./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product49.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product49.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 8ebbbe9395fd7f6497497f0e6f84282075bb296e20acc9821d0fb2d7075b331d --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 03:50:18,548 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 03:50:18,551 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 03:50:18,602 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 03:50:18,602 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 03:50:18,607 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 03:50:18,609 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 03:50:18,614 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 03:50:18,616 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 03:50:18,625 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 03:50:18,626 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 03:50:18,628 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 03:50:18,629 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 03:50:18,632 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 03:50:18,634 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 03:50:18,635 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 03:50:18,638 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 03:50:18,639 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 03:50:18,640 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 03:50:18,648 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 03:50:18,651 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 03:50:18,654 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 03:50:18,656 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 03:50:18,657 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 03:50:18,664 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 03:50:18,664 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 03:50:18,665 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 03:50:18,666 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 03:50:18,666 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 03:50:18,667 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 03:50:18,668 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 03:50:18,669 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 03:50:18,669 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 03:50:18,670 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 03:50:18,671 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 03:50:18,672 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 03:50:18,673 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 03:50:18,673 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 03:50:18,673 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 03:50:18,682 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 03:50:18,683 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 03:50:18,684 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-03 03:50:18,734 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 03:50:18,734 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 03:50:18,735 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 03:50:18,735 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 03:50:18,736 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 03:50:18,737 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 03:50:18,737 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 03:50:18,737 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 03:50:18,738 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 03:50:18,738 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-03 03:50:18,739 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 03:50:18,740 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 03:50:18,740 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-03 03:50:18,740 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-03 03:50:18,740 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 03:50:18,741 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-03 03:50:18,741 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-03 03:50:18,741 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-03 03:50:18,742 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 03:50:18,742 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-03 03:50:18,743 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-03 03:50:18,743 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-03 03:50:18,743 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 03:50:18,745 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-03 03:50:18,745 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 03:50:18,746 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-03 03:50:18,746 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-03 03:50:18,746 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-03 03:50:18,747 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 03:50:18,747 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-03 03:50:18,747 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 03:50:18,748 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 03:50:18,749 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 03:50:18,749 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 03:50:18,749 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-03 03:50:18,750 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 03:50:18,750 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-03 03:50:18,750 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-03 03:50:18,750 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-03 03:50:18,751 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-03 03:50:18,751 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 03:50:18,751 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8ebbbe9395fd7f6497497f0e6f84282075bb296e20acc9821d0fb2d7075b331d [2022-11-03 03:50:19,095 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 03:50:19,130 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 03:50:19,133 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 03:50:19,134 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 03:50:19,135 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 03:50:19,137 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/product-lines/minepump_spec2_product49.cil.c [2022-11-03 03:50:19,220 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/data/b85288568/4ae6d348be9343d9b37f74c6a0a78049/FLAG09294234e [2022-11-03 03:50:19,758 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 03:50:19,759 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/sv-benchmarks/c/product-lines/minepump_spec2_product49.cil.c [2022-11-03 03:50:19,773 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/data/b85288568/4ae6d348be9343d9b37f74c6a0a78049/FLAG09294234e [2022-11-03 03:50:20,082 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/data/b85288568/4ae6d348be9343d9b37f74c6a0a78049 [2022-11-03 03:50:20,085 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 03:50:20,087 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 03:50:20,089 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 03:50:20,089 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 03:50:20,093 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 03:50:20,094 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 03:50:20" (1/1) ... [2022-11-03 03:50:20,096 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2b9a52ce and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:50:20, skipping insertion in model container [2022-11-03 03:50:20,096 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 03:50:20" (1/1) ... [2022-11-03 03:50:20,105 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 03:50:20,149 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 03:50:20,615 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/sv-benchmarks/c/product-lines/minepump_spec2_product49.cil.c[18359,18372] [2022-11-03 03:50:20,620 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 03:50:20,637 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 03:50:20,744 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/sv-benchmarks/c/product-lines/minepump_spec2_product49.cil.c[18359,18372] [2022-11-03 03:50:20,755 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 03:50:20,777 INFO L208 MainTranslator]: Completed translation [2022-11-03 03:50:20,778 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:50:20 WrapperNode [2022-11-03 03:50:20,778 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 03:50:20,779 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 03:50:20,779 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 03:50:20,779 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 03:50:20,787 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:50:20" (1/1) ... [2022-11-03 03:50:20,814 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:50:20" (1/1) ... [2022-11-03 03:50:20,857 INFO L138 Inliner]: procedures = 56, calls = 155, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 259 [2022-11-03 03:50:20,859 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 03:50:20,860 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 03:50:20,861 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 03:50:20,861 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 03:50:20,870 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:50:20" (1/1) ... [2022-11-03 03:50:20,871 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:50:20" (1/1) ... [2022-11-03 03:50:20,884 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:50:20" (1/1) ... [2022-11-03 03:50:20,892 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:50:20" (1/1) ... [2022-11-03 03:50:20,897 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:50:20" (1/1) ... [2022-11-03 03:50:20,916 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:50:20" (1/1) ... [2022-11-03 03:50:20,918 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:50:20" (1/1) ... [2022-11-03 03:50:20,919 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:50:20" (1/1) ... [2022-11-03 03:50:20,921 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 03:50:20,922 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 03:50:20,922 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 03:50:20,922 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 03:50:20,923 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:50:20" (1/1) ... [2022-11-03 03:50:20,931 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 03:50:20,943 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 03:50:20,959 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 03:50:20,974 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 03:50:21,004 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-03 03:50:21,005 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-03 03:50:21,005 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-03 03:50:21,005 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-03 03:50:21,005 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-03 03:50:21,005 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-03 03:50:21,005 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-03 03:50:21,005 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-03 03:50:21,006 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-03 03:50:21,006 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 03:50:21,006 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 03:50:21,006 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-03 03:50:21,006 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-03 03:50:21,006 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-03 03:50:21,006 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-03 03:50:21,006 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-03 03:50:21,007 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 03:50:21,007 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 03:50:21,112 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 03:50:21,114 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 03:50:21,473 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 03:50:21,583 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 03:50:21,583 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-03 03:50:21,586 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 03:50:21 BoogieIcfgContainer [2022-11-03 03:50:21,586 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 03:50:21,588 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 03:50:21,589 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 03:50:21,601 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 03:50:21,601 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 03:50:20" (1/3) ... [2022-11-03 03:50:21,602 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@372489c5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 03:50:21, skipping insertion in model container [2022-11-03 03:50:21,602 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:50:20" (2/3) ... [2022-11-03 03:50:21,602 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@372489c5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 03:50:21, skipping insertion in model container [2022-11-03 03:50:21,603 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 03:50:21" (3/3) ... [2022-11-03 03:50:21,604 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product49.cil.c [2022-11-03 03:50:21,622 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 03:50:21,623 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-03 03:50:21,671 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 03:50:21,678 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7ed198cb, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 03:50:21,679 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-03 03:50:21,683 INFO L276 IsEmpty]: Start isEmpty. Operand has 56 states, 36 states have (on average 1.4444444444444444) internal successors, (52), 44 states have internal predecessors, (52), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-03 03:50:21,691 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-03 03:50:21,692 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:50:21,692 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:50:21,693 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:50:21,698 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:50:21,698 INFO L85 PathProgramCache]: Analyzing trace with hash -1941332222, now seen corresponding path program 1 times [2022-11-03 03:50:21,708 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:50:21,708 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1647752778] [2022-11-03 03:50:21,708 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:50:21,709 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:50:21,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:50:21,898 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:50:21,898 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:50:21,898 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1647752778] [2022-11-03 03:50:21,899 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1647752778] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:50:21,899 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:50:21,900 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 03:50:21,901 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2142171002] [2022-11-03 03:50:21,902 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:50:21,906 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-03 03:50:21,906 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:50:21,933 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-03 03:50:21,934 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 03:50:21,936 INFO L87 Difference]: Start difference. First operand has 56 states, 36 states have (on average 1.4444444444444444) internal successors, (52), 44 states have internal predecessors, (52), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:50:22,000 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:50:22,000 INFO L93 Difference]: Finished difference Result 110 states and 149 transitions. [2022-11-03 03:50:22,001 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-03 03:50:22,003 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-11-03 03:50:22,003 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:50:22,012 INFO L225 Difference]: With dead ends: 110 [2022-11-03 03:50:22,012 INFO L226 Difference]: Without dead ends: 51 [2022-11-03 03:50:22,015 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 03:50:22,018 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 54 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 03:50:22,020 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 54 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 03:50:22,036 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51 states. [2022-11-03 03:50:22,055 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51. [2022-11-03 03:50:22,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 33 states have (on average 1.3333333333333333) internal successors, (44), 40 states have internal predecessors, (44), 11 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2022-11-03 03:50:22,059 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 65 transitions. [2022-11-03 03:50:22,060 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 65 transitions. Word has length 17 [2022-11-03 03:50:22,060 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:50:22,061 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 65 transitions. [2022-11-03 03:50:22,061 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:50:22,061 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 65 transitions. [2022-11-03 03:50:22,063 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-03 03:50:22,063 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:50:22,063 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:50:22,063 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-03 03:50:22,064 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:50:22,064 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:50:22,065 INFO L85 PathProgramCache]: Analyzing trace with hash -908573725, now seen corresponding path program 1 times [2022-11-03 03:50:22,065 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:50:22,065 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [386903440] [2022-11-03 03:50:22,065 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:50:22,066 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:50:22,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:50:22,229 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:50:22,229 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:50:22,231 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [386903440] [2022-11-03 03:50:22,232 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [386903440] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:50:22,232 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:50:22,232 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 03:50:22,232 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1366581138] [2022-11-03 03:50:22,233 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:50:22,234 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 03:50:22,234 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:50:22,235 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 03:50:22,235 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 03:50:22,235 INFO L87 Difference]: Start difference. First operand 51 states and 65 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:50:22,278 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:50:22,278 INFO L93 Difference]: Finished difference Result 79 states and 101 transitions. [2022-11-03 03:50:22,279 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 03:50:22,279 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-11-03 03:50:22,279 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:50:22,280 INFO L225 Difference]: With dead ends: 79 [2022-11-03 03:50:22,280 INFO L226 Difference]: Without dead ends: 43 [2022-11-03 03:50:22,281 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 03:50:22,283 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 7 mSDsluCounter, 42 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 71 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 03:50:22,283 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 71 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 03:50:22,284 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2022-11-03 03:50:22,289 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 43. [2022-11-03 03:50:22,290 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 28 states have (on average 1.3571428571428572) internal successors, (38), 35 states have internal predecessors, (38), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2022-11-03 03:50:22,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 54 transitions. [2022-11-03 03:50:22,291 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 54 transitions. Word has length 18 [2022-11-03 03:50:22,292 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:50:22,310 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 54 transitions. [2022-11-03 03:50:22,310 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:50:22,310 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 54 transitions. [2022-11-03 03:50:22,311 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-03 03:50:22,311 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:50:22,312 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:50:22,312 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-03 03:50:22,312 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:50:22,312 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:50:22,313 INFO L85 PathProgramCache]: Analyzing trace with hash -759752505, now seen corresponding path program 1 times [2022-11-03 03:50:22,313 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:50:22,313 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1779943281] [2022-11-03 03:50:22,313 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:50:22,314 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:50:22,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:50:22,456 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:50:22,456 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:50:22,456 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1779943281] [2022-11-03 03:50:22,457 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1779943281] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:50:22,457 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:50:22,457 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 03:50:22,457 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [552925731] [2022-11-03 03:50:22,457 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:50:22,458 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 03:50:22,458 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:50:22,458 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 03:50:22,459 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 03:50:22,459 INFO L87 Difference]: Start difference. First operand 43 states and 54 transitions. Second operand has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:50:22,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:50:22,580 INFO L93 Difference]: Finished difference Result 84 states and 107 transitions. [2022-11-03 03:50:22,580 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 03:50:22,580 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2022-11-03 03:50:22,581 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:50:22,582 INFO L225 Difference]: With dead ends: 84 [2022-11-03 03:50:22,582 INFO L226 Difference]: Without dead ends: 43 [2022-11-03 03:50:22,582 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 03:50:22,584 INFO L413 NwaCegarLoop]: 35 mSDtfsCounter, 50 mSDsluCounter, 26 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 50 SdHoareTripleChecker+Valid, 51 SdHoareTripleChecker+Invalid, 48 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 03:50:22,584 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [50 Valid, 51 Invalid, 48 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 03:50:22,585 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2022-11-03 03:50:22,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 43. [2022-11-03 03:50:22,597 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 28 states have (on average 1.3214285714285714) internal successors, (37), 35 states have internal predecessors, (37), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2022-11-03 03:50:22,598 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 53 transitions. [2022-11-03 03:50:22,598 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 53 transitions. Word has length 20 [2022-11-03 03:50:22,598 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:50:22,598 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 53 transitions. [2022-11-03 03:50:22,599 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:50:22,599 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 53 transitions. [2022-11-03 03:50:22,600 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-03 03:50:22,600 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:50:22,600 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:50:22,600 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-03 03:50:22,600 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:50:22,601 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:50:22,601 INFO L85 PathProgramCache]: Analyzing trace with hash -1480723860, now seen corresponding path program 1 times [2022-11-03 03:50:22,601 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:50:22,601 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1840321213] [2022-11-03 03:50:22,602 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:50:22,602 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:50:22,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:50:22,748 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:50:22,748 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:50:22,748 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1840321213] [2022-11-03 03:50:22,749 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1840321213] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:50:22,749 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:50:22,749 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 03:50:22,749 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1830399143] [2022-11-03 03:50:22,749 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:50:22,750 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 03:50:22,750 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:50:22,750 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 03:50:22,751 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 03:50:22,751 INFO L87 Difference]: Start difference. First operand 43 states and 53 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:50:22,806 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:50:22,806 INFO L93 Difference]: Finished difference Result 119 states and 150 transitions. [2022-11-03 03:50:22,806 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 03:50:22,807 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-11-03 03:50:22,807 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:50:22,817 INFO L225 Difference]: With dead ends: 119 [2022-11-03 03:50:22,817 INFO L226 Difference]: Without dead ends: 78 [2022-11-03 03:50:22,818 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 03:50:22,819 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 35 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 90 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 03:50:22,820 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 90 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 03:50:22,820 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-11-03 03:50:22,853 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 76. [2022-11-03 03:50:22,854 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 51 states have (on average 1.2745098039215685) internal successors, (65), 58 states have internal predecessors, (65), 12 states have call successors, (12), 12 states have call predecessors, (12), 12 states have return successors, (16), 12 states have call predecessors, (16), 12 states have call successors, (16) [2022-11-03 03:50:22,856 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 93 transitions. [2022-11-03 03:50:22,856 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 93 transitions. Word has length 23 [2022-11-03 03:50:22,856 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:50:22,856 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 93 transitions. [2022-11-03 03:50:22,856 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:50:22,856 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 93 transitions. [2022-11-03 03:50:22,858 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-03 03:50:22,858 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:50:22,858 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:50:22,858 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-03 03:50:22,858 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:50:22,859 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:50:22,859 INFO L85 PathProgramCache]: Analyzing trace with hash -1160546660, now seen corresponding path program 1 times [2022-11-03 03:50:22,859 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:50:22,859 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1968465689] [2022-11-03 03:50:22,859 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:50:22,860 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:50:22,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:50:22,982 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:50:22,982 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:50:22,982 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1968465689] [2022-11-03 03:50:22,983 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1968465689] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:50:22,983 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:50:22,983 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 03:50:22,983 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2032122660] [2022-11-03 03:50:22,984 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:50:22,984 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 03:50:22,984 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:50:22,985 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 03:50:22,985 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-03 03:50:22,985 INFO L87 Difference]: Start difference. First operand 76 states and 93 transitions. Second operand has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 03:50:23,164 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:50:23,164 INFO L93 Difference]: Finished difference Result 220 states and 276 transitions. [2022-11-03 03:50:23,165 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-03 03:50:23,165 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 28 [2022-11-03 03:50:23,165 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:50:23,167 INFO L225 Difference]: With dead ends: 220 [2022-11-03 03:50:23,170 INFO L226 Difference]: Without dead ends: 146 [2022-11-03 03:50:23,171 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-03 03:50:23,175 INFO L413 NwaCegarLoop]: 45 mSDtfsCounter, 30 mSDsluCounter, 198 mSDsCounter, 0 mSdLazyCounter, 94 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 32 SdHoareTripleChecker+Valid, 199 SdHoareTripleChecker+Invalid, 96 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 94 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 03:50:23,176 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [32 Valid, 199 Invalid, 96 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 94 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 03:50:23,177 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 146 states. [2022-11-03 03:50:23,212 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 146 to 138. [2022-11-03 03:50:23,215 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 138 states, 93 states have (on average 1.2365591397849462) internal successors, (115), 104 states have internal predecessors, (115), 22 states have call successors, (22), 22 states have call predecessors, (22), 22 states have return successors, (30), 22 states have call predecessors, (30), 22 states have call successors, (30) [2022-11-03 03:50:23,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 138 states to 138 states and 167 transitions. [2022-11-03 03:50:23,224 INFO L78 Accepts]: Start accepts. Automaton has 138 states and 167 transitions. Word has length 28 [2022-11-03 03:50:23,224 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:50:23,224 INFO L495 AbstractCegarLoop]: Abstraction has 138 states and 167 transitions. [2022-11-03 03:50:23,224 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 03:50:23,225 INFO L276 IsEmpty]: Start isEmpty. Operand 138 states and 167 transitions. [2022-11-03 03:50:23,228 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-03 03:50:23,230 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:50:23,230 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:50:23,230 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-03 03:50:23,231 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:50:23,233 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:50:23,233 INFO L85 PathProgramCache]: Analyzing trace with hash 1579103765, now seen corresponding path program 1 times [2022-11-03 03:50:23,234 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:50:23,234 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [694711692] [2022-11-03 03:50:23,234 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:50:23,234 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:50:23,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:50:23,364 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:50:23,364 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:50:23,364 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [694711692] [2022-11-03 03:50:23,365 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [694711692] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:50:23,365 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:50:23,365 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 03:50:23,365 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1043302215] [2022-11-03 03:50:23,366 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:50:23,368 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 03:50:23,369 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:50:23,369 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 03:50:23,369 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 03:50:23,370 INFO L87 Difference]: Start difference. First operand 138 states and 167 transitions. Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-03 03:50:23,457 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:50:23,457 INFO L93 Difference]: Finished difference Result 212 states and 266 transitions. [2022-11-03 03:50:23,458 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 03:50:23,458 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 31 [2022-11-03 03:50:23,460 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:50:23,464 INFO L225 Difference]: With dead ends: 212 [2022-11-03 03:50:23,465 INFO L226 Difference]: Without dead ends: 210 [2022-11-03 03:50:23,465 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 03:50:23,466 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 29 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 82 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 03:50:23,467 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [29 Valid, 82 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 03:50:23,468 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 210 states. [2022-11-03 03:50:23,512 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 210. [2022-11-03 03:50:23,515 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 141 states have (on average 1.2411347517730495) internal successors, (175), 158 states have internal predecessors, (175), 34 states have call successors, (34), 34 states have call predecessors, (34), 34 states have return successors, (54), 34 states have call predecessors, (54), 34 states have call successors, (54) [2022-11-03 03:50:23,518 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 263 transitions. [2022-11-03 03:50:23,519 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 263 transitions. Word has length 31 [2022-11-03 03:50:23,520 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:50:23,520 INFO L495 AbstractCegarLoop]: Abstraction has 210 states and 263 transitions. [2022-11-03 03:50:23,520 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-03 03:50:23,520 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 263 transitions. [2022-11-03 03:50:23,524 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-03 03:50:23,526 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:50:23,527 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:50:23,527 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-03 03:50:23,528 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:50:23,528 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:50:23,530 INFO L85 PathProgramCache]: Analyzing trace with hash -672457244, now seen corresponding path program 1 times [2022-11-03 03:50:23,530 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:50:23,530 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1493225246] [2022-11-03 03:50:23,530 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:50:23,531 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:50:23,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:50:23,978 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 03:50:23,978 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:50:23,978 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1493225246] [2022-11-03 03:50:23,979 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1493225246] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:50:23,979 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:50:23,979 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-03 03:50:23,979 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [922452901] [2022-11-03 03:50:23,979 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:50:23,980 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-03 03:50:23,980 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:50:23,980 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-03 03:50:23,981 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-11-03 03:50:23,981 INFO L87 Difference]: Start difference. First operand 210 states and 263 transitions. Second operand has 8 states, 8 states have (on average 5.125) internal successors, (41), 7 states have internal predecessors, (41), 4 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-03 03:50:24,485 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:50:24,486 INFO L93 Difference]: Finished difference Result 695 states and 894 transitions. [2022-11-03 03:50:24,486 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-03 03:50:24,486 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.125) internal successors, (41), 7 states have internal predecessors, (41), 4 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 53 [2022-11-03 03:50:24,487 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:50:24,490 INFO L225 Difference]: With dead ends: 695 [2022-11-03 03:50:24,490 INFO L226 Difference]: Without dead ends: 487 [2022-11-03 03:50:24,492 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=56, Invalid=126, Unknown=0, NotChecked=0, Total=182 [2022-11-03 03:50:24,492 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 164 mSDsluCounter, 163 mSDsCounter, 0 mSdLazyCounter, 256 mSolverCounterSat, 87 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 174 SdHoareTripleChecker+Valid, 197 SdHoareTripleChecker+Invalid, 343 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 87 IncrementalHoareTripleChecker+Valid, 256 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 03:50:24,493 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [174 Valid, 197 Invalid, 343 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [87 Valid, 256 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 03:50:24,494 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 487 states. [2022-11-03 03:50:24,569 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 487 to 341. [2022-11-03 03:50:24,570 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 341 states, 232 states have (on average 1.2155172413793103) internal successors, (282), 251 states have internal predecessors, (282), 51 states have call successors, (51), 51 states have call predecessors, (51), 57 states have return successors, (81), 54 states have call predecessors, (81), 51 states have call successors, (81) [2022-11-03 03:50:24,573 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 341 states to 341 states and 414 transitions. [2022-11-03 03:50:24,573 INFO L78 Accepts]: Start accepts. Automaton has 341 states and 414 transitions. Word has length 53 [2022-11-03 03:50:24,575 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:50:24,575 INFO L495 AbstractCegarLoop]: Abstraction has 341 states and 414 transitions. [2022-11-03 03:50:24,575 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.125) internal successors, (41), 7 states have internal predecessors, (41), 4 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-03 03:50:24,576 INFO L276 IsEmpty]: Start isEmpty. Operand 341 states and 414 transitions. [2022-11-03 03:50:24,580 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-03 03:50:24,580 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:50:24,581 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:50:24,581 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-03 03:50:24,582 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:50:24,583 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:50:24,583 INFO L85 PathProgramCache]: Analyzing trace with hash 513446656, now seen corresponding path program 1 times [2022-11-03 03:50:24,583 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:50:24,584 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [984978240] [2022-11-03 03:50:24,584 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:50:24,584 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:50:24,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:50:24,766 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-03 03:50:24,766 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:50:24,766 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [984978240] [2022-11-03 03:50:24,767 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [984978240] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:50:24,768 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:50:24,771 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 03:50:24,771 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [712571478] [2022-11-03 03:50:24,771 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:50:24,772 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 03:50:24,772 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:50:24,773 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 03:50:24,773 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 03:50:24,773 INFO L87 Difference]: Start difference. First operand 341 states and 414 transitions. Second operand has 4 states, 4 states have (on average 9.0) internal successors, (36), 4 states have internal predecessors, (36), 2 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-03 03:50:24,896 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:50:24,897 INFO L93 Difference]: Finished difference Result 533 states and 658 transitions. [2022-11-03 03:50:24,897 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 03:50:24,898 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.0) internal successors, (36), 4 states have internal predecessors, (36), 2 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 56 [2022-11-03 03:50:24,898 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:50:24,900 INFO L225 Difference]: With dead ends: 533 [2022-11-03 03:50:24,901 INFO L226 Difference]: Without dead ends: 295 [2022-11-03 03:50:24,902 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 03:50:24,903 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 38 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 53 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 144 SdHoareTripleChecker+Invalid, 57 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 53 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 03:50:24,903 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 144 Invalid, 57 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 53 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 03:50:24,904 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 295 states. [2022-11-03 03:50:24,970 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 295 to 279. [2022-11-03 03:50:24,971 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 279 states, 188 states have (on average 1.202127659574468) internal successors, (226), 204 states have internal predecessors, (226), 42 states have call successors, (42), 42 states have call predecessors, (42), 48 states have return successors, (64), 44 states have call predecessors, (64), 42 states have call successors, (64) [2022-11-03 03:50:24,974 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 279 states to 279 states and 332 transitions. [2022-11-03 03:50:24,974 INFO L78 Accepts]: Start accepts. Automaton has 279 states and 332 transitions. Word has length 56 [2022-11-03 03:50:24,975 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:50:24,975 INFO L495 AbstractCegarLoop]: Abstraction has 279 states and 332 transitions. [2022-11-03 03:50:24,976 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.0) internal successors, (36), 4 states have internal predecessors, (36), 2 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-03 03:50:24,976 INFO L276 IsEmpty]: Start isEmpty. Operand 279 states and 332 transitions. [2022-11-03 03:50:24,979 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-11-03 03:50:24,979 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:50:24,979 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:50:24,979 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-03 03:50:24,980 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:50:24,980 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:50:24,980 INFO L85 PathProgramCache]: Analyzing trace with hash 828904072, now seen corresponding path program 1 times [2022-11-03 03:50:24,980 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:50:24,980 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1979986308] [2022-11-03 03:50:24,981 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:50:24,981 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:50:25,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:50:25,180 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 18 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-03 03:50:25,180 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:50:25,180 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1979986308] [2022-11-03 03:50:25,180 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1979986308] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 03:50:25,180 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1528479327] [2022-11-03 03:50:25,181 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:50:25,181 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:50:25,181 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 03:50:25,186 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 03:50:25,210 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-03 03:50:25,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:50:25,354 INFO L263 TraceCheckSpWp]: Trace formula consists of 436 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-03 03:50:25,364 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 03:50:25,535 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:50:25,535 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 03:50:25,536 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1528479327] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:50:25,536 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 03:50:25,536 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5] total 6 [2022-11-03 03:50:25,536 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [993992213] [2022-11-03 03:50:25,537 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:50:25,537 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 03:50:25,537 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:50:25,538 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 03:50:25,538 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-03 03:50:25,538 INFO L87 Difference]: Start difference. First operand 279 states and 332 transitions. Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-11-03 03:50:25,646 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:50:25,646 INFO L93 Difference]: Finished difference Result 476 states and 576 transitions. [2022-11-03 03:50:25,647 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 03:50:25,647 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 61 [2022-11-03 03:50:25,647 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:50:25,649 INFO L225 Difference]: With dead ends: 476 [2022-11-03 03:50:25,649 INFO L226 Difference]: Without dead ends: 259 [2022-11-03 03:50:25,650 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-03 03:50:25,651 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 21 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 83 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 03:50:25,652 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 83 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 03:50:25,653 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2022-11-03 03:50:25,696 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 259. [2022-11-03 03:50:25,697 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 259 states, 175 states have (on average 1.16) internal successors, (203), 190 states have internal predecessors, (203), 39 states have call successors, (39), 39 states have call predecessors, (39), 44 states have return successors, (49), 41 states have call predecessors, (49), 39 states have call successors, (49) [2022-11-03 03:50:25,698 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 259 states to 259 states and 291 transitions. [2022-11-03 03:50:25,698 INFO L78 Accepts]: Start accepts. Automaton has 259 states and 291 transitions. Word has length 61 [2022-11-03 03:50:25,699 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:50:25,699 INFO L495 AbstractCegarLoop]: Abstraction has 259 states and 291 transitions. [2022-11-03 03:50:25,699 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-11-03 03:50:25,699 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 291 transitions. [2022-11-03 03:50:25,701 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-11-03 03:50:25,701 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:50:25,701 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:50:25,743 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-03 03:50:25,916 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2022-11-03 03:50:25,917 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:50:25,917 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:50:25,917 INFO L85 PathProgramCache]: Analyzing trace with hash -1884349724, now seen corresponding path program 1 times [2022-11-03 03:50:25,917 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:50:25,918 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1663201502] [2022-11-03 03:50:25,918 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:50:25,918 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:50:25,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:50:26,851 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 7 proven. 12 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 03:50:26,852 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:50:26,852 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1663201502] [2022-11-03 03:50:26,852 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1663201502] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 03:50:26,853 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [446470314] [2022-11-03 03:50:26,853 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:50:26,853 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:50:26,853 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 03:50:26,858 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 03:50:26,866 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-03 03:50:27,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:50:27,008 INFO L263 TraceCheckSpWp]: Trace formula consists of 441 conjuncts, 34 conjunts are in the unsatisfiable core [2022-11-03 03:50:27,012 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 03:50:27,557 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 13 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:50:27,558 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 03:50:28,245 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 14 proven. 3 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 03:50:28,245 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [446470314] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 03:50:28,246 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1004003572] [2022-11-03 03:50:28,265 INFO L159 IcfgInterpreter]: Started Sifa with 42 locations of interest [2022-11-03 03:50:28,265 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 03:50:28,269 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 03:50:28,274 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 03:50:28,275 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 03:50:33,357 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 41 for LOIs [2022-11-03 03:50:33,369 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 30 for LOIs [2022-11-03 03:50:33,607 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 59 for LOIs [2022-11-03 03:50:33,847 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 22 for LOIs [2022-11-03 03:50:33,850 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 40 for LOIs [2022-11-03 03:50:33,857 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 35 for LOIs [2022-11-03 03:50:33,859 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 03:50:39,564 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6802#(and (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~6#1|) (<= 0 (+ |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1| 2147483648)) (= ~head~0.offset 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1|) (= 1 ~systemActive~0) (<= 0 ~methAndRunningLastTime~0) (<= 0 |old(~methAndRunningLastTime~0)|) (<= 0 ~head~0.base) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~6#1|) (<= 0 ~methaneLevelCritical~0) (<= ~head~0.base 0) (= |#NULL.offset| 0) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1| 0)) (not (= ~methAndRunningLastTime~0 0)) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1| 2147483647) (<= 0 |#StackHeapBarrier|) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 2147483647) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| ~methaneLevelCritical~0) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-03 03:50:39,565 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 03:50:39,565 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 03:50:39,565 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 11, 14] total 34 [2022-11-03 03:50:39,566 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1345091208] [2022-11-03 03:50:39,566 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 03:50:39,567 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2022-11-03 03:50:39,567 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:50:39,567 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2022-11-03 03:50:39,569 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=440, Invalid=3466, Unknown=0, NotChecked=0, Total=3906 [2022-11-03 03:50:39,570 INFO L87 Difference]: Start difference. First operand 259 states and 291 transitions. Second operand has 34 states, 31 states have (on average 3.4838709677419355) internal successors, (108), 28 states have internal predecessors, (108), 14 states have call successors, (24), 13 states have call predecessors, (24), 11 states have return successors, (21), 10 states have call predecessors, (21), 12 states have call successors, (21) [2022-11-03 03:50:42,047 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:50:42,047 INFO L93 Difference]: Finished difference Result 826 states and 956 transitions. [2022-11-03 03:50:42,048 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-11-03 03:50:42,049 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 31 states have (on average 3.4838709677419355) internal successors, (108), 28 states have internal predecessors, (108), 14 states have call successors, (24), 13 states have call predecessors, (24), 11 states have return successors, (21), 10 states have call predecessors, (21), 12 states have call successors, (21) Word has length 64 [2022-11-03 03:50:42,049 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:50:42,052 INFO L225 Difference]: With dead ends: 826 [2022-11-03 03:50:42,052 INFO L226 Difference]: Without dead ends: 629 [2022-11-03 03:50:42,056 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 244 GetRequests, 150 SyntacticMatches, 3 SemanticMatches, 91 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3087 ImplicationChecksByTransitivity, 7.4s TimeCoverageRelationStatistics Valid=1060, Invalid=7496, Unknown=0, NotChecked=0, Total=8556 [2022-11-03 03:50:42,057 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 915 mSDsluCounter, 914 mSDsCounter, 0 mSdLazyCounter, 1447 mSolverCounterSat, 531 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 918 SdHoareTripleChecker+Valid, 849 SdHoareTripleChecker+Invalid, 1978 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 531 IncrementalHoareTripleChecker+Valid, 1447 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-11-03 03:50:42,057 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [918 Valid, 849 Invalid, 1978 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [531 Valid, 1447 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-11-03 03:50:42,058 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 629 states. [2022-11-03 03:50:42,118 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 629 to 505. [2022-11-03 03:50:42,119 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 505 states, 348 states have (on average 1.1580459770114941) internal successors, (403), 372 states have internal predecessors, (403), 72 states have call successors, (72), 68 states have call predecessors, (72), 84 states have return successors, (91), 81 states have call predecessors, (91), 72 states have call successors, (91) [2022-11-03 03:50:42,121 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 505 states to 505 states and 566 transitions. [2022-11-03 03:50:42,122 INFO L78 Accepts]: Start accepts. Automaton has 505 states and 566 transitions. Word has length 64 [2022-11-03 03:50:42,122 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:50:42,122 INFO L495 AbstractCegarLoop]: Abstraction has 505 states and 566 transitions. [2022-11-03 03:50:42,123 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 31 states have (on average 3.4838709677419355) internal successors, (108), 28 states have internal predecessors, (108), 14 states have call successors, (24), 13 states have call predecessors, (24), 11 states have return successors, (21), 10 states have call predecessors, (21), 12 states have call successors, (21) [2022-11-03 03:50:42,123 INFO L276 IsEmpty]: Start isEmpty. Operand 505 states and 566 transitions. [2022-11-03 03:50:42,125 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2022-11-03 03:50:42,125 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:50:42,125 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:50:42,168 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-03 03:50:42,338 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:50:42,338 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:50:42,339 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:50:42,339 INFO L85 PathProgramCache]: Analyzing trace with hash 1403694762, now seen corresponding path program 1 times [2022-11-03 03:50:42,339 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:50:42,339 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [428374517] [2022-11-03 03:50:42,339 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:50:42,339 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:50:42,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:50:43,593 INFO L134 CoverageAnalysis]: Checked inductivity of 125 backedges. 49 proven. 55 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-03 03:50:43,593 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:50:43,593 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [428374517] [2022-11-03 03:50:43,593 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [428374517] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 03:50:43,593 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [599820253] [2022-11-03 03:50:43,594 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:50:43,594 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:50:43,594 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 03:50:43,596 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 03:50:43,622 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-03 03:50:43,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:50:43,765 INFO L263 TraceCheckSpWp]: Trace formula consists of 601 conjuncts, 36 conjunts are in the unsatisfiable core [2022-11-03 03:50:43,770 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 03:50:44,357 INFO L134 CoverageAnalysis]: Checked inductivity of 125 backedges. 69 proven. 42 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-03 03:50:44,358 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 03:50:45,298 INFO L134 CoverageAnalysis]: Checked inductivity of 125 backedges. 72 proven. 25 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-11-03 03:50:45,298 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [599820253] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 03:50:45,299 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [363650967] [2022-11-03 03:50:45,302 INFO L159 IcfgInterpreter]: Started Sifa with 42 locations of interest [2022-11-03 03:50:45,302 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 03:50:45,303 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 03:50:45,303 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 03:50:45,303 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 03:51:01,193 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 316 for LOIs [2022-11-03 03:51:01,279 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 32 for LOIs [2022-11-03 03:51:01,520 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 61 for LOIs [2022-11-03 03:51:01,770 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 24 for LOIs [2022-11-03 03:51:01,772 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 45 for LOIs [2022-11-03 03:51:01,780 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 37 for LOIs [2022-11-03 03:51:01,782 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 03:51:09,637 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9610#(and (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~6#1|) (<= 0 (+ |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1| 2147483648)) (= ~head~0.offset 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1|) (= 1 ~systemActive~0) (<= 0 ~methAndRunningLastTime~0) (<= 0 |old(~methAndRunningLastTime~0)|) (<= |old(~methAndRunningLastTime~0)| 1) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~6#1|) (<= 0 ~methaneLevelCritical~0) (= ~head~0.base 0) (= |#NULL.offset| 0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 1) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1| 0)) (not (= ~methAndRunningLastTime~0 0)) (<= ~methAndRunningLastTime~0 1) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1| 2147483647) (<= 0 |#StackHeapBarrier|) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| ~methaneLevelCritical~0) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-03 03:51:09,637 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 03:51:09,637 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 03:51:09,638 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 13, 13] total 38 [2022-11-03 03:51:09,638 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [613469996] [2022-11-03 03:51:09,638 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 03:51:09,638 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2022-11-03 03:51:09,639 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:51:09,639 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2022-11-03 03:51:09,641 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=485, Invalid=3937, Unknown=0, NotChecked=0, Total=4422 [2022-11-03 03:51:09,642 INFO L87 Difference]: Start difference. First operand 505 states and 566 transitions. Second operand has 38 states, 36 states have (on average 4.75) internal successors, (171), 36 states have internal predecessors, (171), 23 states have call successors, (35), 10 states have call predecessors, (35), 16 states have return successors, (36), 18 states have call predecessors, (36), 23 states have call successors, (36) [2022-11-03 03:51:10,736 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:51:10,736 INFO L93 Difference]: Finished difference Result 668 states and 760 transitions. [2022-11-03 03:51:10,737 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-03 03:51:10,737 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 36 states have (on average 4.75) internal successors, (171), 36 states have internal predecessors, (171), 23 states have call successors, (35), 10 states have call predecessors, (35), 16 states have return successors, (36), 18 states have call predecessors, (36), 23 states have call successors, (36) Word has length 109 [2022-11-03 03:51:10,738 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:51:10,739 INFO L225 Difference]: With dead ends: 668 [2022-11-03 03:51:10,739 INFO L226 Difference]: Without dead ends: 0 [2022-11-03 03:51:10,742 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 361 GetRequests, 281 SyntacticMatches, 4 SemanticMatches, 76 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2580 ImplicationChecksByTransitivity, 9.0s TimeCoverageRelationStatistics Valid=746, Invalid=5260, Unknown=0, NotChecked=0, Total=6006 [2022-11-03 03:51:10,743 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 473 mSDsluCounter, 501 mSDsCounter, 0 mSdLazyCounter, 756 mSolverCounterSat, 270 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 476 SdHoareTripleChecker+Valid, 448 SdHoareTripleChecker+Invalid, 1026 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 270 IncrementalHoareTripleChecker+Valid, 756 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 03:51:10,743 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [476 Valid, 448 Invalid, 1026 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [270 Valid, 756 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-03 03:51:10,744 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-03 03:51:10,744 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-03 03:51:10,744 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 03:51:10,744 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-03 03:51:10,745 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 109 [2022-11-03 03:51:10,745 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:51:10,745 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-03 03:51:10,745 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 36 states have (on average 4.75) internal successors, (171), 36 states have internal predecessors, (171), 23 states have call successors, (35), 10 states have call predecessors, (35), 16 states have return successors, (36), 18 states have call predecessors, (36), 23 states have call successors, (36) [2022-11-03 03:51:10,746 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-03 03:51:10,746 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-03 03:51:10,748 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-03 03:51:10,786 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-03 03:51:10,962 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-03 03:51:10,964 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-03 03:51:14,332 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 400 406) no Hoare annotation was computed. [2022-11-03 03:51:14,332 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 400 406) the Hoare annotation is: true [2022-11-03 03:51:14,332 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 188 199) the Hoare annotation is: true [2022-11-03 03:51:14,333 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 188 199) no Hoare annotation was computed. [2022-11-03 03:51:14,333 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 200 208) the Hoare annotation is: true [2022-11-03 03:51:14,333 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 200 208) no Hoare annotation was computed. [2022-11-03 03:51:14,333 INFO L895 garLoopResultBuilder]: At program point L448(line 448) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or .cse2 .cse3 (not (= |old(~waterLevel~0)| 1)) .cse0 .cse4) (or .cse2 .cse3 .cse0 .cse1 .cse4))) [2022-11-03 03:51:14,334 INFO L895 garLoopResultBuilder]: At program point L940(line 940) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or .cse2 .cse3 (not (= |old(~waterLevel~0)| 1)) .cse0 .cse4) (or .cse2 .cse3 .cse0 .cse1 .cse4))) [2022-11-03 03:51:14,334 INFO L895 garLoopResultBuilder]: At program point L453(line 453) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 (and .cse1 .cse2 (= ~waterLevel~0 1)) .cse3 (not (= |old(~waterLevel~0)| 1)) .cse4 .cse5) (or .cse4 (not (= |old(~pumpRunning~0)| 1)) .cse6) (or .cse0 .cse3 .cse4 (and .cse1 .cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse6 .cse5))) [2022-11-03 03:51:14,334 INFO L895 garLoopResultBuilder]: At program point L453-1(lines 434 458) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= ~waterLevel~0 1)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse3 (not (= 1 ~systemActive~0))) (.cse9 (not (= |old(~pumpRunning~0)| 1))) (.cse8 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5) .cse6) (or .cse0 .cse1 .cse3 (and .cse7 (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1)) .cse8 .cse6) (or .cse0 .cse1 .cse7 .cse2 .cse3) (or .cse3 .cse9 .cse8 (and .cse4 (= |timeShift_processEnvironment_~tmp~4#1| 1) .cse5)) (or .cse1 .cse7 .cse3 (not (= ~methaneLevelCritical~0 0)) .cse9 .cse8))) [2022-11-03 03:51:14,334 INFO L899 garLoopResultBuilder]: For program point L387-1(lines 387 393) no Hoare annotation was computed. [2022-11-03 03:51:14,335 INFO L899 garLoopResultBuilder]: For program point L288(lines 288 298) no Hoare annotation was computed. [2022-11-03 03:51:14,335 INFO L895 garLoopResultBuilder]: At program point L284(lines 284 301) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 0)) (.cse12 (= ~methAndRunningLastTime~0 0)) (.cse7 (= 0 ~systemActive~0)) (.cse8 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse13 (= ~methaneLevelCritical~0 0))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse11 (= ~waterLevel~0 1)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not .cse13)) (.cse5 (and .cse10 .cse12 .cse13 (not .cse7) .cse8))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse1 .cse2 .cse4 .cse7 .cse8) (or .cse6 .cse0 .cse9 .cse1 (and .cse10 .cse11) .cse7) (or .cse6 .cse0 .cse1 (and .cse12 (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1)) .cse4 .cse7) (or .cse6 .cse0 .cse12 .cse9 .cse1) (or .cse1 .cse3 .cse4 (and .cse10 (= |timeShift_processEnvironment_~tmp~4#1| 1) .cse11)) (or .cse6 .cse0 .cse9 .cse1 .cse2 .cse5 .cse7)))) [2022-11-03 03:51:14,335 INFO L895 garLoopResultBuilder]: At program point L284-1(lines 276 304) the Hoare annotation is: (let ((.cse12 (= 0 ~systemActive~0))) (let ((.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse9 (not .cse12)) (.cse11 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse14 (= ~methaneLevelCritical~0 0))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse13 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not .cse14)) (.cse5 (and .cse6 .cse7 .cse14 .cse9 .cse11))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse3 .cse4 (and .cse6 (= |timeShift_processEnvironment_~tmp~4#1| 1) .cse7 .cse8 .cse9)) (or .cse10 .cse0 .cse1 (and .cse7 .cse11) .cse2 .cse4 .cse12) (or .cse10 .cse0 .cse13 .cse1 (and .cse6 .cse7 .cse8 .cse9)) (or .cse10 .cse0 .cse1 .cse4 (and (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))) (or .cse10 .cse0 .cse13 .cse1 .cse2 .cse5 .cse12))))) [2022-11-03 03:51:14,336 INFO L899 garLoopResultBuilder]: For program point L289(lines 289 295) no Hoare annotation was computed. [2022-11-03 03:51:14,336 INFO L899 garLoopResultBuilder]: For program point L380-1(lines 379 398) no Hoare annotation was computed. [2022-11-03 03:51:14,336 INFO L895 garLoopResultBuilder]: At program point L442(lines 442 450) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= 0 ~systemActive~0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4 .cse3) (or .cse1 (= ~methAndRunningLastTime~0 0) .cse2 (not (= ~methaneLevelCritical~0 0)) .cse5 .cse4) (or .cse2 .cse5 .cse4 (and (= |timeShift_processEnvironment_~tmp~4#1| 1) (= ~waterLevel~0 1) (= ~pumpRunning~0 1))))) [2022-11-03 03:51:14,336 INFO L895 garLoopResultBuilder]: At program point L438(lines 438 455) the Hoare annotation is: (let ((.cse3 (= ~waterLevel~0 1)) (.cse7 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse8 (not (= |old(~waterLevel~0)| 2))) (.cse6 (= 0 ~systemActive~0))) (and (or .cse0 (and .cse1 .cse2 .cse3) .cse4 (not (= |old(~waterLevel~0)| 1)) .cse5 .cse6) (or (and .cse3 (= ~pumpRunning~0 1)) .cse5 .cse7 .cse8) (or .cse4 .cse2 .cse5 (not (= ~methaneLevelCritical~0 0)) .cse7 .cse8) (or .cse0 .cse4 .cse5 (and .cse1 .cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse8 .cse6))) [2022-11-03 03:51:14,337 INFO L895 garLoopResultBuilder]: At program point L282(line 282) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= ~waterLevel~0 1)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse3 (not (= 1 ~systemActive~0))) (.cse9 (not (= |old(~pumpRunning~0)| 1))) (.cse8 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5) .cse6) (or .cse0 .cse1 .cse3 (and .cse7 (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1)) .cse8 .cse6) (or .cse0 .cse1 .cse7 .cse2 .cse3) (or .cse3 .cse9 .cse8 (and .cse4 (= |timeShift_processEnvironment_~tmp~4#1| 1) .cse5)) (or .cse1 .cse7 .cse3 (not (= ~methaneLevelCritical~0 0)) .cse9 .cse8))) [2022-11-03 03:51:14,337 INFO L899 garLoopResultBuilder]: For program point L282-1(line 282) no Hoare annotation was computed. [2022-11-03 03:51:14,337 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 376 399) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse4 (not (= 1 ~systemActive~0))) (.cse7 (not (= |old(~pumpRunning~0)| 1))) (.cse6 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 .cse2 (= ~waterLevel~0 1)) .cse3 (not (= |old(~waterLevel~0)| 1)) .cse4) (or .cse0 .cse3 .cse4 (and .cse1 .cse2 .cse5) .cse6) (or .cse4 .cse7 .cse6 (and .cse5 (= ~pumpRunning~0 1))) (or .cse3 .cse2 .cse4 (not (= ~methaneLevelCritical~0 0)) .cse7 .cse6))) [2022-11-03 03:51:14,338 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 376 399) no Hoare annotation was computed. [2022-11-03 03:51:14,338 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 940) no Hoare annotation was computed. [2022-11-03 03:51:14,338 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-11-03 03:51:14,338 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-11-03 03:51:14,338 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-11-03 03:51:14,338 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-11-03 03:51:14,339 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-11-03 03:51:14,339 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-11-03 03:51:14,339 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-11-03 03:51:14,339 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-11-03 03:51:14,339 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-11-03 03:51:14,339 INFO L895 garLoopResultBuilder]: At program point L362(lines 315 363) the Hoare annotation is: false [2022-11-03 03:51:14,340 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-03 03:51:14,340 INFO L899 garLoopResultBuilder]: For program point L317(lines 316 361) no Hoare annotation was computed. [2022-11-03 03:51:14,340 INFO L895 garLoopResultBuilder]: At program point L338(line 338) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~waterLevel~0 1)) (and .cse0 .cse1 .cse2 (= 2 ~waterLevel~0) .cse3 .cse4) (and .cse0 (<= 2 ~waterLevel~0) .cse3 .cse4 (<= ~waterLevel~0 2) (= ~pumpRunning~0 1)))) [2022-11-03 03:51:14,340 INFO L895 garLoopResultBuilder]: At program point L359(lines 316 361) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_main_~tmp~0#1| 1) .cse0 .cse1 (= ~waterLevel~0 1)) (and (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0) (= 2 ~waterLevel~0) .cse0 .cse1 (= ~pumpRunning~0 1)))) [2022-11-03 03:51:14,340 INFO L899 garLoopResultBuilder]: For program point L326(lines 326 332) no Hoare annotation was computed. [2022-11-03 03:51:14,341 INFO L899 garLoopResultBuilder]: For program point L326-1(lines 326 332) no Hoare annotation was computed. [2022-11-03 03:51:14,341 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-03 03:51:14,341 INFO L895 garLoopResultBuilder]: At program point L352-2(lines 346 357) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse5 (= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1) .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse4 .cse0 .cse1 .cse5 .cse2 .cse3) (and .cse4 .cse5 .cse2 .cse3 (= ~pumpRunning~0 1)))) [2022-11-03 03:51:14,341 INFO L899 garLoopResultBuilder]: For program point L336(lines 336 342) no Hoare annotation was computed. [2022-11-03 03:51:14,341 INFO L899 garLoopResultBuilder]: For program point L336-1(lines 336 342) no Hoare annotation was computed. [2022-11-03 03:51:14,342 INFO L895 garLoopResultBuilder]: At program point L142(lines 142 149) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-03 03:51:14,342 INFO L902 garLoopResultBuilder]: At program point L365(lines 306 369) the Hoare annotation is: true [2022-11-03 03:51:14,342 INFO L902 garLoopResultBuilder]: At program point L142-2(lines 142 149) the Hoare annotation is: true [2022-11-03 03:51:14,342 INFO L895 garLoopResultBuilder]: At program point L328(line 328) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse1 .cse2 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 (<= ~waterLevel~0 2) (= ~pumpRunning~0 1)))) [2022-11-03 03:51:14,342 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 408 432) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3))) [2022-11-03 03:51:14,342 INFO L895 garLoopResultBuilder]: At program point L422(line 422) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)) .cse1 .cse2) (or .cse0 .cse1 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse2))) [2022-11-03 03:51:14,343 INFO L895 garLoopResultBuilder]: At program point L416(lines 416 424) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)) .cse2 .cse3) (or .cse0 .cse2 (not (<= ~waterLevel~0 2)) (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 1)) (< ~waterLevel~0 2) .cse3))) [2022-11-03 03:51:14,343 INFO L895 garLoopResultBuilder]: At program point L412(lines 412 429) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3))) [2022-11-03 03:51:14,343 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 408 432) no Hoare annotation was computed. [2022-11-03 03:51:14,343 INFO L895 garLoopResultBuilder]: At program point L427(line 427) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse2))) [2022-11-03 03:51:14,343 INFO L899 garLoopResultBuilder]: For program point L427-1(lines 408 432) no Hoare annotation was computed. [2022-11-03 03:51:14,343 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 176 187) no Hoare annotation was computed. [2022-11-03 03:51:14,344 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 176 187) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= ~pumpRunning~0 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (= ~waterLevel~0 1) (not (= ~methAndRunningLastTime~0 0))) (or .cse0 (< |old(~waterLevel~0)| 2) (not (= ~pumpRunning~0 1)) (= |old(~waterLevel~0)| ~waterLevel~0) (not (<= |old(~waterLevel~0)| 2))))) [2022-11-03 03:51:14,347 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:51:14,349 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-03 03:51:14,380 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 03.11 03:51:14 BoogieIcfgContainer [2022-11-03 03:51:14,380 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-03 03:51:14,381 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-03 03:51:14,381 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-03 03:51:14,381 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-03 03:51:14,382 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 03:50:21" (3/4) ... [2022-11-03 03:51:14,385 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-03 03:51:14,390 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-03 03:51:14,391 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-03 03:51:14,391 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-03 03:51:14,391 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-03 03:51:14,391 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-03 03:51:14,392 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 03:51:14,392 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-03 03:51:14,399 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 74 nodes and edges [2022-11-03 03:51:14,399 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 28 nodes and edges [2022-11-03 03:51:14,400 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2022-11-03 03:51:14,400 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-03 03:51:14,401 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-03 03:51:14,401 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 03:51:14,402 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 03:51:14,426 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) [2022-11-03 03:51:14,427 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || 0 == systemActive) && ((((waterLevel == 1 && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2)) || 0 == systemActive) [2022-11-03 03:51:14,427 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1))) && (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) [2022-11-03 03:51:14,428 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || waterLevel < 2) || !(methAndRunningLastTime == 0)) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) [2022-11-03 03:51:14,428 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && !(0 == systemActive)) && tmp == 0)) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || tmp == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && !(0 == systemActive)) && tmp == 0)) || 0 == systemActive) [2022-11-03 03:51:14,428 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && !(0 == systemActive)) && tmp == 0)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || ((((pumpRunning == 0 && tmp == 1) && methAndRunningLastTime == 0) && waterLevel == 1) && !(0 == systemActive)))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1) && !(0 == systemActive)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && !(0 == systemActive)) && tmp == 0)) || 0 == systemActive) [2022-11-03 03:51:14,429 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || 0 == systemActive) [2022-11-03 03:51:14,430 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || ((tmp == 1 && waterLevel == 1) && pumpRunning == 1)) [2022-11-03 03:51:14,430 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && tmp == 0)) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && tmp == 1)) || waterLevel < 2) || !(methAndRunningLastTime == 0)) [2022-11-03 03:51:14,458 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/witness.graphml [2022-11-03 03:51:14,459 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-03 03:51:14,459 INFO L158 Benchmark]: Toolchain (without parser) took 54372.73ms. Allocated memory was 83.9MB in the beginning and 520.1MB in the end (delta: 436.2MB). Free memory was 47.6MB in the beginning and 336.4MB in the end (delta: -288.8MB). Peak memory consumption was 146.6MB. Max. memory is 16.1GB. [2022-11-03 03:51:14,460 INFO L158 Benchmark]: CDTParser took 0.31ms. Allocated memory is still 83.9MB. Free memory was 61.4MB in the beginning and 61.3MB in the end (delta: 25.2kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 03:51:14,460 INFO L158 Benchmark]: CACSL2BoogieTranslator took 689.47ms. Allocated memory was 83.9MB in the beginning and 107.0MB in the end (delta: 23.1MB). Free memory was 47.4MB in the beginning and 72.8MB in the end (delta: -25.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-03 03:51:14,460 INFO L158 Benchmark]: Boogie Procedure Inliner took 80.78ms. Allocated memory is still 107.0MB. Free memory was 72.8MB in the beginning and 70.3MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 03:51:14,461 INFO L158 Benchmark]: Boogie Preprocessor took 60.68ms. Allocated memory is still 107.0MB. Free memory was 70.3MB in the beginning and 68.6MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 03:51:14,461 INFO L158 Benchmark]: RCFGBuilder took 664.36ms. Allocated memory is still 107.0MB. Free memory was 68.6MB in the beginning and 80.0MB in the end (delta: -11.3MB). Peak memory consumption was 32.5MB. Max. memory is 16.1GB. [2022-11-03 03:51:14,462 INFO L158 Benchmark]: TraceAbstraction took 52791.94ms. Allocated memory was 107.0MB in the beginning and 520.1MB in the end (delta: 413.1MB). Free memory was 79.4MB in the beginning and 341.6MB in the end (delta: -262.3MB). Peak memory consumption was 317.8MB. Max. memory is 16.1GB. [2022-11-03 03:51:14,462 INFO L158 Benchmark]: Witness Printer took 77.70ms. Allocated memory is still 520.1MB. Free memory was 341.6MB in the beginning and 336.4MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-03 03:51:14,464 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31ms. Allocated memory is still 83.9MB. Free memory was 61.4MB in the beginning and 61.3MB in the end (delta: 25.2kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 689.47ms. Allocated memory was 83.9MB in the beginning and 107.0MB in the end (delta: 23.1MB). Free memory was 47.4MB in the beginning and 72.8MB in the end (delta: -25.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 80.78ms. Allocated memory is still 107.0MB. Free memory was 72.8MB in the beginning and 70.3MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 60.68ms. Allocated memory is still 107.0MB. Free memory was 70.3MB in the beginning and 68.6MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 664.36ms. Allocated memory is still 107.0MB. Free memory was 68.6MB in the beginning and 80.0MB in the end (delta: -11.3MB). Peak memory consumption was 32.5MB. Max. memory is 16.1GB. * TraceAbstraction took 52791.94ms. Allocated memory was 107.0MB in the beginning and 520.1MB in the end (delta: 413.1MB). Free memory was 79.4MB in the beginning and 341.6MB in the end (delta: -262.3MB). Peak memory consumption was 317.8MB. Max. memory is 16.1GB. * Witness Printer took 77.70ms. Allocated memory is still 520.1MB. Free memory was 341.6MB in the beginning and 336.4MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 940]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 56 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 52.7s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 5.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1783 SdHoareTripleChecker+Valid, 2.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1762 mSDsluCounter, 2268 SdHoareTripleChecker+Invalid, 2.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2076 mSDsCounter, 911 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2781 IncrementalHoareTripleChecker+Invalid, 3692 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 911 mSolverCounterUnsat, 605 mSDtfsCounter, 2781 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 721 GetRequests, 515 SyntacticMatches, 7 SemanticMatches, 199 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5690 ImplicationChecksByTransitivity, 16.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=505occurred in iteration=10, InterpolantAutomatonStates: 94, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 11 MinimizatonAttempts, 296 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 33 LocationsWithAnnotation, 938 PreInvPairs, 997 NumberOfFragments, 1609 HoareAnnotationTreeSize, 938 FomulaSimplifications, 902 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 33 FomulaSimplificationsInter, 10483 FormulaSimplificationTreeSizeReductionInter, 3.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 6.4s InterpolantComputationTime, 714 NumberOfCodeBlocks, 714 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 871 ConstructedInterpolants, 0 QuantifiedInterpolants, 3441 SizeOfPredicates, 27 NumberOfNonLiveVariables, 1478 ConjunctsInSsa, 74 ConjunctsInUnsatCore, 16 InterpolantComputations, 9 PerfectInterpolantSequences, 383/532 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 284]: Loop Invariant Derived loop invariant: ((((((((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && !(0 == systemActive)) && tmp == 0)) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || tmp == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && !(0 == systemActive)) && tmp == 0)) || 0 == systemActive) - InvariantResult [Line: 438]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || 0 == systemActive) && ((((waterLevel == 1 && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2)) || 0 == systemActive) - InvariantResult [Line: 412]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || waterLevel < 2) || !(methAndRunningLastTime == 0)) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && tmp == 0)) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && tmp == 1)) || waterLevel < 2) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || ((tmp == 1 && waterLevel == 1) && pumpRunning == 1)) - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: (((((((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && !(0 == systemActive)) && tmp == 0)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || ((((pumpRunning == 0 && tmp == 1) && methAndRunningLastTime == 0) && waterLevel == 1) && !(0 == systemActive)))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1) && !(0 == systemActive)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && !(0 == systemActive)) && tmp == 0)) || 0 == systemActive) - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 1) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) || ((((tmp == systemActive && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0) && pumpRunning == 1) - InvariantResult [Line: 142]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 940]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || 0 == systemActive) - InvariantResult [Line: 142]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 1) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 434]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1))) && (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) RESULT: Ultimate proved your program to be correct! [2022-11-03 03:51:14,535 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4df39da-d0c5-4f4e-9649-404e8cb6331c/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE