./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product50.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product50.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash f645b80d4169704e02b3c19c65a00755e1e28cc942f5a2526cd4b4e1dcca30cf --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 02:42:51,427 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 02:42:51,429 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 02:42:51,483 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 02:42:51,484 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 02:42:51,487 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 02:42:51,491 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 02:42:51,494 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 02:42:51,500 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 02:42:51,505 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 02:42:51,506 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 02:42:51,508 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 02:42:51,510 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 02:42:51,515 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 02:42:51,516 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 02:42:51,518 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 02:42:51,520 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 02:42:51,527 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 02:42:51,529 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 02:42:51,531 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 02:42:51,535 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 02:42:51,537 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 02:42:51,538 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 02:42:51,540 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 02:42:51,545 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 02:42:51,549 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 02:42:51,550 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 02:42:51,551 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 02:42:51,553 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 02:42:51,554 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 02:42:51,555 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 02:42:51,556 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 02:42:51,557 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 02:42:51,558 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 02:42:51,560 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 02:42:51,561 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 02:42:51,561 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 02:42:51,562 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 02:42:51,562 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 02:42:51,563 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 02:42:51,564 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 02:42:51,564 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-03 02:42:51,613 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 02:42:51,614 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 02:42:51,614 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 02:42:51,615 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 02:42:51,616 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 02:42:51,616 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 02:42:51,616 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 02:42:51,616 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 02:42:51,617 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 02:42:51,617 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-03 02:42:51,618 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 02:42:51,618 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 02:42:51,619 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-03 02:42:51,619 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-03 02:42:51,619 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 02:42:51,619 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-03 02:42:51,620 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-03 02:42:51,620 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-03 02:42:51,621 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 02:42:51,621 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-03 02:42:51,621 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-03 02:42:51,622 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-03 02:42:51,622 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 02:42:51,624 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-03 02:42:51,624 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 02:42:51,624 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-03 02:42:51,624 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-03 02:42:51,625 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-03 02:42:51,625 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 02:42:51,625 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-03 02:42:51,626 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 02:42:51,626 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 02:42:51,626 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:42:51,627 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 02:42:51,627 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-03 02:42:51,627 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 02:42:51,627 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-03 02:42:51,628 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-03 02:42:51,628 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-03 02:42:51,628 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-03 02:42:51,628 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 02:42:51,629 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f645b80d4169704e02b3c19c65a00755e1e28cc942f5a2526cd4b4e1dcca30cf [2022-11-03 02:42:51,928 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 02:42:51,957 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 02:42:51,960 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 02:42:51,962 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 02:42:51,964 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 02:42:51,966 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/product-lines/minepump_spec2_product50.cil.c [2022-11-03 02:42:52,038 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/data/96b5c359b/9c44a15eec414eeab4149387fa6767eb/FLAGf717e6729 [2022-11-03 02:42:52,728 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 02:42:52,729 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/sv-benchmarks/c/product-lines/minepump_spec2_product50.cil.c [2022-11-03 02:42:52,741 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/data/96b5c359b/9c44a15eec414eeab4149387fa6767eb/FLAGf717e6729 [2022-11-03 02:42:52,985 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/data/96b5c359b/9c44a15eec414eeab4149387fa6767eb [2022-11-03 02:42:52,988 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 02:42:52,995 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 02:42:52,997 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 02:42:52,998 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 02:42:53,001 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 02:42:53,002 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:42:52" (1/1) ... [2022-11-03 02:42:53,005 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@72f1d26c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:42:53, skipping insertion in model container [2022-11-03 02:42:53,006 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:42:52" (1/1) ... [2022-11-03 02:42:53,014 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 02:42:53,051 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 02:42:53,415 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/sv-benchmarks/c/product-lines/minepump_spec2_product50.cil.c[18939,18952] [2022-11-03 02:42:53,424 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:42:53,436 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 02:42:53,524 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/sv-benchmarks/c/product-lines/minepump_spec2_product50.cil.c[18939,18952] [2022-11-03 02:42:53,525 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:42:53,544 INFO L208 MainTranslator]: Completed translation [2022-11-03 02:42:53,544 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:42:53 WrapperNode [2022-11-03 02:42:53,544 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 02:42:53,546 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 02:42:53,546 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 02:42:53,546 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 02:42:53,554 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:42:53" (1/1) ... [2022-11-03 02:42:53,570 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:42:53" (1/1) ... [2022-11-03 02:42:53,601 INFO L138 Inliner]: procedures = 57, calls = 156, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 262 [2022-11-03 02:42:53,602 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 02:42:53,603 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 02:42:53,603 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 02:42:53,603 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 02:42:53,614 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:42:53" (1/1) ... [2022-11-03 02:42:53,614 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:42:53" (1/1) ... [2022-11-03 02:42:53,617 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:42:53" (1/1) ... [2022-11-03 02:42:53,617 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:42:53" (1/1) ... [2022-11-03 02:42:53,623 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:42:53" (1/1) ... [2022-11-03 02:42:53,628 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:42:53" (1/1) ... [2022-11-03 02:42:53,629 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:42:53" (1/1) ... [2022-11-03 02:42:53,631 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:42:53" (1/1) ... [2022-11-03 02:42:53,634 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 02:42:53,635 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 02:42:53,635 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 02:42:53,635 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 02:42:53,636 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:42:53" (1/1) ... [2022-11-03 02:42:53,643 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:42:53,655 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:42:53,667 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 02:42:53,701 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 02:42:53,724 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-03 02:42:53,725 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-03 02:42:53,725 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-03 02:42:53,725 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-03 02:42:53,726 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-03 02:42:53,726 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-03 02:42:53,726 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-03 02:42:53,726 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-03 02:42:53,727 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-03 02:42:53,727 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 02:42:53,727 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 02:42:53,727 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-03 02:42:53,728 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-03 02:42:53,728 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-03 02:42:53,728 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-03 02:42:53,728 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-03 02:42:53,728 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 02:42:53,729 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 02:42:53,851 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 02:42:53,853 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 02:42:54,281 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 02:42:54,484 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 02:42:54,486 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-03 02:42:54,489 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:42:54 BoogieIcfgContainer [2022-11-03 02:42:54,490 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 02:42:54,492 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 02:42:54,493 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 02:42:54,498 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 02:42:54,498 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 02:42:52" (1/3) ... [2022-11-03 02:42:54,501 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7afcb831 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:42:54, skipping insertion in model container [2022-11-03 02:42:54,501 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:42:53" (2/3) ... [2022-11-03 02:42:54,501 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7afcb831 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:42:54, skipping insertion in model container [2022-11-03 02:42:54,502 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:42:54" (3/3) ... [2022-11-03 02:42:54,507 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product50.cil.c [2022-11-03 02:42:54,532 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 02:42:54,532 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-03 02:42:54,630 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 02:42:54,645 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@245a137f, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 02:42:54,646 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-03 02:42:54,651 INFO L276 IsEmpty]: Start isEmpty. Operand has 56 states, 36 states have (on average 1.4444444444444444) internal successors, (52), 44 states have internal predecessors, (52), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-03 02:42:54,668 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-03 02:42:54,669 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:42:54,669 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:42:54,670 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:42:54,677 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:42:54,677 INFO L85 PathProgramCache]: Analyzing trace with hash -1305189709, now seen corresponding path program 1 times [2022-11-03 02:42:54,689 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:42:54,689 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [721862726] [2022-11-03 02:42:54,690 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:42:54,690 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:42:54,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:42:55,047 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:42:55,048 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:42:55,049 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [721862726] [2022-11-03 02:42:55,049 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [721862726] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:42:55,050 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:42:55,050 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:42:55,052 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1615194077] [2022-11-03 02:42:55,052 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:42:55,058 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-03 02:42:55,059 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:42:55,101 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-03 02:42:55,103 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 02:42:55,106 INFO L87 Difference]: Start difference. First operand has 56 states, 36 states have (on average 1.4444444444444444) internal successors, (52), 44 states have internal predecessors, (52), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:42:55,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:42:55,220 INFO L93 Difference]: Finished difference Result 110 states and 149 transitions. [2022-11-03 02:42:55,222 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-03 02:42:55,223 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-11-03 02:42:55,223 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:42:55,234 INFO L225 Difference]: With dead ends: 110 [2022-11-03 02:42:55,234 INFO L226 Difference]: Without dead ends: 51 [2022-11-03 02:42:55,240 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 02:42:55,248 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 54 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:42:55,250 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 54 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:42:55,271 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51 states. [2022-11-03 02:42:55,305 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51. [2022-11-03 02:42:55,307 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 33 states have (on average 1.3333333333333333) internal successors, (44), 40 states have internal predecessors, (44), 11 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2022-11-03 02:42:55,316 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 65 transitions. [2022-11-03 02:42:55,318 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 65 transitions. Word has length 17 [2022-11-03 02:42:55,318 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:42:55,318 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 65 transitions. [2022-11-03 02:42:55,320 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:42:55,320 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 65 transitions. [2022-11-03 02:42:55,325 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-03 02:42:55,325 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:42:55,326 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:42:55,326 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-03 02:42:55,327 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:42:55,329 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:42:55,329 INFO L85 PathProgramCache]: Analyzing trace with hash 555937763, now seen corresponding path program 1 times [2022-11-03 02:42:55,329 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:42:55,330 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [588070766] [2022-11-03 02:42:55,330 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:42:55,330 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:42:55,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:42:55,484 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:42:55,485 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:42:55,485 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [588070766] [2022-11-03 02:42:55,485 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [588070766] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:42:55,486 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:42:55,486 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:42:55,486 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [61213154] [2022-11-03 02:42:55,486 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:42:55,487 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:42:55,488 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:42:55,488 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:42:55,489 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:42:55,489 INFO L87 Difference]: Start difference. First operand 51 states and 65 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:42:55,542 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:42:55,542 INFO L93 Difference]: Finished difference Result 79 states and 101 transitions. [2022-11-03 02:42:55,543 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:42:55,543 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-11-03 02:42:55,543 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:42:55,544 INFO L225 Difference]: With dead ends: 79 [2022-11-03 02:42:55,544 INFO L226 Difference]: Without dead ends: 43 [2022-11-03 02:42:55,545 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:42:55,547 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 7 mSDsluCounter, 42 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 71 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:42:55,548 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 71 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:42:55,549 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2022-11-03 02:42:55,556 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 43. [2022-11-03 02:42:55,557 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 28 states have (on average 1.3571428571428572) internal successors, (38), 35 states have internal predecessors, (38), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2022-11-03 02:42:55,558 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 54 transitions. [2022-11-03 02:42:55,558 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 54 transitions. Word has length 18 [2022-11-03 02:42:55,559 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:42:55,559 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 54 transitions. [2022-11-03 02:42:55,559 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:42:55,560 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 54 transitions. [2022-11-03 02:42:55,560 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-03 02:42:55,561 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:42:55,561 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:42:55,561 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-03 02:42:55,561 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:42:55,562 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:42:55,562 INFO L85 PathProgramCache]: Analyzing trace with hash 1577652618, now seen corresponding path program 1 times [2022-11-03 02:42:55,562 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:42:55,563 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1693082843] [2022-11-03 02:42:55,563 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:42:55,563 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:42:55,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:42:55,834 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:42:55,834 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:42:55,834 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1693082843] [2022-11-03 02:42:55,834 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1693082843] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:42:55,835 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:42:55,835 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:42:55,835 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1200158222] [2022-11-03 02:42:55,835 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:42:55,836 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:42:55,836 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:42:55,836 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:42:55,837 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:42:55,837 INFO L87 Difference]: Start difference. First operand 43 states and 54 transitions. Second operand has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:42:55,958 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:42:55,958 INFO L93 Difference]: Finished difference Result 84 states and 107 transitions. [2022-11-03 02:42:55,959 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 02:42:55,959 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2022-11-03 02:42:55,962 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:42:55,964 INFO L225 Difference]: With dead ends: 84 [2022-11-03 02:42:55,965 INFO L226 Difference]: Without dead ends: 43 [2022-11-03 02:42:55,966 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:42:55,969 INFO L413 NwaCegarLoop]: 35 mSDtfsCounter, 49 mSDsluCounter, 26 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 51 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:42:55,972 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 51 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:42:55,974 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2022-11-03 02:42:55,988 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 43. [2022-11-03 02:42:55,989 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 28 states have (on average 1.3214285714285714) internal successors, (37), 35 states have internal predecessors, (37), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2022-11-03 02:42:55,992 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 53 transitions. [2022-11-03 02:42:55,996 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 53 transitions. Word has length 20 [2022-11-03 02:42:55,996 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:42:55,997 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 53 transitions. [2022-11-03 02:42:55,997 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:42:55,997 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 53 transitions. [2022-11-03 02:42:55,998 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-03 02:42:55,999 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:42:56,000 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:42:56,000 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-03 02:42:56,000 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:42:56,001 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:42:56,002 INFO L85 PathProgramCache]: Analyzing trace with hash -970428982, now seen corresponding path program 1 times [2022-11-03 02:42:56,003 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:42:56,003 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [354268119] [2022-11-03 02:42:56,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:42:56,005 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:42:56,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:42:56,174 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:42:56,175 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:42:56,175 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [354268119] [2022-11-03 02:42:56,175 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [354268119] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:42:56,175 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:42:56,176 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:42:56,176 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [402133889] [2022-11-03 02:42:56,176 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:42:56,177 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:42:56,178 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:42:56,180 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:42:56,181 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:42:56,181 INFO L87 Difference]: Start difference. First operand 43 states and 53 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:42:56,268 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:42:56,268 INFO L93 Difference]: Finished difference Result 119 states and 150 transitions. [2022-11-03 02:42:56,269 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:42:56,269 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-11-03 02:42:56,270 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:42:56,271 INFO L225 Difference]: With dead ends: 119 [2022-11-03 02:42:56,271 INFO L226 Difference]: Without dead ends: 78 [2022-11-03 02:42:56,272 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:42:56,273 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 35 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 90 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:42:56,274 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 90 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:42:56,275 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-11-03 02:42:56,290 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 76. [2022-11-03 02:42:56,291 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 51 states have (on average 1.2745098039215685) internal successors, (65), 58 states have internal predecessors, (65), 12 states have call successors, (12), 12 states have call predecessors, (12), 12 states have return successors, (16), 12 states have call predecessors, (16), 12 states have call successors, (16) [2022-11-03 02:42:56,292 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 93 transitions. [2022-11-03 02:42:56,292 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 93 transitions. Word has length 23 [2022-11-03 02:42:56,293 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:42:56,293 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 93 transitions. [2022-11-03 02:42:56,293 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:42:56,294 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 93 transitions. [2022-11-03 02:42:56,295 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-03 02:42:56,295 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:42:56,295 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:42:56,295 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-03 02:42:56,296 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:42:56,296 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:42:56,296 INFO L85 PathProgramCache]: Analyzing trace with hash 483580111, now seen corresponding path program 1 times [2022-11-03 02:42:56,297 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:42:56,297 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [528242395] [2022-11-03 02:42:56,297 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:42:56,298 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:42:56,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:42:56,406 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:42:56,407 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:42:56,407 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [528242395] [2022-11-03 02:42:56,407 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [528242395] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:42:56,407 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:42:56,407 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 02:42:56,408 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1835239371] [2022-11-03 02:42:56,408 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:42:56,408 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:42:56,409 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:42:56,409 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:42:56,409 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:42:56,409 INFO L87 Difference]: Start difference. First operand 76 states and 93 transitions. Second operand has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 02:42:56,591 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:42:56,591 INFO L93 Difference]: Finished difference Result 220 states and 276 transitions. [2022-11-03 02:42:56,592 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-03 02:42:56,592 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 28 [2022-11-03 02:42:56,593 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:42:56,595 INFO L225 Difference]: With dead ends: 220 [2022-11-03 02:42:56,595 INFO L226 Difference]: Without dead ends: 146 [2022-11-03 02:42:56,596 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-03 02:42:56,597 INFO L413 NwaCegarLoop]: 45 mSDtfsCounter, 30 mSDsluCounter, 198 mSDsCounter, 0 mSdLazyCounter, 94 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 32 SdHoareTripleChecker+Valid, 199 SdHoareTripleChecker+Invalid, 96 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 94 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:42:56,597 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [32 Valid, 199 Invalid, 96 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 94 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:42:56,598 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 146 states. [2022-11-03 02:42:56,624 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 146 to 138. [2022-11-03 02:42:56,625 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 138 states, 93 states have (on average 1.2365591397849462) internal successors, (115), 104 states have internal predecessors, (115), 22 states have call successors, (22), 22 states have call predecessors, (22), 22 states have return successors, (30), 22 states have call predecessors, (30), 22 states have call successors, (30) [2022-11-03 02:42:56,626 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 138 states to 138 states and 167 transitions. [2022-11-03 02:42:56,626 INFO L78 Accepts]: Start accepts. Automaton has 138 states and 167 transitions. Word has length 28 [2022-11-03 02:42:56,627 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:42:56,627 INFO L495 AbstractCegarLoop]: Abstraction has 138 states and 167 transitions. [2022-11-03 02:42:56,627 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 02:42:56,627 INFO L276 IsEmpty]: Start isEmpty. Operand 138 states and 167 transitions. [2022-11-03 02:42:56,628 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-03 02:42:56,629 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:42:56,629 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:42:56,629 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-03 02:42:56,629 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:42:56,630 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:42:56,630 INFO L85 PathProgramCache]: Analyzing trace with hash 1473979752, now seen corresponding path program 1 times [2022-11-03 02:42:56,630 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:42:56,630 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2069809650] [2022-11-03 02:42:56,630 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:42:56,631 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:42:56,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:42:56,717 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:42:56,717 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:42:56,718 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2069809650] [2022-11-03 02:42:56,718 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2069809650] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:42:56,718 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:42:56,718 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:42:56,718 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1075180991] [2022-11-03 02:42:56,719 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:42:56,719 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:42:56,719 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:42:56,720 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:42:56,720 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:42:56,720 INFO L87 Difference]: Start difference. First operand 138 states and 167 transitions. Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-03 02:42:56,818 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:42:56,818 INFO L93 Difference]: Finished difference Result 212 states and 266 transitions. [2022-11-03 02:42:56,819 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:42:56,819 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 31 [2022-11-03 02:42:56,820 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:42:56,823 INFO L225 Difference]: With dead ends: 212 [2022-11-03 02:42:56,823 INFO L226 Difference]: Without dead ends: 210 [2022-11-03 02:42:56,824 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:42:56,825 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 29 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 82 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:42:56,826 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [29 Valid, 82 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:42:56,827 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 210 states. [2022-11-03 02:42:56,872 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 210. [2022-11-03 02:42:56,873 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 141 states have (on average 1.2411347517730495) internal successors, (175), 158 states have internal predecessors, (175), 34 states have call successors, (34), 34 states have call predecessors, (34), 34 states have return successors, (54), 34 states have call predecessors, (54), 34 states have call successors, (54) [2022-11-03 02:42:56,875 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 263 transitions. [2022-11-03 02:42:56,875 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 263 transitions. Word has length 31 [2022-11-03 02:42:56,876 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:42:56,876 INFO L495 AbstractCegarLoop]: Abstraction has 210 states and 263 transitions. [2022-11-03 02:42:56,876 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-03 02:42:56,877 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 263 transitions. [2022-11-03 02:42:56,879 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-03 02:42:56,879 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:42:56,880 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:42:56,880 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-03 02:42:56,880 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:42:56,881 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:42:56,881 INFO L85 PathProgramCache]: Analyzing trace with hash 1333939930, now seen corresponding path program 1 times [2022-11-03 02:42:56,881 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:42:56,881 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2122022229] [2022-11-03 02:42:56,882 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:42:56,882 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:42:56,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:42:57,533 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:42:57,534 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:42:57,534 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2122022229] [2022-11-03 02:42:57,535 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2122022229] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:42:57,535 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:42:57,535 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-03 02:42:57,535 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1167999495] [2022-11-03 02:42:57,536 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:42:57,536 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-03 02:42:57,536 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:42:57,537 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-03 02:42:57,537 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-03 02:42:57,537 INFO L87 Difference]: Start difference. First operand 210 states and 263 transitions. Second operand has 9 states, 9 states have (on average 4.555555555555555) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-03 02:42:58,076 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:42:58,076 INFO L93 Difference]: Finished difference Result 695 states and 894 transitions. [2022-11-03 02:42:58,077 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-03 02:42:58,077 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.555555555555555) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 53 [2022-11-03 02:42:58,078 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:42:58,081 INFO L225 Difference]: With dead ends: 695 [2022-11-03 02:42:58,081 INFO L226 Difference]: Without dead ends: 487 [2022-11-03 02:42:58,083 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=60, Invalid=150, Unknown=0, NotChecked=0, Total=210 [2022-11-03 02:42:58,084 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 155 mSDsluCounter, 176 mSDsCounter, 0 mSdLazyCounter, 295 mSolverCounterSat, 84 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 212 SdHoareTripleChecker+Invalid, 379 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 84 IncrementalHoareTripleChecker+Valid, 295 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:42:58,085 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [166 Valid, 212 Invalid, 379 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [84 Valid, 295 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 02:42:58,086 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 487 states. [2022-11-03 02:42:58,156 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 487 to 341. [2022-11-03 02:42:58,157 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 341 states, 232 states have (on average 1.2155172413793103) internal successors, (282), 251 states have internal predecessors, (282), 51 states have call successors, (51), 51 states have call predecessors, (51), 57 states have return successors, (81), 54 states have call predecessors, (81), 51 states have call successors, (81) [2022-11-03 02:42:58,159 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 341 states to 341 states and 414 transitions. [2022-11-03 02:42:58,160 INFO L78 Accepts]: Start accepts. Automaton has 341 states and 414 transitions. Word has length 53 [2022-11-03 02:42:58,160 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:42:58,160 INFO L495 AbstractCegarLoop]: Abstraction has 341 states and 414 transitions. [2022-11-03 02:42:58,161 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.555555555555555) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-03 02:42:58,161 INFO L276 IsEmpty]: Start isEmpty. Operand 341 states and 414 transitions. [2022-11-03 02:42:58,163 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-03 02:42:58,163 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:42:58,164 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:42:58,164 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-03 02:42:58,164 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:42:58,165 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:42:58,165 INFO L85 PathProgramCache]: Analyzing trace with hash 2137767215, now seen corresponding path program 1 times [2022-11-03 02:42:58,165 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:42:58,166 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1682871757] [2022-11-03 02:42:58,166 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:42:58,166 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:42:58,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:42:58,303 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-03 02:42:58,303 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:42:58,303 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1682871757] [2022-11-03 02:42:58,303 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1682871757] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:42:58,304 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:42:58,304 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:42:58,304 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1606467619] [2022-11-03 02:42:58,304 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:42:58,305 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:42:58,305 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:42:58,305 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:42:58,306 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:42:58,306 INFO L87 Difference]: Start difference. First operand 341 states and 414 transitions. Second operand has 4 states, 4 states have (on average 9.0) internal successors, (36), 4 states have internal predecessors, (36), 2 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-03 02:42:58,460 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:42:58,462 INFO L93 Difference]: Finished difference Result 533 states and 658 transitions. [2022-11-03 02:42:58,462 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:42:58,463 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.0) internal successors, (36), 4 states have internal predecessors, (36), 2 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 56 [2022-11-03 02:42:58,463 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:42:58,466 INFO L225 Difference]: With dead ends: 533 [2022-11-03 02:42:58,466 INFO L226 Difference]: Without dead ends: 295 [2022-11-03 02:42:58,467 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:42:58,468 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 38 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 53 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 144 SdHoareTripleChecker+Invalid, 57 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 53 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:42:58,469 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 144 Invalid, 57 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 53 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:42:58,470 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 295 states. [2022-11-03 02:42:58,512 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 295 to 279. [2022-11-03 02:42:58,513 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 279 states, 188 states have (on average 1.202127659574468) internal successors, (226), 204 states have internal predecessors, (226), 42 states have call successors, (42), 42 states have call predecessors, (42), 48 states have return successors, (64), 44 states have call predecessors, (64), 42 states have call successors, (64) [2022-11-03 02:42:58,515 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 279 states to 279 states and 332 transitions. [2022-11-03 02:42:58,515 INFO L78 Accepts]: Start accepts. Automaton has 279 states and 332 transitions. Word has length 56 [2022-11-03 02:42:58,516 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:42:58,516 INFO L495 AbstractCegarLoop]: Abstraction has 279 states and 332 transitions. [2022-11-03 02:42:58,516 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.0) internal successors, (36), 4 states have internal predecessors, (36), 2 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-03 02:42:58,516 INFO L276 IsEmpty]: Start isEmpty. Operand 279 states and 332 transitions. [2022-11-03 02:42:58,518 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-11-03 02:42:58,518 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:42:58,518 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:42:58,518 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-03 02:42:58,519 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:42:58,519 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:42:58,519 INFO L85 PathProgramCache]: Analyzing trace with hash 815947914, now seen corresponding path program 1 times [2022-11-03 02:42:58,519 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:42:58,520 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [576722691] [2022-11-03 02:42:58,520 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:42:58,520 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:42:58,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:42:58,649 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 18 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-03 02:42:58,650 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:42:58,650 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [576722691] [2022-11-03 02:42:58,650 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [576722691] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:42:58,650 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1847806653] [2022-11-03 02:42:58,650 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:42:58,651 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:42:58,651 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:42:58,653 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:42:58,661 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-03 02:42:58,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:42:58,818 INFO L263 TraceCheckSpWp]: Trace formula consists of 436 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-03 02:42:58,827 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:42:58,943 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:42:58,945 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:42:58,945 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1847806653] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:42:58,945 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 02:42:58,945 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5] total 6 [2022-11-03 02:42:58,946 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [361375922] [2022-11-03 02:42:58,946 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:42:58,948 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:42:58,948 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:42:58,949 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:42:58,949 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:42:58,950 INFO L87 Difference]: Start difference. First operand 279 states and 332 transitions. Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-11-03 02:42:59,055 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:42:59,055 INFO L93 Difference]: Finished difference Result 476 states and 576 transitions. [2022-11-03 02:42:59,056 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:42:59,056 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 61 [2022-11-03 02:42:59,057 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:42:59,059 INFO L225 Difference]: With dead ends: 476 [2022-11-03 02:42:59,059 INFO L226 Difference]: Without dead ends: 259 [2022-11-03 02:42:59,061 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:42:59,063 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 21 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 83 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:42:59,064 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 83 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:42:59,065 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2022-11-03 02:42:59,111 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 259. [2022-11-03 02:42:59,112 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 259 states, 175 states have (on average 1.16) internal successors, (203), 190 states have internal predecessors, (203), 39 states have call successors, (39), 39 states have call predecessors, (39), 44 states have return successors, (49), 41 states have call predecessors, (49), 39 states have call successors, (49) [2022-11-03 02:42:59,114 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 259 states to 259 states and 291 transitions. [2022-11-03 02:42:59,128 INFO L78 Accepts]: Start accepts. Automaton has 259 states and 291 transitions. Word has length 61 [2022-11-03 02:42:59,131 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:42:59,132 INFO L495 AbstractCegarLoop]: Abstraction has 259 states and 291 transitions. [2022-11-03 02:42:59,132 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-11-03 02:42:59,132 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 291 transitions. [2022-11-03 02:42:59,134 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-11-03 02:42:59,134 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:42:59,135 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:42:59,179 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-03 02:42:59,357 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:42:59,357 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:42:59,358 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:42:59,358 INFO L85 PathProgramCache]: Analyzing trace with hash -1867995876, now seen corresponding path program 1 times [2022-11-03 02:42:59,358 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:42:59,358 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1276677571] [2022-11-03 02:42:59,358 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:42:59,358 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:42:59,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:43:00,179 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 7 proven. 12 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:43:00,179 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:43:00,180 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1276677571] [2022-11-03 02:43:00,180 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1276677571] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:43:00,180 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1141041240] [2022-11-03 02:43:00,180 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:43:00,181 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:43:00,181 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:43:00,182 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:43:00,186 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-03 02:43:00,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:43:00,305 INFO L263 TraceCheckSpWp]: Trace formula consists of 441 conjuncts, 27 conjunts are in the unsatisfiable core [2022-11-03 02:43:00,309 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:43:00,765 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 13 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:43:00,765 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:43:01,320 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 10 proven. 3 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-03 02:43:01,321 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1141041240] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:43:01,321 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1610368331] [2022-11-03 02:43:01,345 INFO L159 IcfgInterpreter]: Started Sifa with 42 locations of interest [2022-11-03 02:43:01,345 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:43:01,349 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:43:01,355 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:43:01,356 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:43:20,402 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 307 for LOIs [2022-11-03 02:43:20,501 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 31 for LOIs [2022-11-03 02:43:20,721 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 60 for LOIs [2022-11-03 02:43:20,938 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 23 for LOIs [2022-11-03 02:43:20,943 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 24 for LOIs [2022-11-03 02:43:20,946 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 36 for LOIs [2022-11-03 02:43:20,953 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:43:33,268 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6900#(and (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~8#1|) (= ~head~0.offset 0) (<= |timeShift_isPumpRunning_#res#1| 2147483647) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1|) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~8#1|) (<= 0 ~methAndRunningLastTime~0) (<= 0 |old(~methAndRunningLastTime~0)|) (<= 0 ~methaneLevelCritical~0) (= ~head~0.base 0) (= |#NULL.offset| 0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 1) (<= 0 (+ |timeShift_isPumpRunning_#res#1| 2147483648)) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1| 0)) (not (= ~methAndRunningLastTime~0 0)) (<= 0 |#StackHeapBarrier|) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| ~methaneLevelCritical~0) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-03 02:43:33,268 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:43:33,269 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:43:33,269 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 11, 11] total 29 [2022-11-03 02:43:33,270 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [112638179] [2022-11-03 02:43:33,270 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:43:33,270 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-11-03 02:43:33,271 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:43:33,271 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-11-03 02:43:33,278 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=362, Invalid=3178, Unknown=0, NotChecked=0, Total=3540 [2022-11-03 02:43:33,294 INFO L87 Difference]: Start difference. First operand 259 states and 291 transitions. Second operand has 29 states, 26 states have (on average 3.8461538461538463) internal successors, (100), 24 states have internal predecessors, (100), 13 states have call successors, (24), 12 states have call predecessors, (24), 10 states have return successors, (21), 9 states have call predecessors, (21), 12 states have call successors, (21) [2022-11-03 02:43:35,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:43:35,576 INFO L93 Difference]: Finished difference Result 826 states and 956 transitions. [2022-11-03 02:43:35,576 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-03 02:43:35,577 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 26 states have (on average 3.8461538461538463) internal successors, (100), 24 states have internal predecessors, (100), 13 states have call successors, (24), 12 states have call predecessors, (24), 10 states have return successors, (21), 9 states have call predecessors, (21), 12 states have call successors, (21) Word has length 64 [2022-11-03 02:43:35,577 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:43:35,580 INFO L225 Difference]: With dead ends: 826 [2022-11-03 02:43:35,581 INFO L226 Difference]: Without dead ends: 629 [2022-11-03 02:43:35,584 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 238 GetRequests, 152 SyntacticMatches, 3 SemanticMatches, 83 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2721 ImplicationChecksByTransitivity, 13.8s TimeCoverageRelationStatistics Valid=830, Invalid=6310, Unknown=0, NotChecked=0, Total=7140 [2022-11-03 02:43:35,585 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 788 mSDsluCounter, 911 mSDsCounter, 0 mSdLazyCounter, 1365 mSolverCounterSat, 429 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 793 SdHoareTripleChecker+Valid, 839 SdHoareTripleChecker+Invalid, 1794 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 429 IncrementalHoareTripleChecker+Valid, 1365 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:43:35,585 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [793 Valid, 839 Invalid, 1794 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [429 Valid, 1365 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-11-03 02:43:35,587 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 629 states. [2022-11-03 02:43:35,648 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 629 to 505. [2022-11-03 02:43:35,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 505 states, 348 states have (on average 1.1580459770114941) internal successors, (403), 372 states have internal predecessors, (403), 72 states have call successors, (72), 68 states have call predecessors, (72), 84 states have return successors, (91), 81 states have call predecessors, (91), 72 states have call successors, (91) [2022-11-03 02:43:35,651 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 505 states to 505 states and 566 transitions. [2022-11-03 02:43:35,652 INFO L78 Accepts]: Start accepts. Automaton has 505 states and 566 transitions. Word has length 64 [2022-11-03 02:43:35,652 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:43:35,652 INFO L495 AbstractCegarLoop]: Abstraction has 505 states and 566 transitions. [2022-11-03 02:43:35,653 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 26 states have (on average 3.8461538461538463) internal successors, (100), 24 states have internal predecessors, (100), 13 states have call successors, (24), 12 states have call predecessors, (24), 10 states have return successors, (21), 9 states have call predecessors, (21), 12 states have call successors, (21) [2022-11-03 02:43:35,653 INFO L276 IsEmpty]: Start isEmpty. Operand 505 states and 566 transitions. [2022-11-03 02:43:35,655 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2022-11-03 02:43:35,655 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:43:35,655 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:43:35,694 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-03 02:43:35,874 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-03 02:43:35,874 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:43:35,874 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:43:35,875 INFO L85 PathProgramCache]: Analyzing trace with hash 1930595331, now seen corresponding path program 1 times [2022-11-03 02:43:35,875 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:43:35,875 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2123424822] [2022-11-03 02:43:35,875 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:43:35,875 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:43:35,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:43:37,031 INFO L134 CoverageAnalysis]: Checked inductivity of 125 backedges. 49 proven. 55 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-03 02:43:37,031 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:43:37,031 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2123424822] [2022-11-03 02:43:37,031 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2123424822] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:43:37,031 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1301619022] [2022-11-03 02:43:37,032 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:43:37,032 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:43:37,032 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:43:37,033 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:43:37,041 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-03 02:43:37,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:43:37,181 INFO L263 TraceCheckSpWp]: Trace formula consists of 601 conjuncts, 36 conjunts are in the unsatisfiable core [2022-11-03 02:43:37,185 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:43:37,778 INFO L134 CoverageAnalysis]: Checked inductivity of 125 backedges. 69 proven. 42 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-03 02:43:37,778 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:43:38,679 INFO L134 CoverageAnalysis]: Checked inductivity of 125 backedges. 72 proven. 25 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-11-03 02:43:38,680 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1301619022] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:43:38,680 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1415826153] [2022-11-03 02:43:38,686 INFO L159 IcfgInterpreter]: Started Sifa with 42 locations of interest [2022-11-03 02:43:38,687 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:43:38,687 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:43:38,687 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:43:38,688 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:43:47,250 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 44 for LOIs [2022-11-03 02:43:47,258 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 32 for LOIs [2022-11-03 02:43:47,542 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 61 for LOIs [2022-11-03 02:43:47,784 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 24 for LOIs [2022-11-03 02:43:47,786 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 43 for LOIs [2022-11-03 02:43:47,794 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 37 for LOIs [2022-11-03 02:43:47,797 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:43:54,791 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9736#(and (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~8#1|) (= ~head~0.offset 0) (<= |timeShift_isPumpRunning_#res#1| 2147483647) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1|) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~8#1|) (<= 0 ~methAndRunningLastTime~0) (<= 0 |old(~methAndRunningLastTime~0)|) (<= |old(~methAndRunningLastTime~0)| 1) (<= 0 ~head~0.base) (<= 0 ~methaneLevelCritical~0) (<= ~head~0.base 0) (= |#NULL.offset| 0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 1) (<= 0 (+ |timeShift_isPumpRunning_#res#1| 2147483648)) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1| 0)) (not (= ~methAndRunningLastTime~0 0)) (<= ~methAndRunningLastTime~0 1) (<= 0 |#StackHeapBarrier|) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| ~methaneLevelCritical~0) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-03 02:43:54,791 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:43:54,791 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:43:54,791 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 13, 13] total 38 [2022-11-03 02:43:54,791 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1528352947] [2022-11-03 02:43:54,791 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:43:54,792 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2022-11-03 02:43:54,792 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:43:54,793 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2022-11-03 02:43:54,794 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=487, Invalid=3935, Unknown=0, NotChecked=0, Total=4422 [2022-11-03 02:43:54,795 INFO L87 Difference]: Start difference. First operand 505 states and 566 transitions. Second operand has 38 states, 36 states have (on average 4.75) internal successors, (171), 36 states have internal predecessors, (171), 23 states have call successors, (35), 10 states have call predecessors, (35), 16 states have return successors, (36), 18 states have call predecessors, (36), 23 states have call successors, (36) [2022-11-03 02:43:55,961 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:43:55,962 INFO L93 Difference]: Finished difference Result 668 states and 760 transitions. [2022-11-03 02:43:55,966 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-03 02:43:55,966 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 36 states have (on average 4.75) internal successors, (171), 36 states have internal predecessors, (171), 23 states have call successors, (35), 10 states have call predecessors, (35), 16 states have return successors, (36), 18 states have call predecessors, (36), 23 states have call successors, (36) Word has length 109 [2022-11-03 02:43:55,967 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:43:55,967 INFO L225 Difference]: With dead ends: 668 [2022-11-03 02:43:55,967 INFO L226 Difference]: Without dead ends: 0 [2022-11-03 02:43:55,970 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 361 GetRequests, 277 SyntacticMatches, 8 SemanticMatches, 76 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2794 ImplicationChecksByTransitivity, 8.2s TimeCoverageRelationStatistics Valid=748, Invalid=5258, Unknown=0, NotChecked=0, Total=6006 [2022-11-03 02:43:55,971 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 580 mSDsluCounter, 404 mSDsCounter, 0 mSdLazyCounter, 626 mSolverCounterSat, 339 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 583 SdHoareTripleChecker+Valid, 375 SdHoareTripleChecker+Invalid, 965 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 339 IncrementalHoareTripleChecker+Valid, 626 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:43:55,971 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [583 Valid, 375 Invalid, 965 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [339 Valid, 626 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-03 02:43:55,972 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-03 02:43:55,972 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-03 02:43:55,972 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:43:55,972 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-03 02:43:55,972 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 109 [2022-11-03 02:43:55,973 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:43:55,973 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-03 02:43:55,973 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 36 states have (on average 4.75) internal successors, (171), 36 states have internal predecessors, (171), 23 states have call successors, (35), 10 states have call predecessors, (35), 16 states have return successors, (36), 18 states have call predecessors, (36), 23 states have call successors, (36) [2022-11-03 02:43:55,973 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-03 02:43:55,973 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-03 02:43:55,976 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-03 02:43:56,012 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-03 02:43:56,194 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:43:56,195 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-03 02:43:59,627 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 371 377) no Hoare annotation was computed. [2022-11-03 02:43:59,627 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 371 377) the Hoare annotation is: true [2022-11-03 02:43:59,627 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 264 275) the Hoare annotation is: true [2022-11-03 02:43:59,627 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 264 275) no Hoare annotation was computed. [2022-11-03 02:43:59,627 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 276 284) the Hoare annotation is: true [2022-11-03 02:43:59,627 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 276 284) no Hoare annotation was computed. [2022-11-03 02:43:59,628 INFO L895 garLoopResultBuilder]: At program point L209(line 209) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= ~waterLevel~0 1)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3 .cse4) (or .cse2 .cse3 .cse4 (and .cse5 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse6)) (or .cse7 .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1)) .cse3 .cse4) (or .cse7 .cse0 .cse8 (and .cse5 .cse6) .cse4) (or .cse7 .cse0 .cse1 .cse8 .cse4))) [2022-11-03 02:43:59,628 INFO L899 garLoopResultBuilder]: For program point L209-1(line 209) no Hoare annotation was computed. [2022-11-03 02:43:59,629 INFO L895 garLoopResultBuilder]: At program point L424(line 424) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse4 (not .cse5)) (.cse6 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) (and .cse2 .cse3 (= ~waterLevel~0 1) .cse4) .cse5) (or .cse0 .cse1 .cse6 (and .cse2 .cse3 (= |old(~waterLevel~0)| ~waterLevel~0) .cse4) .cse5) (or (not (= |old(~pumpRunning~0)| 1)) .cse6 .cse5)))) [2022-11-03 02:43:59,632 INFO L895 garLoopResultBuilder]: At program point L424-1(lines 405 429) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= ~waterLevel~0 1)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3 .cse4) (or .cse2 .cse3 .cse4 (and .cse5 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse6)) (or .cse7 .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1)) .cse3 .cse4) (or .cse7 .cse0 .cse8 (and .cse5 .cse6) .cse4) (or .cse7 .cse0 .cse1 .cse8 .cse4))) [2022-11-03 02:43:59,632 INFO L899 garLoopResultBuilder]: For program point L358-1(lines 358 364) no Hoare annotation was computed. [2022-11-03 02:43:59,632 INFO L895 garLoopResultBuilder]: At program point L986(line 986) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or (not (= |old(~pumpRunning~0)| 1)) .cse2 .cse3) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) .cse3))) [2022-11-03 02:43:59,633 INFO L899 garLoopResultBuilder]: For program point L351-1(lines 350 369) no Hoare annotation was computed. [2022-11-03 02:43:59,633 INFO L895 garLoopResultBuilder]: At program point L413(lines 413 421) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 (= ~methAndRunningLastTime~0 0) (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2 .cse3) (or .cse1 .cse2 (and (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (= ~waterLevel~0 1) (= ~pumpRunning~0 1)) .cse3) (or .cse4 .cse0 .cse2 .cse3) (or .cse4 .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3))) [2022-11-03 02:43:59,633 INFO L895 garLoopResultBuilder]: At program point L409(lines 409 426) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse4 (= ~waterLevel~0 1)) (.cse7 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (not (= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse5 (not .cse6))) (and (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) (and .cse2 .cse3 .cse4 .cse5) .cse6) (or .cse1 .cse3 (not (= ~methaneLevelCritical~0 0)) .cse7 .cse8 .cse6) (or (and .cse4 (= ~pumpRunning~0 1)) .cse7 .cse8 .cse6) (or .cse0 .cse1 .cse8 (and .cse2 .cse3 (= |old(~waterLevel~0)| ~waterLevel~0) .cse5) .cse6)))) [2022-11-03 02:43:59,634 INFO L899 garLoopResultBuilder]: For program point L215(lines 215 225) no Hoare annotation was computed. [2022-11-03 02:43:59,634 INFO L895 garLoopResultBuilder]: At program point L211(lines 211 228) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse4 (= ~waterLevel~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse10 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse9 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (and .cse3 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse4)) (or .cse5 .cse6 (and .cse7 (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1)) .cse1 .cse2) (or .cse5 .cse6 .cse8 (and .cse3 .cse4) .cse2) (or .cse5 .cse6 .cse9 .cse1 .cse2 .cse10) (or .cse5 .cse6 .cse7 .cse8 .cse2) (or .cse5 .cse6 .cse8 .cse9 .cse2 .cse10) (or .cse6 (and .cse7 .cse10) .cse9 .cse0 .cse1 .cse2))) [2022-11-03 02:43:59,634 INFO L895 garLoopResultBuilder]: At program point L211-1(lines 203 231) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0))) (let ((.cse2 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse9 (not (= ~methaneLevelCritical~0 0))) (.cse10 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~waterLevel~0 1)) (.cse6 (not .cse7)) (.cse11 (not (= |old(~pumpRunning~0)| 1))) (.cse8 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6) .cse7) (or .cse0 .cse1 .cse8 .cse7 (and (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))) (or .cse0 .cse1 .cse2 .cse9 .cse7 .cse10) (or .cse0 .cse1 (and .cse4 .cse10) .cse9 .cse8 .cse7) (or .cse1 .cse9 .cse11 .cse8 .cse7 .cse10) (or (and .cse3 .cse4 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse5 .cse6) .cse11 .cse8 .cse7)))) [2022-11-03 02:43:59,636 INFO L899 garLoopResultBuilder]: For program point L216(lines 216 222) no Hoare annotation was computed. [2022-11-03 02:43:59,636 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 347 370) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3 .cse4) (or .cse2 .cse3 .cse4 (and .cse5 (= ~pumpRunning~0 1))) (or .cse6 (and .cse7 .cse1 (= ~waterLevel~0 1)) .cse0 (not (= |old(~waterLevel~0)| 1)) .cse4) (or .cse6 .cse0 (and .cse7 .cse1 .cse5) .cse3 .cse4))) [2022-11-03 02:43:59,636 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 347 370) no Hoare annotation was computed. [2022-11-03 02:43:59,637 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 986) no Hoare annotation was computed. [2022-11-03 02:43:59,637 INFO L895 garLoopResultBuilder]: At program point L419(line 419) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or (not (= |old(~pumpRunning~0)| 1)) .cse2 .cse3) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) .cse3))) [2022-11-03 02:43:59,637 INFO L902 garLoopResultBuilder]: At program point L96(line 96) the Hoare annotation is: true [2022-11-03 02:43:59,637 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 90 119) no Hoare annotation was computed. [2022-11-03 02:43:59,637 INFO L899 garLoopResultBuilder]: For program point L96-1(line 96) no Hoare annotation was computed. [2022-11-03 02:43:59,638 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 90 119) the Hoare annotation is: true [2022-11-03 02:43:59,638 INFO L902 garLoopResultBuilder]: At program point L115(lines 90 119) the Hoare annotation is: true [2022-11-03 02:43:59,638 INFO L899 garLoopResultBuilder]: For program point L111(line 111) no Hoare annotation was computed. [2022-11-03 02:43:59,638 INFO L899 garLoopResultBuilder]: For program point L104(lines 104 108) no Hoare annotation was computed. [2022-11-03 02:43:59,638 INFO L902 garLoopResultBuilder]: At program point L104-1(lines 104 108) the Hoare annotation is: true [2022-11-03 02:43:59,639 INFO L902 garLoopResultBuilder]: At program point L100-2(lines 100 114) the Hoare annotation is: true [2022-11-03 02:43:59,639 INFO L895 garLoopResultBuilder]: At program point L597-2(lines 589 602) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)) (and .cse0 .cse4 .cse5 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3 (= ~waterLevel~0 1)))) [2022-11-03 02:43:59,639 INFO L899 garLoopResultBuilder]: For program point L560(lines 559 606) no Hoare annotation was computed. [2022-11-03 02:43:59,639 INFO L895 garLoopResultBuilder]: At program point L581(line 581) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)) (and .cse0 .cse4 .cse5 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3 (= ~waterLevel~0 1)))) [2022-11-03 02:43:59,640 INFO L902 garLoopResultBuilder]: At program point L610(lines 549 614) the Hoare annotation is: true [2022-11-03 02:43:59,640 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-03 02:43:59,640 INFO L899 garLoopResultBuilder]: For program point L569(lines 569 575) no Hoare annotation was computed. [2022-11-03 02:43:59,640 INFO L899 garLoopResultBuilder]: For program point L569-1(lines 569 575) no Hoare annotation was computed. [2022-11-03 02:43:59,640 INFO L895 garLoopResultBuilder]: At program point L177(lines 177 184) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0) (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1)) [2022-11-03 02:43:59,641 INFO L902 garLoopResultBuilder]: At program point L177-2(lines 177 184) the Hoare annotation is: true [2022-11-03 02:43:59,641 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-03 02:43:59,641 INFO L895 garLoopResultBuilder]: At program point L607(lines 558 608) the Hoare annotation is: false [2022-11-03 02:43:59,641 INFO L899 garLoopResultBuilder]: For program point L579(lines 579 585) no Hoare annotation was computed. [2022-11-03 02:43:59,641 INFO L895 garLoopResultBuilder]: At program point L579-1(lines 579 585) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)) (and .cse0 .cse4 .cse5 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3 (= ~waterLevel~0 1)))) [2022-11-03 02:43:59,642 INFO L895 garLoopResultBuilder]: At program point L604(lines 559 606) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 (= ~pumpRunning~0 1)) (and .cse0 (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse1 .cse2 (= ~waterLevel~0 1)))) [2022-11-03 02:43:59,642 INFO L895 garLoopResultBuilder]: At program point L571(line 571) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (<= ~waterLevel~0 2) (= ~pumpRunning~0 1)) (and .cse0 (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse1 .cse2 (= ~waterLevel~0 1)))) [2022-11-03 02:43:59,642 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 379 403) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse2 .cse3))) [2022-11-03 02:43:59,642 INFO L895 garLoopResultBuilder]: At program point L393(line 393) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0))) (or .cse0 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse1 .cse2))) [2022-11-03 02:43:59,643 INFO L895 garLoopResultBuilder]: At program point L387(lines 387 395) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 1)) (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse2 .cse3 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0))))) [2022-11-03 02:43:59,643 INFO L895 garLoopResultBuilder]: At program point L383(lines 383 400) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse2 .cse3))) [2022-11-03 02:43:59,643 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 379 403) no Hoare annotation was computed. [2022-11-03 02:43:59,643 INFO L895 garLoopResultBuilder]: At program point L398(line 398) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse1 .cse2) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2))) [2022-11-03 02:43:59,644 INFO L899 garLoopResultBuilder]: For program point L398-1(lines 379 403) no Hoare annotation was computed. [2022-11-03 02:43:59,644 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 252 263) no Hoare annotation was computed. [2022-11-03 02:43:59,644 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 252 263) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= ~pumpRunning~0 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (= ~waterLevel~0 1) (not (= ~methAndRunningLastTime~0 0))) (or (not (= ~pumpRunning~0 1)) (not (= |old(~waterLevel~0)| 2)) (= |old(~waterLevel~0)| ~waterLevel~0) .cse0))) [2022-11-03 02:43:59,648 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:43:59,651 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-03 02:43:59,682 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 03.11 02:43:59 BoogieIcfgContainer [2022-11-03 02:43:59,682 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-03 02:43:59,683 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-03 02:43:59,683 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-03 02:43:59,684 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-03 02:43:59,684 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:42:54" (3/4) ... [2022-11-03 02:43:59,688 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-03 02:43:59,695 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-03 02:43:59,695 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-03 02:43:59,695 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-03 02:43:59,695 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-03 02:43:59,696 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-03 02:43:59,696 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 02:43:59,696 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-03 02:43:59,705 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 75 nodes and edges [2022-11-03 02:43:59,706 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 28 nodes and edges [2022-11-03 02:43:59,706 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2022-11-03 02:43:59,707 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-03 02:43:59,707 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-03 02:43:59,708 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 02:43:59,709 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 02:43:59,738 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((!(\old(pumpRunning) == 1) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2)) || 0 == systemActive) [2022-11-03 02:43:59,739 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1) && !(0 == systemActive))) || 0 == systemActive) && (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((waterLevel == 1 && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 2)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) [2022-11-03 02:43:59,739 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((!(\old(pumpRunning) == 1) || !(\old(waterLevel) == 2)) || 0 == systemActive) || ((pumpRunning == 0 && 1 <= tmp) && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) [2022-11-03 02:43:59,739 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(waterLevel <= 2)) || waterLevel < 2) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-11-03 02:43:59,740 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 1) || !(\old(waterLevel) == 2)) || 0 == systemActive) || ((pumpRunning == 0 && 1 <= tmp) && waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || tmp == 0)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || tmp == 0)) && (((((!(\old(methAndRunningLastTime) == 0) || (methAndRunningLastTime == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) [2022-11-03 02:43:59,740 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1) && !(0 == systemActive))) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || tmp == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((!(\old(methAndRunningLastTime) == 0) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || tmp == 0)) && (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= tmp) && waterLevel == 1) && !(0 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) [2022-11-03 02:43:59,741 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && ((!(\old(pumpRunning) == 1) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || 0 == systemActive) [2022-11-03 02:43:59,741 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((!(\old(pumpRunning) == 1) || !(\old(waterLevel) == 2)) || ((1 <= tmp && waterLevel == 1) && pumpRunning == 1)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || 0 == systemActive) [2022-11-03 02:43:59,742 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && tmp == 1)) || !(waterLevel <= 2)) || waterLevel < 2) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) || (pumpRunning == 0 && tmp == 0)) [2022-11-03 02:43:59,771 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/witness.graphml [2022-11-03 02:43:59,772 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-03 02:43:59,772 INFO L158 Benchmark]: Toolchain (without parser) took 66779.02ms. Allocated memory was 100.7MB in the beginning and 778.0MB in the end (delta: 677.4MB). Free memory was 71.4MB in the beginning and 467.4MB in the end (delta: -396.0MB). Peak memory consumption was 282.4MB. Max. memory is 16.1GB. [2022-11-03 02:43:59,773 INFO L158 Benchmark]: CDTParser took 0.36ms. Allocated memory is still 100.7MB. Free memory is still 56.4MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 02:43:59,773 INFO L158 Benchmark]: CACSL2BoogieTranslator took 547.50ms. Allocated memory was 100.7MB in the beginning and 144.7MB in the end (delta: 44.0MB). Free memory was 71.1MB in the beginning and 109.9MB in the end (delta: -38.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-11-03 02:43:59,774 INFO L158 Benchmark]: Boogie Procedure Inliner took 56.40ms. Allocated memory is still 144.7MB. Free memory was 109.9MB in the beginning and 107.4MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 02:43:59,774 INFO L158 Benchmark]: Boogie Preprocessor took 31.23ms. Allocated memory is still 144.7MB. Free memory was 107.4MB in the beginning and 105.7MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 02:43:59,775 INFO L158 Benchmark]: RCFGBuilder took 855.32ms. Allocated memory is still 144.7MB. Free memory was 105.7MB in the beginning and 118.9MB in the end (delta: -13.2MB). Peak memory consumption was 34.7MB. Max. memory is 16.1GB. [2022-11-03 02:43:59,775 INFO L158 Benchmark]: TraceAbstraction took 65190.10ms. Allocated memory was 144.7MB in the beginning and 778.0MB in the end (delta: 633.3MB). Free memory was 118.2MB in the beginning and 472.6MB in the end (delta: -354.5MB). Peak memory consumption was 473.5MB. Max. memory is 16.1GB. [2022-11-03 02:43:59,775 INFO L158 Benchmark]: Witness Printer took 88.74ms. Allocated memory is still 778.0MB. Free memory was 472.6MB in the beginning and 467.4MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-03 02:43:59,777 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.36ms. Allocated memory is still 100.7MB. Free memory is still 56.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 547.50ms. Allocated memory was 100.7MB in the beginning and 144.7MB in the end (delta: 44.0MB). Free memory was 71.1MB in the beginning and 109.9MB in the end (delta: -38.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 56.40ms. Allocated memory is still 144.7MB. Free memory was 109.9MB in the beginning and 107.4MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 31.23ms. Allocated memory is still 144.7MB. Free memory was 107.4MB in the beginning and 105.7MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 855.32ms. Allocated memory is still 144.7MB. Free memory was 105.7MB in the beginning and 118.9MB in the end (delta: -13.2MB). Peak memory consumption was 34.7MB. Max. memory is 16.1GB. * TraceAbstraction took 65190.10ms. Allocated memory was 144.7MB in the beginning and 778.0MB in the end (delta: 633.3MB). Free memory was 118.2MB in the beginning and 472.6MB in the end (delta: -354.5MB). Peak memory consumption was 473.5MB. Max. memory is 16.1GB. * Witness Printer took 88.74ms. Allocated memory is still 778.0MB. Free memory was 472.6MB in the beginning and 467.4MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 986]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 56 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 65.0s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 5.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1759 SdHoareTripleChecker+Valid, 2.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1732 mSDsluCounter, 2200 SdHoareTripleChecker+Invalid, 2.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1989 mSDsCounter, 873 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2608 IncrementalHoareTripleChecker+Invalid, 3481 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 873 mSolverCounterUnsat, 603 mSDtfsCounter, 2608 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 716 GetRequests, 514 SyntacticMatches, 11 SemanticMatches, 191 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5542 ImplicationChecksByTransitivity, 22.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=505occurred in iteration=10, InterpolantAutomatonStates: 93, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 11 MinimizatonAttempts, 296 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 34 LocationsWithAnnotation, 939 PreInvPairs, 1004 NumberOfFragments, 1506 HoareAnnotationTreeSize, 939 FomulaSimplifications, 689 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 34 FomulaSimplificationsInter, 10053 FormulaSimplificationTreeSizeReductionInter, 3.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 6.2s InterpolantComputationTime, 714 NumberOfCodeBlocks, 714 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 871 ConstructedInterpolants, 0 QuantifiedInterpolants, 3220 SizeOfPredicates, 26 NumberOfNonLiveVariables, 1478 ConjunctsInSsa, 67 ConjunctsInUnsatCore, 16 InterpolantComputations, 9 PerfectInterpolantSequences, 383/532 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 177]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 409]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1) && !(0 == systemActive))) || 0 == systemActive) && (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((waterLevel == 1 && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 2)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) - InvariantResult [Line: 387]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && tmp == 1)) || !(waterLevel <= 2)) || waterLevel < 2) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) || (pumpRunning == 0 && tmp == 0)) - InvariantResult [Line: 549]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 177]: Loop Invariant Derived loop invariant: ((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 1) && waterLevel == 1 - InvariantResult [Line: 90]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 347]: Loop Invariant Derived loop invariant: (((((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((!(\old(pumpRunning) == 1) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2)) || 0 == systemActive) - InvariantResult [Line: 203]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1) && !(0 == systemActive))) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || tmp == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((!(\old(methAndRunningLastTime) == 0) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || tmp == 0)) && (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= tmp) && waterLevel == 1) && !(0 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 1) || !(\old(waterLevel) == 2)) || 0 == systemActive) || ((pumpRunning == 0 && 1 <= tmp) && waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || tmp == 0)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || tmp == 0)) && (((((!(\old(methAndRunningLastTime) == 0) || (methAndRunningLastTime == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: (((((tmp == systemActive && 2 == waterLevel) && tmp == 1) && splverifierCounter == 0) && pumpRunning == 1) || (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && 2 == waterLevel) && tmp == 1) && splverifierCounter == 0)) || (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) - InvariantResult [Line: 413]: Loop Invariant Derived loop invariant: (((((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((!(\old(pumpRunning) == 1) || !(\old(waterLevel) == 2)) || ((1 <= tmp && waterLevel == 1) && pumpRunning == 1)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || 0 == systemActive) - InvariantResult [Line: 405]: Loop Invariant Derived loop invariant: ((((((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((!(\old(pumpRunning) == 1) || !(\old(waterLevel) == 2)) || 0 == systemActive) || ((pumpRunning == 0 && 1 <= tmp) && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && ((!(\old(pumpRunning) == 1) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || 0 == systemActive) - InvariantResult [Line: 559]: Loop Invariant Derived loop invariant: ((((tmp == systemActive && 2 == waterLevel) && tmp == 1) && splverifierCounter == 0) && pumpRunning == 1) || (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) - InvariantResult [Line: 383]: Loop Invariant Derived loop invariant: ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(waterLevel <= 2)) || waterLevel < 2) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 558]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 100]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-11-03 02:43:59,851 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2915e668-6089-42ba-9a8e-12030e9daef5/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE