == waterLevel) && pumpRunning == switchedOnBeforeTS)) || \old(switchedOnBeforeTS) == 0)) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((tmp <= 0 && 0 < tmp + 1) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || \old(switchedOnBeforeTS) == 0)) && ((((((((((((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && methaneLevelCritical == 0) && ((!(pumpRunning == 0) && waterLevel == 1) || (pumpRunning == 0 && 2 == waterLevel))) && 1 == systemActive) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && tmp == waterLevel) && pumpRunning == switchedOnBeforeTS) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || ((\old(waterLevel) == waterLevel && tmp == waterLevel) && (pumpRunning == \old(pumpRunning) || (!(0 == systemActive) && pumpRunning == 1))))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || ((((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && 1 == systemActive) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && tmp == waterLevel)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && 1 == systemActive) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || (\old(waterLevel) <= 0 && \old(waterLevel) == waterLevel))) && tmp == waterLevel) && pumpRunning == switchedOnBeforeTS)) || \old(switchedOnBeforeTS) == 0)) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && \old(waterLevel) == waterLevel) && tmp == waterLevel) && pumpRunning == switchedOnBeforeTS)) || !(1 == systemActive)) || (((2 == waterLevel && \old(waterLevel) == waterLevel) && tmp == waterLevel) && (pumpRunning == \old(pumpRunning) || (!(0 == systemActive) && pumpRunning == 1)))) || !(\old(waterLevel) <= 2))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((tmp <= 0 && 0 < tmp + 1) && pumpRunning == switchedOnBeforeTS)) || \old(switchedOnBeforeTS) == 0) - InvariantResult [Line: 788]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 155]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(\old(waterLevel) == 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 702]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 541]: Loop Invariant Derived loop invariant: ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || pumpRunning == switchedOnBeforeTS) && (((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || pumpRunning == switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == 0 && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel))) && ((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == aux-isPumpRunning()-aux) && 1 == systemActive) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || \old(switchedOnBeforeTS) == 0)) && ((!(1 == systemActive) || (((pumpRunning == \old(pumpRunning) && pumpRunning == aux-isPumpRunning()-aux) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2)) - InvariantResult [Line: 883]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 682]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && pumpRunning == switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(switchedOnBeforeTS == \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 1)) || !(switchedOnBeforeTS == \old(pumpRunning))) - InvariantResult [Line: 965]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 965]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS - InvariantResult [Line: 779]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 893]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2021-11-23 03:37:54,169 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4b2e4a1f-0aca-43d2-92aa-0c140ecc338c/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE