./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash faabc130c8aadbb7390121b68f1c41e161e50da9443e348cb1c3db1c45e9e0cb --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 01:52:53,670 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 01:52:53,672 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 01:52:53,723 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 01:52:53,724 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 01:52:53,729 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 01:52:53,732 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 01:52:53,737 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 01:52:53,740 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 01:52:53,750 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 01:52:53,751 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 01:52:53,753 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 01:52:53,754 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 01:52:53,757 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 01:52:53,759 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 01:52:53,761 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 01:52:53,763 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 01:52:53,764 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 01:52:53,766 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 01:52:53,772 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 01:52:53,778 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 01:52:53,779 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 01:52:53,783 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 01:52:53,785 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 01:52:53,793 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 01:52:53,798 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 01:52:53,799 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 01:52:53,800 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 01:52:53,802 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 01:52:53,803 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 01:52:53,805 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 01:52:53,806 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 01:52:53,808 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 01:52:53,811 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 01:52:53,813 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 01:52:53,813 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 01:52:53,814 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 01:52:53,815 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 01:52:53,815 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 01:52:53,816 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 01:52:53,817 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 01:52:53,819 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-03 01:52:53,869 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 01:52:53,870 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 01:52:53,870 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 01:52:53,871 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 01:52:53,872 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 01:52:53,872 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 01:52:53,872 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 01:52:53,873 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 01:52:53,873 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 01:52:53,873 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-03 01:52:53,875 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 01:52:53,875 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 01:52:53,875 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-03 01:52:53,875 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-03 01:52:53,876 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 01:52:53,876 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-03 01:52:53,876 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-03 01:52:53,877 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-03 01:52:53,877 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 01:52:53,878 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-03 01:52:53,878 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-03 01:52:53,878 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-03 01:52:53,879 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 01:52:53,881 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-03 01:52:53,881 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 01:52:53,882 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-03 01:52:53,882 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-03 01:52:53,882 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-03 01:52:53,883 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 01:52:53,883 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-03 01:52:53,883 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 01:52:53,884 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 01:52:53,884 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 01:52:53,884 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 01:52:53,885 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-03 01:52:53,886 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 01:52:53,886 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-03 01:52:53,886 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-03 01:52:53,886 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-03 01:52:53,887 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-03 01:52:53,887 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 01:52:53,887 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> faabc130c8aadbb7390121b68f1c41e161e50da9443e348cb1c3db1c45e9e0cb [2022-11-03 01:52:54,223 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 01:52:54,252 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 01:52:54,255 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 01:52:54,274 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 01:52:54,275 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 01:52:54,277 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c [2022-11-03 01:52:54,366 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/data/ee1686f9b/432ca9265c9048a385165fcb6e7311e8/FLAG2356f3237 [2022-11-03 01:52:55,100 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 01:52:55,115 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c [2022-11-03 01:52:55,136 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/data/ee1686f9b/432ca9265c9048a385165fcb6e7311e8/FLAG2356f3237 [2022-11-03 01:52:55,312 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/data/ee1686f9b/432ca9265c9048a385165fcb6e7311e8 [2022-11-03 01:52:55,316 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 01:52:55,318 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 01:52:55,320 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 01:52:55,320 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 01:52:55,331 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 01:52:55,333 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 01:52:55" (1/1) ... [2022-11-03 01:52:55,337 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4ac5180e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:52:55, skipping insertion in model container [2022-11-03 01:52:55,338 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 01:52:55" (1/1) ... [2022-11-03 01:52:55,348 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 01:52:55,429 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 01:52:55,807 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2022-11-03 01:52:55,965 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 01:52:55,988 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 01:52:56,035 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2022-11-03 01:52:56,112 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 01:52:56,147 INFO L208 MainTranslator]: Completed translation [2022-11-03 01:52:56,148 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:52:56 WrapperNode [2022-11-03 01:52:56,148 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 01:52:56,149 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 01:52:56,149 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 01:52:56,150 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 01:52:56,159 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:52:56" (1/1) ... [2022-11-03 01:52:56,186 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:52:56" (1/1) ... [2022-11-03 01:52:56,240 INFO L138 Inliner]: procedures = 55, calls = 156, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 250 [2022-11-03 01:52:56,242 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 01:52:56,243 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 01:52:56,243 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 01:52:56,244 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 01:52:56,255 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:52:56" (1/1) ... [2022-11-03 01:52:56,255 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:52:56" (1/1) ... [2022-11-03 01:52:56,258 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:52:56" (1/1) ... [2022-11-03 01:52:56,258 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:52:56" (1/1) ... [2022-11-03 01:52:56,264 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:52:56" (1/1) ... [2022-11-03 01:52:56,270 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:52:56" (1/1) ... [2022-11-03 01:52:56,272 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:52:56" (1/1) ... [2022-11-03 01:52:56,274 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:52:56" (1/1) ... [2022-11-03 01:52:56,277 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 01:52:56,278 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 01:52:56,278 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 01:52:56,279 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 01:52:56,280 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:52:56" (1/1) ... [2022-11-03 01:52:56,288 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 01:52:56,304 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 01:52:56,319 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 01:52:56,340 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 01:52:56,379 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-03 01:52:56,379 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-03 01:52:56,380 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-03 01:52:56,380 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-03 01:52:56,380 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-03 01:52:56,380 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-03 01:52:56,381 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-03 01:52:56,381 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-03 01:52:56,381 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-03 01:52:56,381 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 01:52:56,381 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 01:52:56,382 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-03 01:52:56,382 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-03 01:52:56,382 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-03 01:52:56,382 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-03 01:52:56,383 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-03 01:52:56,383 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-03 01:52:56,383 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-03 01:52:56,383 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 01:52:56,384 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 01:52:56,509 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 01:52:56,511 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 01:52:56,996 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 01:52:57,139 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 01:52:57,140 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-03 01:52:57,143 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 01:52:57 BoogieIcfgContainer [2022-11-03 01:52:57,144 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 01:52:57,146 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 01:52:57,146 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 01:52:57,151 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 01:52:57,151 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 01:52:55" (1/3) ... [2022-11-03 01:52:57,152 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3be35338 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 01:52:57, skipping insertion in model container [2022-11-03 01:52:57,153 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:52:56" (2/3) ... [2022-11-03 01:52:57,153 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3be35338 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 01:52:57, skipping insertion in model container [2022-11-03 01:52:57,153 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 01:52:57" (3/3) ... [2022-11-03 01:52:57,155 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product39.cil.c [2022-11-03 01:52:57,179 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 01:52:57,179 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-03 01:52:57,243 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 01:52:57,266 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@202bec04, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 01:52:57,267 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-03 01:52:57,273 INFO L276 IsEmpty]: Start isEmpty. Operand has 66 states, 42 states have (on average 1.4523809523809523) internal successors, (61), 51 states have internal predecessors, (61), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2022-11-03 01:52:57,286 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-03 01:52:57,286 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:52:57,287 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:52:57,288 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:52:57,300 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:52:57,301 INFO L85 PathProgramCache]: Analyzing trace with hash -671904148, now seen corresponding path program 1 times [2022-11-03 01:52:57,314 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:52:57,315 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1054046976] [2022-11-03 01:52:57,315 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:52:57,316 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:52:57,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:52:57,561 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 01:52:57,562 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:52:57,562 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1054046976] [2022-11-03 01:52:57,563 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1054046976] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:52:57,564 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 01:52:57,564 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 01:52:57,566 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2035155494] [2022-11-03 01:52:57,567 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:52:57,572 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-03 01:52:57,572 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:52:57,610 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-03 01:52:57,612 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 01:52:57,616 INFO L87 Difference]: Start difference. First operand has 66 states, 42 states have (on average 1.4523809523809523) internal successors, (61), 51 states have internal predecessors, (61), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 01:52:57,758 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:52:57,759 INFO L93 Difference]: Finished difference Result 130 states and 179 transitions. [2022-11-03 01:52:57,760 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-03 01:52:57,762 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-11-03 01:52:57,762 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:52:57,774 INFO L225 Difference]: With dead ends: 130 [2022-11-03 01:52:57,774 INFO L226 Difference]: Without dead ends: 61 [2022-11-03 01:52:57,779 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 01:52:57,783 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 69 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 01:52:57,785 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 69 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 01:52:57,806 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61 states. [2022-11-03 01:52:57,833 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61 to 61. [2022-11-03 01:52:57,835 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 39 states have (on average 1.358974358974359) internal successors, (53), 47 states have internal predecessors, (53), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-03 01:52:57,838 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 80 transitions. [2022-11-03 01:52:57,840 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 80 transitions. Word has length 17 [2022-11-03 01:52:57,840 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:52:57,841 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 80 transitions. [2022-11-03 01:52:57,841 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 01:52:57,842 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 80 transitions. [2022-11-03 01:52:57,844 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-03 01:52:57,844 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:52:57,844 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:52:57,845 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-03 01:52:57,845 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:52:57,846 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:52:57,846 INFO L85 PathProgramCache]: Analyzing trace with hash -600656771, now seen corresponding path program 1 times [2022-11-03 01:52:57,847 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:52:57,847 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [985865575] [2022-11-03 01:52:57,847 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:52:57,848 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:52:57,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:52:57,999 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 01:52:58,000 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:52:58,000 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [985865575] [2022-11-03 01:52:58,001 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [985865575] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:52:58,001 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 01:52:58,001 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 01:52:58,001 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1976776591] [2022-11-03 01:52:58,002 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:52:58,003 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 01:52:58,004 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:52:58,004 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 01:52:58,005 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 01:52:58,005 INFO L87 Difference]: Start difference. First operand 61 states and 80 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 01:52:58,061 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:52:58,062 INFO L93 Difference]: Finished difference Result 94 states and 122 transitions. [2022-11-03 01:52:58,062 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 01:52:58,063 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-11-03 01:52:58,063 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:52:58,064 INFO L225 Difference]: With dead ends: 94 [2022-11-03 01:52:58,065 INFO L226 Difference]: Without dead ends: 53 [2022-11-03 01:52:58,066 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 01:52:58,067 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 14 mSDsluCounter, 49 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 93 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 01:52:58,068 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 93 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 01:52:58,069 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2022-11-03 01:52:58,076 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2022-11-03 01:52:58,077 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 34 states have (on average 1.3823529411764706) internal successors, (47), 42 states have internal predecessors, (47), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-03 01:52:58,079 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 69 transitions. [2022-11-03 01:52:58,079 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 69 transitions. Word has length 18 [2022-11-03 01:52:58,079 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:52:58,080 INFO L495 AbstractCegarLoop]: Abstraction has 53 states and 69 transitions. [2022-11-03 01:52:58,080 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 01:52:58,080 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 69 transitions. [2022-11-03 01:52:58,081 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-03 01:52:58,081 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:52:58,082 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:52:58,082 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-03 01:52:58,082 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:52:58,107 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:52:58,108 INFO L85 PathProgramCache]: Analyzing trace with hash -2082322244, now seen corresponding path program 1 times [2022-11-03 01:52:58,108 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:52:58,108 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1820570733] [2022-11-03 01:52:58,109 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:52:58,109 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:52:58,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:52:58,217 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 01:52:58,218 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:52:58,218 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1820570733] [2022-11-03 01:52:58,218 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1820570733] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:52:58,219 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 01:52:58,219 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 01:52:58,219 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [358457101] [2022-11-03 01:52:58,220 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:52:58,220 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 01:52:58,220 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:52:58,221 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 01:52:58,221 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 01:52:58,222 INFO L87 Difference]: Start difference. First operand 53 states and 69 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 01:52:58,303 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:52:58,304 INFO L93 Difference]: Finished difference Result 155 states and 204 transitions. [2022-11-03 01:52:58,304 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 01:52:58,305 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2022-11-03 01:52:58,305 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:52:58,307 INFO L225 Difference]: With dead ends: 155 [2022-11-03 01:52:58,307 INFO L226 Difference]: Without dead ends: 104 [2022-11-03 01:52:58,308 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 01:52:58,310 INFO L413 NwaCegarLoop]: 74 mSDtfsCounter, 56 mSDsluCounter, 64 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 127 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 01:52:58,311 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 127 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 01:52:58,312 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104 states. [2022-11-03 01:52:58,335 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104 to 101. [2022-11-03 01:52:58,336 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 64 states have (on average 1.390625) internal successors, (89), 79 states have internal predecessors, (89), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2022-11-03 01:52:58,339 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 133 transitions. [2022-11-03 01:52:58,339 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 133 transitions. Word has length 21 [2022-11-03 01:52:58,340 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:52:58,340 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 133 transitions. [2022-11-03 01:52:58,340 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 01:52:58,340 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 133 transitions. [2022-11-03 01:52:58,342 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-03 01:52:58,342 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:52:58,343 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:52:58,343 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-03 01:52:58,343 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:52:58,344 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:52:58,344 INFO L85 PathProgramCache]: Analyzing trace with hash 654606365, now seen corresponding path program 1 times [2022-11-03 01:52:58,345 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:52:58,345 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2082452553] [2022-11-03 01:52:58,345 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:52:58,346 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:52:58,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:52:58,526 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 01:52:58,526 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:52:58,527 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2082452553] [2022-11-03 01:52:58,527 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2082452553] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:52:58,527 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 01:52:58,528 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 01:52:58,528 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [347369758] [2022-11-03 01:52:58,528 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:52:58,529 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 01:52:58,529 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:52:58,530 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 01:52:58,530 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-03 01:52:58,531 INFO L87 Difference]: Start difference. First operand 101 states and 133 transitions. Second operand has 6 states, 5 states have (on average 4.2) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 01:52:58,726 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:52:58,727 INFO L93 Difference]: Finished difference Result 295 states and 392 transitions. [2022-11-03 01:52:58,727 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-03 01:52:58,728 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.2) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-11-03 01:52:58,728 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:52:58,731 INFO L225 Difference]: With dead ends: 295 [2022-11-03 01:52:58,731 INFO L226 Difference]: Without dead ends: 196 [2022-11-03 01:52:58,732 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-03 01:52:58,734 INFO L413 NwaCegarLoop]: 64 mSDtfsCounter, 44 mSDsluCounter, 263 mSDsCounter, 0 mSdLazyCounter, 102 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 283 SdHoareTripleChecker+Invalid, 104 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 102 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 01:52:58,735 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 283 Invalid, 104 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 102 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 01:52:58,736 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 196 states. [2022-11-03 01:52:58,793 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 196 to 188. [2022-11-03 01:52:58,794 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 188 states, 119 states have (on average 1.3697478991596639) internal successors, (163), 146 states have internal predecessors, (163), 42 states have call successors, (42), 26 states have call predecessors, (42), 26 states have return successors, (42), 28 states have call predecessors, (42), 42 states have call successors, (42) [2022-11-03 01:52:58,815 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 188 states and 247 transitions. [2022-11-03 01:52:58,816 INFO L78 Accepts]: Start accepts. Automaton has 188 states and 247 transitions. Word has length 24 [2022-11-03 01:52:58,816 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:52:58,816 INFO L495 AbstractCegarLoop]: Abstraction has 188 states and 247 transitions. [2022-11-03 01:52:58,817 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.2) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 01:52:58,817 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 247 transitions. [2022-11-03 01:52:58,819 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-03 01:52:58,819 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:52:58,820 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:52:58,820 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-03 01:52:58,820 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:52:58,826 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:52:58,827 INFO L85 PathProgramCache]: Analyzing trace with hash 1192430897, now seen corresponding path program 1 times [2022-11-03 01:52:58,827 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:52:58,827 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1689950999] [2022-11-03 01:52:58,828 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:52:58,828 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:52:58,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:52:59,072 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 01:52:59,072 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:52:59,073 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1689950999] [2022-11-03 01:52:59,073 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1689950999] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:52:59,073 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 01:52:59,074 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 01:52:59,074 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1197871077] [2022-11-03 01:52:59,074 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:52:59,075 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 01:52:59,075 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:52:59,076 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 01:52:59,076 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 01:52:59,077 INFO L87 Difference]: Start difference. First operand 188 states and 247 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 01:52:59,244 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:52:59,244 INFO L93 Difference]: Finished difference Result 287 states and 382 transitions. [2022-11-03 01:52:59,244 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 01:52:59,249 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 27 [2022-11-03 01:52:59,250 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:52:59,257 INFO L225 Difference]: With dead ends: 287 [2022-11-03 01:52:59,257 INFO L226 Difference]: Without dead ends: 285 [2022-11-03 01:52:59,258 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 01:52:59,260 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 44 mSDsluCounter, 64 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 117 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 01:52:59,261 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 117 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 01:52:59,262 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 285 states. [2022-11-03 01:52:59,324 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 285 to 285. [2022-11-03 01:52:59,327 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 285 states, 180 states have (on average 1.3722222222222222) internal successors, (247), 221 states have internal predecessors, (247), 64 states have call successors, (64), 40 states have call predecessors, (64), 40 states have return successors, (68), 43 states have call predecessors, (68), 64 states have call successors, (68) [2022-11-03 01:52:59,336 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 285 states to 285 states and 379 transitions. [2022-11-03 01:52:59,337 INFO L78 Accepts]: Start accepts. Automaton has 285 states and 379 transitions. Word has length 27 [2022-11-03 01:52:59,337 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:52:59,337 INFO L495 AbstractCegarLoop]: Abstraction has 285 states and 379 transitions. [2022-11-03 01:52:59,338 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 01:52:59,338 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 379 transitions. [2022-11-03 01:52:59,354 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-03 01:52:59,354 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:52:59,355 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:52:59,355 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-03 01:52:59,356 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:52:59,357 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:52:59,357 INFO L85 PathProgramCache]: Analyzing trace with hash -342758768, now seen corresponding path program 1 times [2022-11-03 01:52:59,357 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:52:59,358 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1560426549] [2022-11-03 01:52:59,359 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:52:59,359 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:52:59,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:52:59,683 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 01:52:59,683 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:52:59,683 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1560426549] [2022-11-03 01:52:59,684 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1560426549] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:52:59,684 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 01:52:59,684 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 01:52:59,684 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [698456445] [2022-11-03 01:52:59,685 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:52:59,685 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 01:52:59,686 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:52:59,686 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 01:52:59,687 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-03 01:52:59,687 INFO L87 Difference]: Start difference. First operand 285 states and 379 transitions. Second operand has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-03 01:53:00,154 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:53:00,155 INFO L93 Difference]: Finished difference Result 934 states and 1260 transitions. [2022-11-03 01:53:00,155 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-03 01:53:00,156 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 47 [2022-11-03 01:53:00,157 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:53:00,163 INFO L225 Difference]: With dead ends: 934 [2022-11-03 01:53:00,163 INFO L226 Difference]: Without dead ends: 651 [2022-11-03 01:53:00,166 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=74, Unknown=0, NotChecked=0, Total=110 [2022-11-03 01:53:00,167 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 129 mSDsluCounter, 127 mSDsCounter, 0 mSdLazyCounter, 153 mSolverCounterSat, 64 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 179 SdHoareTripleChecker+Invalid, 217 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 64 IncrementalHoareTripleChecker+Valid, 153 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 01:53:00,175 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 179 Invalid, 217 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [64 Valid, 153 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 01:53:00,178 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 651 states. [2022-11-03 01:53:00,266 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 651 to 604. [2022-11-03 01:53:00,268 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 604 states, 406 states have (on average 1.2635467980295567) internal successors, (513), 445 states have internal predecessors, (513), 98 states have call successors, (98), 83 states have call predecessors, (98), 99 states have return successors, (144), 99 states have call predecessors, (144), 98 states have call successors, (144) [2022-11-03 01:53:00,272 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 604 states to 604 states and 755 transitions. [2022-11-03 01:53:00,273 INFO L78 Accepts]: Start accepts. Automaton has 604 states and 755 transitions. Word has length 47 [2022-11-03 01:53:00,273 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:53:00,273 INFO L495 AbstractCegarLoop]: Abstraction has 604 states and 755 transitions. [2022-11-03 01:53:00,273 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-03 01:53:00,274 INFO L276 IsEmpty]: Start isEmpty. Operand 604 states and 755 transitions. [2022-11-03 01:53:00,276 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-03 01:53:00,276 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:53:00,276 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:53:00,277 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-03 01:53:00,277 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:53:00,277 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:53:00,277 INFO L85 PathProgramCache]: Analyzing trace with hash -148294688, now seen corresponding path program 1 times [2022-11-03 01:53:00,278 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:53:00,278 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [30839456] [2022-11-03 01:53:00,278 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:53:00,278 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:53:00,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:53:00,349 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 01:53:00,349 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:53:00,350 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [30839456] [2022-11-03 01:53:00,350 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [30839456] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:53:00,350 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 01:53:00,350 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 01:53:00,351 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [83757729] [2022-11-03 01:53:00,351 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:53:00,352 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 01:53:00,352 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:53:00,353 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 01:53:00,353 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 01:53:00,354 INFO L87 Difference]: Start difference. First operand 604 states and 755 transitions. Second operand has 4 states, 3 states have (on average 14.333333333333334) internal successors, (43), 4 states have internal predecessors, (43), 4 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-03 01:53:00,555 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:53:00,555 INFO L93 Difference]: Finished difference Result 683 states and 857 transitions. [2022-11-03 01:53:00,556 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 01:53:00,556 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 14.333333333333334) internal successors, (43), 4 states have internal predecessors, (43), 4 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 55 [2022-11-03 01:53:00,558 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:53:00,561 INFO L225 Difference]: With dead ends: 683 [2022-11-03 01:53:00,561 INFO L226 Difference]: Without dead ends: 292 [2022-11-03 01:53:00,562 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 01:53:00,566 INFO L413 NwaCegarLoop]: 77 mSDtfsCounter, 87 mSDsluCounter, 66 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 80 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 01:53:00,568 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [87 Valid, 124 Invalid, 80 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 01:53:00,572 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 292 states. [2022-11-03 01:53:00,624 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 292 to 292. [2022-11-03 01:53:00,625 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 292 states, 197 states have (on average 1.218274111675127) internal successors, (240), 214 states have internal predecessors, (240), 46 states have call successors, (46), 40 states have call predecessors, (46), 48 states have return successors, (69), 48 states have call predecessors, (69), 46 states have call successors, (69) [2022-11-03 01:53:00,627 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 292 states to 292 states and 355 transitions. [2022-11-03 01:53:00,628 INFO L78 Accepts]: Start accepts. Automaton has 292 states and 355 transitions. Word has length 55 [2022-11-03 01:53:00,628 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:53:00,628 INFO L495 AbstractCegarLoop]: Abstraction has 292 states and 355 transitions. [2022-11-03 01:53:00,629 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 14.333333333333334) internal successors, (43), 4 states have internal predecessors, (43), 4 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-03 01:53:00,629 INFO L276 IsEmpty]: Start isEmpty. Operand 292 states and 355 transitions. [2022-11-03 01:53:00,631 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-03 01:53:00,631 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:53:00,632 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:53:00,632 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-03 01:53:00,633 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:53:00,633 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:53:00,633 INFO L85 PathProgramCache]: Analyzing trace with hash 1388846503, now seen corresponding path program 1 times [2022-11-03 01:53:00,633 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:53:00,634 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1333808025] [2022-11-03 01:53:00,634 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:53:00,634 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:53:00,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:53:00,824 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 10 proven. 11 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-03 01:53:00,825 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:53:00,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1333808025] [2022-11-03 01:53:00,828 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1333808025] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 01:53:00,829 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1162000723] [2022-11-03 01:53:00,829 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:53:00,829 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 01:53:00,829 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 01:53:00,835 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 01:53:00,863 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-03 01:53:01,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:53:01,018 INFO L263 TraceCheckSpWp]: Trace formula consists of 430 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-03 01:53:01,029 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 01:53:01,157 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 01:53:01,157 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 01:53:01,158 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1162000723] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:53:01,158 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 01:53:01,158 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 8 [2022-11-03 01:53:01,158 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [827885172] [2022-11-03 01:53:01,158 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:53:01,159 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 01:53:01,159 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:53:01,160 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 01:53:01,160 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2022-11-03 01:53:01,160 INFO L87 Difference]: Start difference. First operand 292 states and 355 transitions. Second operand has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-03 01:53:01,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:53:01,254 INFO L93 Difference]: Finished difference Result 584 states and 709 transitions. [2022-11-03 01:53:01,254 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 01:53:01,255 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 60 [2022-11-03 01:53:01,255 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:53:01,257 INFO L225 Difference]: With dead ends: 584 [2022-11-03 01:53:01,257 INFO L226 Difference]: Without dead ends: 294 [2022-11-03 01:53:01,258 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2022-11-03 01:53:01,259 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 28 mSDsluCounter, 44 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 01:53:01,260 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 108 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 01:53:01,261 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2022-11-03 01:53:01,318 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 292. [2022-11-03 01:53:01,319 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 292 states, 197 states have (on average 1.2030456852791878) internal successors, (237), 214 states have internal predecessors, (237), 46 states have call successors, (46), 40 states have call predecessors, (46), 48 states have return successors, (61), 48 states have call predecessors, (61), 46 states have call successors, (61) [2022-11-03 01:53:01,321 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 292 states to 292 states and 344 transitions. [2022-11-03 01:53:01,322 INFO L78 Accepts]: Start accepts. Automaton has 292 states and 344 transitions. Word has length 60 [2022-11-03 01:53:01,322 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:53:01,323 INFO L495 AbstractCegarLoop]: Abstraction has 292 states and 344 transitions. [2022-11-03 01:53:01,323 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-03 01:53:01,323 INFO L276 IsEmpty]: Start isEmpty. Operand 292 states and 344 transitions. [2022-11-03 01:53:01,324 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-11-03 01:53:01,325 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:53:01,325 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:53:01,375 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-03 01:53:01,539 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 01:53:01,539 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:53:01,540 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:53:01,540 INFO L85 PathProgramCache]: Analyzing trace with hash 1650289391, now seen corresponding path program 1 times [2022-11-03 01:53:01,540 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:53:01,540 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1093649840] [2022-11-03 01:53:01,540 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:53:01,541 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:53:01,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:53:02,186 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 01:53:02,186 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:53:02,187 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1093649840] [2022-11-03 01:53:02,187 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1093649840] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:53:02,187 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 01:53:02,187 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-03 01:53:02,188 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1392254759] [2022-11-03 01:53:02,188 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:53:02,189 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-03 01:53:02,189 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:53:02,190 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-03 01:53:02,190 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-11-03 01:53:02,191 INFO L87 Difference]: Start difference. First operand 292 states and 344 transitions. Second operand has 8 states, 8 states have (on average 5.625) internal successors, (45), 7 states have internal predecessors, (45), 4 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2022-11-03 01:53:02,630 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:53:02,630 INFO L93 Difference]: Finished difference Result 713 states and 861 transitions. [2022-11-03 01:53:02,631 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-03 01:53:02,631 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.625) internal successors, (45), 7 states have internal predecessors, (45), 4 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 62 [2022-11-03 01:53:02,632 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:53:02,635 INFO L225 Difference]: With dead ends: 713 [2022-11-03 01:53:02,635 INFO L226 Difference]: Without dead ends: 423 [2022-11-03 01:53:02,637 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-11-03 01:53:02,640 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 153 mSDsluCounter, 115 mSDsCounter, 0 mSdLazyCounter, 188 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 161 SdHoareTripleChecker+Valid, 163 SdHoareTripleChecker+Invalid, 265 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 188 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 01:53:02,640 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [161 Valid, 163 Invalid, 265 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 188 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 01:53:02,642 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 423 states. [2022-11-03 01:53:02,698 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 423 to 356. [2022-11-03 01:53:02,700 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 356 states, 243 states have (on average 1.1934156378600822) internal successors, (290), 261 states have internal predecessors, (290), 55 states have call successors, (55), 49 states have call predecessors, (55), 57 states have return successors, (70), 57 states have call predecessors, (70), 55 states have call successors, (70) [2022-11-03 01:53:02,702 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 356 states to 356 states and 415 transitions. [2022-11-03 01:53:02,703 INFO L78 Accepts]: Start accepts. Automaton has 356 states and 415 transitions. Word has length 62 [2022-11-03 01:53:02,704 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:53:02,704 INFO L495 AbstractCegarLoop]: Abstraction has 356 states and 415 transitions. [2022-11-03 01:53:02,704 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.625) internal successors, (45), 7 states have internal predecessors, (45), 4 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2022-11-03 01:53:02,705 INFO L276 IsEmpty]: Start isEmpty. Operand 356 states and 415 transitions. [2022-11-03 01:53:02,706 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-11-03 01:53:02,706 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:53:02,707 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:53:02,707 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-03 01:53:02,707 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:53:02,708 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:53:02,708 INFO L85 PathProgramCache]: Analyzing trace with hash 630319736, now seen corresponding path program 1 times [2022-11-03 01:53:02,708 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:53:02,708 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1459516289] [2022-11-03 01:53:02,709 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:53:02,709 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:53:02,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:53:02,889 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2022-11-03 01:53:02,889 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:53:02,889 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1459516289] [2022-11-03 01:53:02,890 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1459516289] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:53:02,890 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 01:53:02,890 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 01:53:02,890 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1954422481] [2022-11-03 01:53:02,891 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:53:02,892 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 01:53:02,893 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:53:02,894 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 01:53:02,894 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 01:53:02,895 INFO L87 Difference]: Start difference. First operand 356 states and 415 transitions. Second operand has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-11-03 01:53:03,028 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:53:03,029 INFO L93 Difference]: Finished difference Result 522 states and 614 transitions. [2022-11-03 01:53:03,029 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 01:53:03,029 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 65 [2022-11-03 01:53:03,032 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:53:03,034 INFO L225 Difference]: With dead ends: 522 [2022-11-03 01:53:03,034 INFO L226 Difference]: Without dead ends: 321 [2022-11-03 01:53:03,035 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 01:53:03,036 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 40 mSDsluCounter, 122 mSDsCounter, 0 mSdLazyCounter, 51 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 40 SdHoareTripleChecker+Valid, 166 SdHoareTripleChecker+Invalid, 53 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 51 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 01:53:03,037 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [40 Valid, 166 Invalid, 53 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 51 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 01:53:03,039 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 321 states. [2022-11-03 01:53:03,092 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 321 to 308. [2022-11-03 01:53:03,093 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 308 states, 209 states have (on average 1.1722488038277512) internal successors, (245), 225 states have internal predecessors, (245), 48 states have call successors, (48), 43 states have call predecessors, (48), 50 states have return successors, (58), 49 states have call predecessors, (58), 48 states have call successors, (58) [2022-11-03 01:53:03,095 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 308 states to 308 states and 351 transitions. [2022-11-03 01:53:03,095 INFO L78 Accepts]: Start accepts. Automaton has 308 states and 351 transitions. Word has length 65 [2022-11-03 01:53:03,096 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:53:03,101 INFO L495 AbstractCegarLoop]: Abstraction has 308 states and 351 transitions. [2022-11-03 01:53:03,101 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-11-03 01:53:03,101 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 351 transitions. [2022-11-03 01:53:03,108 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2022-11-03 01:53:03,108 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:53:03,109 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:53:03,109 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-03 01:53:03,109 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:53:03,110 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:53:03,111 INFO L85 PathProgramCache]: Analyzing trace with hash 353583973, now seen corresponding path program 1 times [2022-11-03 01:53:03,111 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:53:03,112 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [383208950] [2022-11-03 01:53:03,112 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:53:03,112 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:53:03,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:53:03,389 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 11 proven. 6 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-03 01:53:03,389 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:53:03,390 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [383208950] [2022-11-03 01:53:03,390 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [383208950] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 01:53:03,390 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [276783634] [2022-11-03 01:53:03,390 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:53:03,391 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 01:53:03,391 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 01:53:03,392 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 01:53:03,423 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-03 01:53:03,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:53:03,543 INFO L263 TraceCheckSpWp]: Trace formula consists of 443 conjuncts, 26 conjunts are in the unsatisfiable core [2022-11-03 01:53:03,547 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 01:53:04,021 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 15 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 01:53:04,021 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 01:53:04,524 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 14 proven. 6 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-03 01:53:04,524 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [276783634] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 01:53:04,525 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1186486000] [2022-11-03 01:53:04,553 INFO L159 IcfgInterpreter]: Started Sifa with 45 locations of interest [2022-11-03 01:53:04,554 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 01:53:04,558 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 01:53:04,565 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 01:53:04,565 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 01:53:21,771 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 310 for LOIs [2022-11-03 01:53:21,859 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 47 for LOIs [2022-11-03 01:53:22,215 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 40 for LOIs [2022-11-03 01:53:22,332 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 23 for LOIs [2022-11-03 01:53:22,335 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 32 for LOIs [2022-11-03 01:53:22,340 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 26 for LOIs [2022-11-03 01:53:22,342 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 01:53:35,727 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11142#(and (<= ~cleanupTimeShifts~0 4) (<= ~head~0.offset 0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~5#1|) (<= 0 |#NULL.base|) (<= 0 ~head~0.offset) (<= 1 ~systemActive~0) (<= |timeShift_isPumpRunning_#res#1| 2147483647) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~5#1|) (<= |#NULL.offset| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1|) (<= 0 ~methAndRunningLastTime~0) (<= 4 ~cleanupTimeShifts~0) (<= 0 |old(~methAndRunningLastTime~0)|) (<= 0 ~head~0.base) (<= |#NULL.base| 0) (<= 0 ~methaneLevelCritical~0) (<= ~head~0.base 0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 1) (<= 0 (+ |timeShift_isPumpRunning_#res#1| 2147483648)) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1| 0)) (<= 0 |#NULL.offset|) (not (= ~methAndRunningLastTime~0 0)) (<= 0 |#StackHeapBarrier|) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| ~methaneLevelCritical~0) (<= ~systemActive~0 1))' at error location [2022-11-03 01:53:35,728 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 01:53:35,730 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 01:53:35,730 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9, 11] total 23 [2022-11-03 01:53:35,731 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [754600013] [2022-11-03 01:53:35,736 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 01:53:35,737 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-03 01:53:35,737 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:53:35,738 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-03 01:53:35,742 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=282, Invalid=2474, Unknown=0, NotChecked=0, Total=2756 [2022-11-03 01:53:35,743 INFO L87 Difference]: Start difference. First operand 308 states and 351 transitions. Second operand has 23 states, 17 states have (on average 6.470588235294118) internal successors, (110), 18 states have internal predecessors, (110), 10 states have call successors, (26), 9 states have call predecessors, (26), 11 states have return successors, (24), 12 states have call predecessors, (24), 10 states have call successors, (24) [2022-11-03 01:53:36,888 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:53:36,889 INFO L93 Difference]: Finished difference Result 612 states and 707 transitions. [2022-11-03 01:53:36,889 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-03 01:53:36,890 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 17 states have (on average 6.470588235294118) internal successors, (110), 18 states have internal predecessors, (110), 10 states have call successors, (26), 9 states have call predecessors, (26), 11 states have return successors, (24), 12 states have call predecessors, (24), 10 states have call successors, (24) Word has length 70 [2022-11-03 01:53:36,890 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:53:36,893 INFO L225 Difference]: With dead ends: 612 [2022-11-03 01:53:36,893 INFO L226 Difference]: Without dead ends: 459 [2022-11-03 01:53:36,895 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 230 GetRequests, 159 SyntacticMatches, 11 SemanticMatches, 60 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1530 ImplicationChecksByTransitivity, 14.0s TimeCoverageRelationStatistics Valid=395, Invalid=3387, Unknown=0, NotChecked=0, Total=3782 [2022-11-03 01:53:36,896 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 293 mSDsluCounter, 227 mSDsCounter, 0 mSdLazyCounter, 853 mSolverCounterSat, 157 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 296 SdHoareTripleChecker+Valid, 278 SdHoareTripleChecker+Invalid, 1010 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 157 IncrementalHoareTripleChecker+Valid, 853 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-03 01:53:36,897 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [296 Valid, 278 Invalid, 1010 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [157 Valid, 853 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-03 01:53:36,898 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 459 states. [2022-11-03 01:53:36,950 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 459 to 459. [2022-11-03 01:53:36,951 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 459 states, 311 states have (on average 1.1736334405144695) internal successors, (365), 336 states have internal predecessors, (365), 72 states have call successors, (72), 66 states have call predecessors, (72), 75 states have return successors, (85), 73 states have call predecessors, (85), 72 states have call successors, (85) [2022-11-03 01:53:36,954 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 459 states to 459 states and 522 transitions. [2022-11-03 01:53:36,954 INFO L78 Accepts]: Start accepts. Automaton has 459 states and 522 transitions. Word has length 70 [2022-11-03 01:53:36,955 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:53:36,955 INFO L495 AbstractCegarLoop]: Abstraction has 459 states and 522 transitions. [2022-11-03 01:53:36,955 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 17 states have (on average 6.470588235294118) internal successors, (110), 18 states have internal predecessors, (110), 10 states have call successors, (26), 9 states have call predecessors, (26), 11 states have return successors, (24), 12 states have call predecessors, (24), 10 states have call successors, (24) [2022-11-03 01:53:36,955 INFO L276 IsEmpty]: Start isEmpty. Operand 459 states and 522 transitions. [2022-11-03 01:53:36,957 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-11-03 01:53:36,958 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:53:36,958 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:53:37,000 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-03 01:53:37,171 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 01:53:37,171 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:53:37,172 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:53:37,172 INFO L85 PathProgramCache]: Analyzing trace with hash 961164993, now seen corresponding path program 1 times [2022-11-03 01:53:37,172 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:53:37,172 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [70710932] [2022-11-03 01:53:37,173 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:53:37,173 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:53:37,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:53:37,638 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 6 proven. 16 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 01:53:37,639 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:53:37,639 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [70710932] [2022-11-03 01:53:37,639 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [70710932] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 01:53:37,639 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1010357882] [2022-11-03 01:53:37,639 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:53:37,640 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 01:53:37,640 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 01:53:37,641 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 01:53:37,672 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-03 01:53:37,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:53:37,788 INFO L263 TraceCheckSpWp]: Trace formula consists of 449 conjuncts, 23 conjunts are in the unsatisfiable core [2022-11-03 01:53:37,791 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 01:53:37,895 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-03 01:53:37,895 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 01:53:37,896 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1010357882] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:53:37,896 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 01:53:37,896 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [13] total 16 [2022-11-03 01:53:37,897 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1373553328] [2022-11-03 01:53:37,897 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:53:37,898 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-03 01:53:37,898 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:53:37,898 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-03 01:53:37,899 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=204, Unknown=0, NotChecked=0, Total=240 [2022-11-03 01:53:37,899 INFO L87 Difference]: Start difference. First operand 459 states and 522 transitions. Second operand has 9 states, 7 states have (on average 6.142857142857143) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-03 01:53:38,286 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:53:38,287 INFO L93 Difference]: Finished difference Result 844 states and 972 transitions. [2022-11-03 01:53:38,287 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-03 01:53:38,288 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 6.142857142857143) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) Word has length 73 [2022-11-03 01:53:38,288 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:53:38,289 INFO L225 Difference]: With dead ends: 844 [2022-11-03 01:53:38,289 INFO L226 Difference]: Without dead ends: 0 [2022-11-03 01:53:38,291 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 97 GetRequests, 76 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=77, Invalid=429, Unknown=0, NotChecked=0, Total=506 [2022-11-03 01:53:38,292 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 46 mSDsluCounter, 318 mSDsCounter, 0 mSdLazyCounter, 237 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 313 SdHoareTripleChecker+Invalid, 246 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 237 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 01:53:38,293 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 313 Invalid, 246 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 237 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 01:53:38,294 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-03 01:53:38,294 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-03 01:53:38,295 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 01:53:38,295 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-03 01:53:38,295 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 73 [2022-11-03 01:53:38,295 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:53:38,296 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-03 01:53:38,296 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 6.142857142857143) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-03 01:53:38,296 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-03 01:53:38,296 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-03 01:53:38,300 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-03 01:53:38,352 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-03 01:53:38,515 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-03 01:53:38,518 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-03 01:53:45,017 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 469 476) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= 0 ~systemActive~0)) [2022-11-03 01:53:45,017 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 469 476) no Hoare annotation was computed. [2022-11-03 01:53:45,017 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 402 408) no Hoare annotation was computed. [2022-11-03 01:53:45,017 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 402 408) the Hoare annotation is: true [2022-11-03 01:53:45,018 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 83 94) the Hoare annotation is: (let ((.cse1 (not (= ~pumpRunning~0 0))) (.cse6 (= ~methaneLevelCritical~0 1)) (.cse7 (not (= |old(~methaneLevelCritical~0)| 1))) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse5 (not (<= 1 ~pumpRunning~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse5 .cse6 .cse7) (or .cse1 .cse2 .cse6 .cse7 .cse4) (or .cse0 .cse2 .cse3 .cse5))) [2022-11-03 01:53:45,018 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2022-11-03 01:53:45,018 INFO L899 garLoopResultBuilder]: For program point L382-1(lines 381 400) no Hoare annotation was computed. [2022-11-03 01:53:45,018 INFO L899 garLoopResultBuilder]: For program point L444(lines 444 452) no Hoare annotation was computed. [2022-11-03 01:53:45,018 INFO L899 garLoopResultBuilder]: For program point L440(lines 440 457) no Hoare annotation was computed. [2022-11-03 01:53:45,019 INFO L899 garLoopResultBuilder]: For program point L279(lines 279 285) no Hoare annotation was computed. [2022-11-03 01:53:45,023 INFO L895 garLoopResultBuilder]: At program point L300(line 300) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 1))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse0 .cse2) (or .cse0 .cse1 .cse5) (or .cse3 .cse4 .cse0 .cse5) (or .cse3 (not (= 0 ~systemActive~0))))) [2022-11-03 01:53:45,023 INFO L895 garLoopResultBuilder]: At program point L482(line 482) the Hoare annotation is: (let ((.cse5 (= ~methAndRunningLastTime~0 0)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 1))) (.cse7 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse1 .cse2 .cse6) (or .cse4 .cse5 .cse1 .cse2 .cse3) (or .cse7 .cse4 .cse1 .cse3) (or .cse7 .cse4 .cse1 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse7 (not (= 0 ~systemActive~0))))) [2022-11-03 01:53:45,023 INFO L895 garLoopResultBuilder]: At program point L482-1(line 482) the Hoare annotation is: (let ((.cse1 (= ~methAndRunningLastTime~0 0)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse3 .cse5) (or .cse6 .cse0 .cse2 .cse5) (or .cse6 .cse0 .cse2 .cse4) (or .cse2 .cse3 (and .cse7 (= |timeShift_isMethaneAlarm_#t~ret18#1| 1)) .cse4) (or (and .cse7 (= |timeShift_isMethaneAlarm_#t~ret18#1| ~methaneLevelCritical~0)) .cse2 .cse3 .cse5) (or .cse6 (not (= 0 ~systemActive~0))))) [2022-11-03 01:53:45,024 INFO L895 garLoopResultBuilder]: At program point L272(line 272) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse13 (= ~waterLevel~0 1)) (.cse8 (= ~methAndRunningLastTime~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 0 ~systemActive~0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse6 (and (<= 1 ~pumpRunning~0) (not .cse13) .cse8 (or .cse0 .cse12))) (.cse7 (and .cse1 .cse8 (or .cse0 .cse12 .cse13))) (.cse11 (= |timeShift_processEnvironment_~tmp~4#1| ~methaneLevelCritical~0)) (.cse4 (not (= 1 ~systemActive~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5 .cse6 .cse7) (or .cse0 .cse3 .cse8 .cse2) (or .cse3 .cse8 .cse4 .cse9 .cse5) (or .cse3 .cse8 .cse4 .cse9 .cse10) (or .cse4 .cse9 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse11) .cse10) (or .cse0 .cse3 .cse4 .cse10 .cse6 .cse7) (or (and .cse1 .cse11) .cse4 .cse9 .cse5)))) [2022-11-03 01:53:45,024 INFO L899 garLoopResultBuilder]: For program point L272-1(line 272) no Hoare annotation was computed. [2022-11-03 01:53:45,024 INFO L895 garLoopResultBuilder]: At program point L450(line 450) the Hoare annotation is: (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse3) (or .cse1 .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_processEnvironment_~tmp~4#1| ~methaneLevelCritical~0)) .cse3) (or .cse1 .cse2 .cse5) (or .cse4 .cse0 .cse1 .cse5) (or .cse4 (not (= 0 ~systemActive~0))))) [2022-11-03 01:53:45,024 INFO L895 garLoopResultBuilder]: At program point L446(line 446) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse4) (or .cse5 .cse3 .cse0 .cse2) (or .cse5 .cse3 .cse0 .cse4) (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_processEnvironment_~tmp~4#1| ~methaneLevelCritical~0)) .cse4) (or .cse5 (not (= 0 ~systemActive~0))))) [2022-11-03 01:53:45,025 INFO L895 garLoopResultBuilder]: At program point L455(line 455) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0)))) (let ((.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (or .cse3 (= |old(~waterLevel~0)| ~waterLevel~0) (= ~waterLevel~0 1)))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse0 .cse5 .cse6) (or .cse3 .cse4 .cse0 .cse2 .cse6) (or .cse0 .cse1 .cse5) (or .cse3 (not (= 0 ~systemActive~0)))))) [2022-11-03 01:53:45,025 INFO L895 garLoopResultBuilder]: At program point L455-1(lines 436 460) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 0)) (.cse12 (= ~waterLevel~0 1)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse4 (and (<= 1 ~pumpRunning~0) (not .cse12) .cse6 (or .cse0 .cse11))) (.cse5 (and .cse10 .cse6 (or .cse0 .cse11 .cse12))) (.cse9 (= |timeShift_processEnvironment_~tmp~4#1| ~methaneLevelCritical~0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse6 .cse2 .cse7 .cse3) (or .cse1 .cse6 .cse2 .cse7 .cse8) (or .cse2 .cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9) .cse8) (or .cse0 .cse1 .cse2 .cse8 .cse4 .cse5) (or (and .cse10 .cse9) .cse2 .cse7 .cse3) (or .cse0 (not (= 0 ~systemActive~0)))))) [2022-11-03 01:53:45,025 INFO L899 garLoopResultBuilder]: For program point L389-1(lines 389 395) no Hoare annotation was computed. [2022-11-03 01:53:45,025 INFO L899 garLoopResultBuilder]: For program point L278(lines 278 288) no Hoare annotation was computed. [2022-11-03 01:53:45,026 INFO L895 garLoopResultBuilder]: At program point L274(lines 274 291) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0))) (let ((.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse2 (not (= 0 ~systemActive~0))) (.cse15 (and .cse12 .cse3)) (.cse4 (= |timeShift_processEnvironment_~tmp~4#1| ~methaneLevelCritical~0)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (= ~methaneLevelCritical~0 1))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse11 (<= 1 ~pumpRunning~0)) (.cse14 (and .cse1 (or .cse0 .cse13 (= ~waterLevel~0 1))))) (and (or .cse0 .cse1 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse4) .cse5 .cse6 .cse7) (or .cse0 .cse1 .cse8 .cse9 .cse5 .cse10) (or .cse0 .cse1 .cse8 .cse9 .cse5 .cse7) (or .cse0 .cse8 .cse5 (and .cse11 .cse12 .cse13) .cse10 .cse14) (or .cse8 .cse12 .cse5 .cse6 .cse7) (or .cse0 .cse8 .cse15 .cse7 .cse2) (or .cse0 .cse8 .cse5 .cse15 .cse7) (or (and .cse1 .cse4) .cse5 .cse6 .cse10) (or .cse0 .cse8 .cse5 .cse7 (and .cse11 .cse13) .cse14)))) [2022-11-03 01:53:45,026 INFO L895 garLoopResultBuilder]: At program point L274-1(lines 266 294) the Hoare annotation is: (let ((.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse16 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse17 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse15 (= 1 ~systemActive~0))) (let ((.cse1 (not (= 0 ~systemActive~0))) (.cse13 (= |timeShift_processEnvironment_~tmp~4#1| ~methaneLevelCritical~0)) (.cse14 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (= ~methaneLevelCritical~0 1))) (.cse6 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not .cse15)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse9 (<= 1 ~pumpRunning~0)) (.cse10 (or .cse0 .cse17)) (.cse11 (and .cse12 .cse2 .cse3 .cse15 (or .cse17 .cse16)))) (and (or .cse0 .cse1 (and .cse2 .cse3)) (or .cse0 .cse4 .cse5 .cse1 .cse6) (or .cse0 .cse4 .cse7 .cse8 (and .cse9 .cse10) .cse11) (or .cse7 (and .cse12 .cse3 .cse6 .cse13) .cse14 .cse5) (or (and .cse2 .cse3 .cse13) .cse7 .cse14 .cse8) (or .cse0 .cse4 (not (= |old(~waterLevel~0)| 1)) .cse7 (and .cse12 .cse2 .cse3 .cse15) .cse8) (or .cse0 .cse4 .cse7 .cse5 .cse6) (or .cse0 .cse4 .cse7 .cse5 (and .cse9 (not .cse16) .cse3 .cse10) .cse11)))) [2022-11-03 01:53:45,026 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 378 401) the Hoare annotation is: (let ((.cse11 (= 1 ~systemActive~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse8 (= ~methAndRunningLastTime~0 0)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse6 (not (= 0 ~systemActive~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse10 (and .cse5 .cse8 .cse12)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (and (<= 1 ~pumpRunning~0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse11 .cse12)) (.cse1 (not .cse11)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6) (or .cse4 .cse7 .cse8 .cse6) (or .cse7 .cse8 .cse1 .cse2 .cse9) (or .cse7 .cse8 .cse1 .cse2 .cse3) (or .cse4 .cse7 .cse1 .cse10 .cse9) (or .cse4 .cse7 .cse1 .cse10 .cse3) (or .cse0 .cse1 .cse2 .cse9)))) [2022-11-03 01:53:45,026 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 378 401) no Hoare annotation was computed. [2022-11-03 01:53:45,027 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 300) no Hoare annotation was computed. [2022-11-03 01:53:45,027 INFO L902 garLoopResultBuilder]: At program point L163-2(lines 163 177) the Hoare annotation is: true [2022-11-03 01:53:45,027 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 153 182) no Hoare annotation was computed. [2022-11-03 01:53:45,031 INFO L902 garLoopResultBuilder]: At program point L159(line 159) the Hoare annotation is: true [2022-11-03 01:53:45,031 INFO L899 garLoopResultBuilder]: For program point L159-1(line 159) no Hoare annotation was computed. [2022-11-03 01:53:45,031 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 153 182) the Hoare annotation is: true [2022-11-03 01:53:45,032 INFO L902 garLoopResultBuilder]: At program point L178(lines 153 182) the Hoare annotation is: true [2022-11-03 01:53:45,032 INFO L899 garLoopResultBuilder]: For program point L174(line 174) no Hoare annotation was computed. [2022-11-03 01:53:45,032 INFO L899 garLoopResultBuilder]: For program point L167(lines 167 171) no Hoare annotation was computed. [2022-11-03 01:53:45,032 INFO L902 garLoopResultBuilder]: At program point L167-1(lines 167 171) the Hoare annotation is: true [2022-11-03 01:53:45,032 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 95 103) the Hoare annotation is: true [2022-11-03 01:53:45,033 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 95 103) no Hoare annotation was computed. [2022-11-03 01:53:45,033 INFO L899 garLoopResultBuilder]: For program point L556(lines 556 562) no Hoare annotation was computed. [2022-11-03 01:53:45,033 INFO L895 garLoopResultBuilder]: At program point L556-1(lines 556 562) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (not (= 0 ~systemActive~0))) (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1))) [2022-11-03 01:53:45,033 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-03 01:53:45,034 INFO L899 garLoopResultBuilder]: For program point L317(lines 316 363) no Hoare annotation was computed. [2022-11-03 01:53:45,034 INFO L899 garLoopResultBuilder]: For program point L346(lines 346 359) no Hoare annotation was computed. [2022-11-03 01:53:45,034 INFO L895 garLoopResultBuilder]: At program point L338(line 338) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 1)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse6 .cse1 .cse3) (and .cse0 .cse6 .cse1 .cse3) (and .cse4 .cse5 .cse3 (= 0 ~systemActive~0)))) [2022-11-03 01:53:45,034 INFO L902 garLoopResultBuilder]: At program point L367(lines 306 371) the Hoare annotation is: true [2022-11-03 01:53:45,034 INFO L899 garLoopResultBuilder]: For program point L326(lines 326 332) no Hoare annotation was computed. [2022-11-03 01:53:45,035 INFO L899 garLoopResultBuilder]: For program point L326-1(lines 326 332) no Hoare annotation was computed. [2022-11-03 01:53:45,035 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-03 01:53:45,035 INFO L895 garLoopResultBuilder]: At program point L558(line 558) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2022-11-03 01:53:45,035 INFO L895 garLoopResultBuilder]: At program point L364(lines 315 365) the Hoare annotation is: false [2022-11-03 01:53:45,035 INFO L899 garLoopResultBuilder]: For program point L352(lines 352 358) no Hoare annotation was computed. [2022-11-03 01:53:45,036 INFO L895 garLoopResultBuilder]: At program point L352-2(lines 346 359) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 1)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse6 .cse1 .cse3) (and .cse4 .cse3 (= 0 ~systemActive~0)) (and .cse0 .cse6 .cse1 .cse3))) [2022-11-03 01:53:45,036 INFO L895 garLoopResultBuilder]: At program point L241(lines 241 248) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-03 01:53:45,036 INFO L899 garLoopResultBuilder]: For program point L336(lines 336 342) no Hoare annotation was computed. [2022-11-03 01:53:45,036 INFO L899 garLoopResultBuilder]: For program point L336-1(lines 336 342) no Hoare annotation was computed. [2022-11-03 01:53:45,037 INFO L902 garLoopResultBuilder]: At program point L241-2(lines 241 248) the Hoare annotation is: true [2022-11-03 01:53:45,037 INFO L895 garLoopResultBuilder]: At program point L361(lines 316 363) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 1)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse6 .cse1 .cse3) (and .cse0 .cse6 .cse1 .cse3) (and .cse4 .cse5 .cse3 (= 0 ~systemActive~0)))) [2022-11-03 01:53:45,037 INFO L895 garLoopResultBuilder]: At program point L328(line 328) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 1)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse6 .cse1 .cse3) (and .cse0 .cse6 .cse1 .cse3) (and .cse4 .cse5 .cse3 (= 0 ~systemActive~0)))) [2022-11-03 01:53:45,037 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 410 434) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 1)) .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse4) (or .cse0 .cse1 .cse2 .cse4 .cse3))) [2022-11-03 01:53:45,038 INFO L895 garLoopResultBuilder]: At program point L424(line 424) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and (= ~pumpRunning~0 0) (or (not (= ~waterLevel~0 1)) (and (<= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0) (< 0 (+ |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 1)))))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse3 .cse1 .cse4) (or .cse2 .cse0 .cse3 (not (= ~methaneLevelCritical~0 1)) .cse4))) [2022-11-03 01:53:45,038 INFO L895 garLoopResultBuilder]: At program point L418(lines 418 426) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and (= ~pumpRunning~0 0) (or (not (= ~waterLevel~0 1)) (and (<= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0) (< 0 (+ |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 1)))))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse3 .cse1 .cse4) (or .cse2 .cse0 .cse3 (not (= ~methaneLevelCritical~0 1)) .cse4))) [2022-11-03 01:53:45,039 INFO L895 garLoopResultBuilder]: At program point L414(lines 414 431) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 1)) .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse4) (or .cse0 .cse1 .cse2 .cse4 .cse3))) [2022-11-03 01:53:45,039 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 410 434) no Hoare annotation was computed. [2022-11-03 01:53:45,039 INFO L895 garLoopResultBuilder]: At program point L429(line 429) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 1)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse3) (or .cse0 .cse1 .cse3 .cse2))) [2022-11-03 01:53:45,040 INFO L899 garLoopResultBuilder]: For program point L429-1(lines 410 434) no Hoare annotation was computed. [2022-11-03 01:53:45,040 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2022-11-03 01:53:45,040 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 71 82) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (<= 1 ~pumpRunning~0))) (let ((.cse4 (not (= ~pumpRunning~0 0))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse7 (not (= ~methAndRunningLastTime~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not .cse8)) (.cse3 (and .cse8 .cse6))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse6 .cse7) (or .cse4 .cse0 .cse2 .cse6 .cse7) (or .cse0 .cse5 .cse1 .cse3)))) [2022-11-03 01:53:45,044 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:53:45,046 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-03 01:53:45,086 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 03.11 01:53:45 BoogieIcfgContainer [2022-11-03 01:53:45,086 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-03 01:53:45,087 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-03 01:53:45,087 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-03 01:53:45,088 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-03 01:53:45,088 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 01:52:57" (3/4) ... [2022-11-03 01:53:45,092 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-03 01:53:45,099 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-03 01:53:45,100 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-03 01:53:45,100 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-03 01:53:45,100 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-03 01:53:45,100 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-03 01:53:45,100 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-03 01:53:45,101 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 01:53:45,101 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-03 01:53:45,110 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 72 nodes and edges [2022-11-03 01:53:45,111 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 25 nodes and edges [2022-11-03 01:53:45,112 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 13 nodes and edges [2022-11-03 01:53:45,112 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-03 01:53:45,113 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-03 01:53:45,114 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 01:53:45,114 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 01:53:45,147 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 1))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0))) && ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) [2022-11-03 01:53:45,148 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (((1 <= pumpRunning && !(waterLevel == 1)) && methAndRunningLastTime == 0) && (!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel))) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && ((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || waterLevel == 1))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && !(waterLevel == 1)) && methAndRunningLastTime == 0) && (!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel))) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && ((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || waterLevel == 1)))) && ((((pumpRunning == 0 && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-03 01:53:45,149 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(methAndRunningLastTime == 0)) [2022-11-03 01:53:45,149 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive)) && (((((pumpRunning == \old(pumpRunning) && tmp == 0) && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 1)) || (pumpRunning == 0 && ((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || waterLevel == 1)))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(methaneLevelCritical == 0))) && ((((pumpRunning == 0 && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || (pumpRunning == 0 && ((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || waterLevel == 1))) [2022-11-03 01:53:45,149 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && aux-isMethaneLevelCritical()-aux == 1)) || !(methaneLevelCritical == 1))) && ((((pumpRunning == \old(pumpRunning) && aux-isMethaneLevelCritical()-aux == methaneLevelCritical) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-03 01:53:45,150 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || (pumpRunning == 0 && methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) || tmp == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (1 <= pumpRunning && (!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && (\old(waterLevel) == waterLevel || waterLevel == 1)))) && (((!(1 == systemActive) || (((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0) && tmp == methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive)) || !(methaneLevelCritical == 1))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || tmp == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && !(waterLevel == 1)) && methAndRunningLastTime == 0) && (!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && (\old(waterLevel) == waterLevel || waterLevel == 1))) [2022-11-03 01:53:45,151 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-03 01:53:45,152 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && (!(waterLevel == 1) || (tmp <= 0 && 0 < tmp + 1)))) || !(methaneLevelCritical == 0)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && (!(waterLevel == 1) || (tmp <= 0 && 0 < tmp + 1)))) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0)) [2022-11-03 01:53:45,180 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/witness.graphml [2022-11-03 01:53:45,180 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-03 01:53:45,181 INFO L158 Benchmark]: Toolchain (without parser) took 49863.53ms. Allocated memory was 125.8MB in the beginning and 408.9MB in the end (delta: 283.1MB). Free memory was 90.2MB in the beginning and 281.9MB in the end (delta: -191.8MB). Peak memory consumption was 91.1MB. Max. memory is 16.1GB. [2022-11-03 01:53:45,181 INFO L158 Benchmark]: CDTParser took 0.33ms. Allocated memory is still 94.4MB. Free memory was 67.4MB in the beginning and 67.4MB in the end (delta: 31.8kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 01:53:45,182 INFO L158 Benchmark]: CACSL2BoogieTranslator took 828.85ms. Allocated memory is still 125.8MB. Free memory was 90.2MB in the beginning and 90.7MB in the end (delta: -558.2kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-11-03 01:53:45,182 INFO L158 Benchmark]: Boogie Procedure Inliner took 93.30ms. Allocated memory is still 125.8MB. Free memory was 90.7MB in the beginning and 88.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 01:53:45,183 INFO L158 Benchmark]: Boogie Preprocessor took 34.25ms. Allocated memory is still 125.8MB. Free memory was 88.6MB in the beginning and 87.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 01:53:45,183 INFO L158 Benchmark]: RCFGBuilder took 865.69ms. Allocated memory is still 125.8MB. Free memory was 86.5MB in the beginning and 97.3MB in the end (delta: -10.8MB). Peak memory consumption was 32.3MB. Max. memory is 16.1GB. [2022-11-03 01:53:45,184 INFO L158 Benchmark]: TraceAbstraction took 47940.23ms. Allocated memory was 125.8MB in the beginning and 408.9MB in the end (delta: 283.1MB). Free memory was 97.1MB in the beginning and 288.3MB in the end (delta: -191.2MB). Peak memory consumption was 246.8MB. Max. memory is 16.1GB. [2022-11-03 01:53:45,184 INFO L158 Benchmark]: Witness Printer took 93.40ms. Allocated memory is still 408.9MB. Free memory was 288.3MB in the beginning and 281.9MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-03 01:53:45,187 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.33ms. Allocated memory is still 94.4MB. Free memory was 67.4MB in the beginning and 67.4MB in the end (delta: 31.8kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 828.85ms. Allocated memory is still 125.8MB. Free memory was 90.2MB in the beginning and 90.7MB in the end (delta: -558.2kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 93.30ms. Allocated memory is still 125.8MB. Free memory was 90.7MB in the beginning and 88.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 34.25ms. Allocated memory is still 125.8MB. Free memory was 88.6MB in the beginning and 87.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 865.69ms. Allocated memory is still 125.8MB. Free memory was 86.5MB in the beginning and 97.3MB in the end (delta: -10.8MB). Peak memory consumption was 32.3MB. Max. memory is 16.1GB. * TraceAbstraction took 47940.23ms. Allocated memory was 125.8MB in the beginning and 408.9MB in the end (delta: 283.1MB). Free memory was 97.1MB in the beginning and 288.3MB in the end (delta: -191.2MB). Peak memory consumption was 246.8MB. Max. memory is 16.1GB. * Witness Printer took 93.40ms. Allocated memory is still 408.9MB. Free memory was 288.3MB in the beginning and 281.9MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 300]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 66 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 47.8s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 3.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 958 SdHoareTripleChecker+Valid, 2.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 934 mSDsluCounter, 2020 SdHoareTripleChecker+Invalid, 1.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1459 mSDsCounter, 319 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1795 IncrementalHoareTripleChecker+Invalid, 2114 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 319 mSolverCounterUnsat, 814 mSDtfsCounter, 1795 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 453 GetRequests, 321 SyntacticMatches, 11 SemanticMatches, 121 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1611 ImplicationChecksByTransitivity, 14.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=604occurred in iteration=6, InterpolantAutomatonStates: 80, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 140 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 37 LocationsWithAnnotation, 1355 PreInvPairs, 1498 NumberOfFragments, 2534 HoareAnnotationTreeSize, 1355 FomulaSimplifications, 2732 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 37 FomulaSimplificationsInter, 12687 FormulaSimplificationTreeSizeReductionInter, 5.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 3.8s InterpolantComputationTime, 742 NumberOfCodeBlocks, 742 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 796 ConstructedInterpolants, 0 QuantifiedInterpolants, 2153 SizeOfPredicates, 13 NumberOfNonLiveVariables, 1322 ConjunctsInSsa, 53 ConjunctsInUnsatCore, 16 InterpolantComputations, 11 PerfectInterpolantSequences, 230/282 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 482]: Loop Invariant Derived loop invariant: (((((((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && aux-isMethaneLevelCritical()-aux == 1)) || !(methaneLevelCritical == 1))) && ((((pumpRunning == \old(pumpRunning) && aux-isMethaneLevelCritical()-aux == methaneLevelCritical) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 418]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && (!(waterLevel == 1) || (tmp <= 0 && 0 < tmp + 1)))) || !(methaneLevelCritical == 0)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && (!(waterLevel == 1) || (tmp <= 0 && 0 < tmp + 1)))) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 556]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && splverifierCounter == 0) && !(0 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 378]: Loop Invariant Derived loop invariant: ((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 1))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0))) && ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: ((((((1 <= pumpRunning && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || (((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 414]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 300]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || (pumpRunning == 0 && methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) || tmp == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (1 <= pumpRunning && (!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && (\old(waterLevel) == waterLevel || waterLevel == 1)))) && (((!(1 == systemActive) || (((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0) && tmp == methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive)) || !(methaneLevelCritical == 1))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || tmp == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && !(waterLevel == 1)) && methAndRunningLastTime == 0) && (!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && (\old(waterLevel) == waterLevel || waterLevel == 1))) - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (((1 <= pumpRunning && !(waterLevel == 1)) && methAndRunningLastTime == 0) && (!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel))) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && ((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || waterLevel == 1))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && !(waterLevel == 1)) && methAndRunningLastTime == 0) && (!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel))) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && ((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || waterLevel == 1)))) && ((((pumpRunning == 0 && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 153]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive)) && (((((pumpRunning == \old(pumpRunning) && tmp == 0) && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 1)) || (pumpRunning == 0 && ((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || waterLevel == 1)))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(methaneLevelCritical == 0))) && ((((pumpRunning == 0 && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || (pumpRunning == 0 && ((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || waterLevel == 1))) RESULT: Ultimate proved your program to be correct! [2022-11-03 01:53:45,275 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3b7cf12a-f516-498a-a3cd-164adb8e89bd/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE