./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 242c9b24ea8c293cca4af0028144a97f9048375edcd4379fb21e62564563d3d5 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 03:40:12,434 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 03:40:12,442 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 03:40:12,505 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 03:40:12,505 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 03:40:12,509 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 03:40:12,512 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 03:40:12,516 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 03:40:12,519 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 03:40:12,525 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 03:40:12,526 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 03:40:12,529 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 03:40:12,529 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 03:40:12,532 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 03:40:12,533 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 03:40:12,536 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 03:40:12,537 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 03:40:12,538 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 03:40:12,540 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 03:40:12,550 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 03:40:12,552 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 03:40:12,553 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 03:40:12,556 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 03:40:12,558 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 03:40:12,568 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 03:40:12,568 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 03:40:12,568 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 03:40:12,570 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 03:40:12,571 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 03:40:12,572 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 03:40:12,572 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 03:40:12,573 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 03:40:12,575 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 03:40:12,577 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 03:40:12,579 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 03:40:12,579 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 03:40:12,580 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 03:40:12,580 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 03:40:12,580 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 03:40:12,581 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 03:40:12,582 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 03:40:12,583 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-03 03:40:12,630 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 03:40:12,630 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 03:40:12,631 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 03:40:12,631 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 03:40:12,632 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 03:40:12,632 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 03:40:12,632 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 03:40:12,633 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 03:40:12,633 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 03:40:12,633 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-03 03:40:12,634 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 03:40:12,634 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 03:40:12,635 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-03 03:40:12,635 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-03 03:40:12,635 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 03:40:12,635 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-03 03:40:12,636 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-03 03:40:12,636 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-03 03:40:12,637 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 03:40:12,637 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-03 03:40:12,637 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-03 03:40:12,637 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-03 03:40:12,637 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 03:40:12,638 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-03 03:40:12,638 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 03:40:12,638 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-03 03:40:12,638 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-03 03:40:12,638 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-03 03:40:12,639 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 03:40:12,639 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-03 03:40:12,639 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 03:40:12,639 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 03:40:12,640 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 03:40:12,640 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 03:40:12,640 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-03 03:40:12,640 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 03:40:12,640 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-03 03:40:12,641 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-03 03:40:12,641 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-03 03:40:12,641 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-03 03:40:12,641 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 03:40:12,641 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 242c9b24ea8c293cca4af0028144a97f9048375edcd4379fb21e62564563d3d5 [2022-11-03 03:40:13,011 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 03:40:13,048 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 03:40:13,053 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 03:40:13,054 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 03:40:13,055 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 03:40:13,057 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c [2022-11-03 03:40:13,150 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/data/8629443e7/850ce509c38b448f9d5f71db0473e349/FLAG1ba8b7379 [2022-11-03 03:40:13,839 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 03:40:13,840 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c [2022-11-03 03:40:13,866 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/data/8629443e7/850ce509c38b448f9d5f71db0473e349/FLAG1ba8b7379 [2022-11-03 03:40:14,121 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/data/8629443e7/850ce509c38b448f9d5f71db0473e349 [2022-11-03 03:40:14,124 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 03:40:14,127 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 03:40:14,135 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 03:40:14,135 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 03:40:14,139 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 03:40:14,140 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 03:40:14" (1/1) ... [2022-11-03 03:40:14,141 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6b23be16 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:40:14, skipping insertion in model container [2022-11-03 03:40:14,142 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 03:40:14" (1/1) ... [2022-11-03 03:40:14,152 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 03:40:14,228 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 03:40:14,633 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c[9329,9342] [2022-11-03 03:40:14,732 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 03:40:14,742 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 03:40:14,816 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c[9329,9342] [2022-11-03 03:40:14,868 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 03:40:14,900 INFO L208 MainTranslator]: Completed translation [2022-11-03 03:40:14,901 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:40:14 WrapperNode [2022-11-03 03:40:14,901 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 03:40:14,902 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 03:40:14,902 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 03:40:14,902 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 03:40:14,911 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:40:14" (1/1) ... [2022-11-03 03:40:14,941 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:40:14" (1/1) ... [2022-11-03 03:40:14,991 INFO L138 Inliner]: procedures = 57, calls = 157, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 262 [2022-11-03 03:40:14,991 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 03:40:14,992 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 03:40:14,992 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 03:40:14,992 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 03:40:15,005 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:40:14" (1/1) ... [2022-11-03 03:40:15,005 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:40:14" (1/1) ... [2022-11-03 03:40:15,021 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:40:14" (1/1) ... [2022-11-03 03:40:15,022 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:40:14" (1/1) ... [2022-11-03 03:40:15,028 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:40:14" (1/1) ... [2022-11-03 03:40:15,033 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:40:14" (1/1) ... [2022-11-03 03:40:15,035 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:40:14" (1/1) ... [2022-11-03 03:40:15,036 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:40:14" (1/1) ... [2022-11-03 03:40:15,039 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 03:40:15,040 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 03:40:15,041 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 03:40:15,041 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 03:40:15,042 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:40:14" (1/1) ... [2022-11-03 03:40:15,049 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 03:40:15,063 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 03:40:15,080 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 03:40:15,114 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 03:40:15,151 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-03 03:40:15,152 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-03 03:40:15,152 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-03 03:40:15,152 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-03 03:40:15,152 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-03 03:40:15,153 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-03 03:40:15,153 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-03 03:40:15,153 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-03 03:40:15,153 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-03 03:40:15,154 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 03:40:15,154 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 03:40:15,154 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-03 03:40:15,154 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-03 03:40:15,154 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-03 03:40:15,155 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-03 03:40:15,155 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-03 03:40:15,155 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-03 03:40:15,155 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-03 03:40:15,156 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 03:40:15,156 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 03:40:15,286 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 03:40:15,289 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 03:40:15,829 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 03:40:15,948 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 03:40:15,948 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-03 03:40:15,951 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 03:40:15 BoogieIcfgContainer [2022-11-03 03:40:15,951 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 03:40:15,953 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 03:40:15,954 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 03:40:15,967 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 03:40:15,967 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 03:40:14" (1/3) ... [2022-11-03 03:40:15,968 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@19e9fdfa and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 03:40:15, skipping insertion in model container [2022-11-03 03:40:15,968 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:40:14" (2/3) ... [2022-11-03 03:40:15,971 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@19e9fdfa and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 03:40:15, skipping insertion in model container [2022-11-03 03:40:15,971 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 03:40:15" (3/3) ... [2022-11-03 03:40:15,972 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product51.cil.c [2022-11-03 03:40:15,995 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 03:40:15,995 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-03 03:40:16,078 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 03:40:16,091 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5fef1365, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 03:40:16,092 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-03 03:40:16,098 INFO L276 IsEmpty]: Start isEmpty. Operand has 64 states, 41 states have (on average 1.4634146341463414) internal successors, (60), 50 states have internal predecessors, (60), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-03 03:40:16,111 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-03 03:40:16,111 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:40:16,112 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:40:16,113 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:40:16,124 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:40:16,124 INFO L85 PathProgramCache]: Analyzing trace with hash -582250377, now seen corresponding path program 1 times [2022-11-03 03:40:16,134 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:40:16,134 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [882534146] [2022-11-03 03:40:16,135 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:40:16,136 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:40:16,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:40:16,471 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:40:16,472 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:40:16,472 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [882534146] [2022-11-03 03:40:16,473 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [882534146] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:40:16,473 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:40:16,473 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 03:40:16,475 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [209137389] [2022-11-03 03:40:16,476 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:40:16,481 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-03 03:40:16,483 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:40:16,523 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-03 03:40:16,525 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 03:40:16,528 INFO L87 Difference]: Start difference. First operand has 64 states, 41 states have (on average 1.4634146341463414) internal successors, (60), 50 states have internal predecessors, (60), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:40:16,639 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:40:16,646 INFO L93 Difference]: Finished difference Result 126 states and 173 transitions. [2022-11-03 03:40:16,648 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-03 03:40:16,649 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-11-03 03:40:16,650 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:40:16,659 INFO L225 Difference]: With dead ends: 126 [2022-11-03 03:40:16,662 INFO L226 Difference]: Without dead ends: 59 [2022-11-03 03:40:16,668 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 03:40:16,672 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 66 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 03:40:16,673 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 66 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 03:40:16,691 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-11-03 03:40:16,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 59. [2022-11-03 03:40:16,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 38 states have (on average 1.368421052631579) internal successors, (52), 46 states have internal predecessors, (52), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2022-11-03 03:40:16,742 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 77 transitions. [2022-11-03 03:40:16,745 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 77 transitions. Word has length 17 [2022-11-03 03:40:16,746 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:40:16,746 INFO L495 AbstractCegarLoop]: Abstraction has 59 states and 77 transitions. [2022-11-03 03:40:16,746 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:40:16,747 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 77 transitions. [2022-11-03 03:40:16,750 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-03 03:40:16,751 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:40:16,751 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:40:16,752 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-03 03:40:16,752 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:40:16,753 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:40:16,754 INFO L85 PathProgramCache]: Analyzing trace with hash 133290525, now seen corresponding path program 1 times [2022-11-03 03:40:16,754 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:40:16,754 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1986256205] [2022-11-03 03:40:16,755 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:40:16,755 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:40:16,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:40:16,933 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:40:16,933 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:40:16,933 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1986256205] [2022-11-03 03:40:16,933 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1986256205] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:40:16,934 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:40:16,934 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 03:40:16,934 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1294668804] [2022-11-03 03:40:16,934 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:40:16,936 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 03:40:16,936 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:40:16,937 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 03:40:16,937 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 03:40:16,937 INFO L87 Difference]: Start difference. First operand 59 states and 77 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:40:16,988 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:40:16,989 INFO L93 Difference]: Finished difference Result 90 states and 116 transitions. [2022-11-03 03:40:16,989 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 03:40:16,989 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-11-03 03:40:16,990 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:40:16,991 INFO L225 Difference]: With dead ends: 90 [2022-11-03 03:40:16,991 INFO L226 Difference]: Without dead ends: 51 [2022-11-03 03:40:16,992 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 03:40:16,993 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 14 mSDsluCounter, 46 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 03:40:16,994 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 87 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 03:40:16,995 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51 states. [2022-11-03 03:40:17,003 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51. [2022-11-03 03:40:17,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 33 states have (on average 1.393939393939394) internal successors, (46), 41 states have internal predecessors, (46), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 7 states have call predecessors, (10), 10 states have call successors, (10) [2022-11-03 03:40:17,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 66 transitions. [2022-11-03 03:40:17,005 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 66 transitions. Word has length 18 [2022-11-03 03:40:17,005 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:40:17,006 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 66 transitions. [2022-11-03 03:40:17,006 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:40:17,006 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 66 transitions. [2022-11-03 03:40:17,007 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-03 03:40:17,007 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:40:17,008 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:40:17,008 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-03 03:40:17,008 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:40:17,009 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:40:17,009 INFO L85 PathProgramCache]: Analyzing trace with hash -1388733443, now seen corresponding path program 1 times [2022-11-03 03:40:17,009 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:40:17,009 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1332496753] [2022-11-03 03:40:17,009 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:40:17,010 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:40:17,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:40:17,169 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:40:17,169 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:40:17,169 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1332496753] [2022-11-03 03:40:17,170 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1332496753] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:40:17,170 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:40:17,170 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 03:40:17,170 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1077974831] [2022-11-03 03:40:17,171 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:40:17,171 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 03:40:17,171 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:40:17,172 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 03:40:17,172 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 03:40:17,172 INFO L87 Difference]: Start difference. First operand 51 states and 66 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:40:17,336 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:40:17,336 INFO L93 Difference]: Finished difference Result 148 states and 198 transitions. [2022-11-03 03:40:17,337 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 03:40:17,337 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2022-11-03 03:40:17,338 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:40:17,339 INFO L225 Difference]: With dead ends: 148 [2022-11-03 03:40:17,340 INFO L226 Difference]: Without dead ends: 99 [2022-11-03 03:40:17,340 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 03:40:17,342 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 80 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 71 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 80 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 71 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 03:40:17,343 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [80 Valid, 154 Invalid, 80 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 71 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 03:40:17,344 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 99 states. [2022-11-03 03:40:17,386 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 99 to 82. [2022-11-03 03:40:17,390 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 54 states have (on average 1.3888888888888888) internal successors, (75), 65 states have internal predecessors, (75), 15 states have call successors, (15), 12 states have call predecessors, (15), 12 states have return successors, (16), 11 states have call predecessors, (16), 15 states have call successors, (16) [2022-11-03 03:40:17,391 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 106 transitions. [2022-11-03 03:40:17,395 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 106 transitions. Word has length 21 [2022-11-03 03:40:17,396 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:40:17,396 INFO L495 AbstractCegarLoop]: Abstraction has 82 states and 106 transitions. [2022-11-03 03:40:17,396 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:40:17,396 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 106 transitions. [2022-11-03 03:40:17,398 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-03 03:40:17,400 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:40:17,401 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:40:17,402 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-03 03:40:17,402 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:40:17,403 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:40:17,404 INFO L85 PathProgramCache]: Analyzing trace with hash 409171719, now seen corresponding path program 1 times [2022-11-03 03:40:17,404 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:40:17,407 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1880833843] [2022-11-03 03:40:17,407 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:40:17,408 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:40:17,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:40:17,693 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:40:17,693 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:40:17,693 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1880833843] [2022-11-03 03:40:17,694 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1880833843] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:40:17,694 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:40:17,694 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 03:40:17,695 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1126402191] [2022-11-03 03:40:17,695 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:40:17,695 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 03:40:17,696 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:40:17,696 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 03:40:17,697 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-03 03:40:17,697 INFO L87 Difference]: Start difference. First operand 82 states and 106 transitions. Second operand has 6 states, 5 states have (on average 4.2) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:40:17,926 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:40:17,927 INFO L93 Difference]: Finished difference Result 238 states and 313 transitions. [2022-11-03 03:40:17,927 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-03 03:40:17,928 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.2) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-11-03 03:40:17,928 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:40:17,936 INFO L225 Difference]: With dead ends: 238 [2022-11-03 03:40:17,937 INFO L226 Difference]: Without dead ends: 158 [2022-11-03 03:40:17,942 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-03 03:40:17,948 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 42 mSDsluCounter, 252 mSDsCounter, 0 mSdLazyCounter, 98 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 268 SdHoareTripleChecker+Invalid, 100 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 98 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 03:40:17,953 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 268 Invalid, 100 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 98 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 03:40:17,956 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 158 states. [2022-11-03 03:40:17,999 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 158 to 150. [2022-11-03 03:40:18,003 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 150 states, 99 states have (on average 1.3636363636363635) internal successors, (135), 118 states have internal predecessors, (135), 28 states have call successors, (28), 22 states have call predecessors, (28), 22 states have return successors, (30), 20 states have call predecessors, (30), 28 states have call successors, (30) [2022-11-03 03:40:18,006 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 150 states to 150 states and 193 transitions. [2022-11-03 03:40:18,007 INFO L78 Accepts]: Start accepts. Automaton has 150 states and 193 transitions. Word has length 24 [2022-11-03 03:40:18,008 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:40:18,008 INFO L495 AbstractCegarLoop]: Abstraction has 150 states and 193 transitions. [2022-11-03 03:40:18,009 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.2) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:40:18,009 INFO L276 IsEmpty]: Start isEmpty. Operand 150 states and 193 transitions. [2022-11-03 03:40:18,013 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-03 03:40:18,015 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:40:18,016 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:40:18,016 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-03 03:40:18,016 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:40:18,017 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:40:18,017 INFO L85 PathProgramCache]: Analyzing trace with hash -1367692917, now seen corresponding path program 1 times [2022-11-03 03:40:18,018 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:40:18,018 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1326056053] [2022-11-03 03:40:18,018 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:40:18,018 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:40:18,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:40:18,169 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:40:18,170 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:40:18,170 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1326056053] [2022-11-03 03:40:18,171 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1326056053] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:40:18,171 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:40:18,172 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 03:40:18,174 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [686667666] [2022-11-03 03:40:18,177 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:40:18,179 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 03:40:18,180 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:40:18,180 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 03:40:18,181 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 03:40:18,182 INFO L87 Difference]: Start difference. First operand 150 states and 193 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 03:40:18,269 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:40:18,269 INFO L93 Difference]: Finished difference Result 230 states and 303 transitions. [2022-11-03 03:40:18,270 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 03:40:18,276 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 27 [2022-11-03 03:40:18,276 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:40:18,278 INFO L225 Difference]: With dead ends: 230 [2022-11-03 03:40:18,281 INFO L226 Difference]: Without dead ends: 228 [2022-11-03 03:40:18,282 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 03:40:18,284 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 41 mSDsluCounter, 61 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 110 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 03:40:18,287 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [41 Valid, 110 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 03:40:18,289 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 228 states. [2022-11-03 03:40:18,350 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 228 to 228. [2022-11-03 03:40:18,351 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 228 states, 150 states have (on average 1.3666666666666667) internal successors, (205), 179 states have internal predecessors, (205), 43 states have call successors, (43), 34 states have call predecessors, (43), 34 states have return successors, (52), 31 states have call predecessors, (52), 43 states have call successors, (52) [2022-11-03 03:40:18,354 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 228 states to 228 states and 300 transitions. [2022-11-03 03:40:18,354 INFO L78 Accepts]: Start accepts. Automaton has 228 states and 300 transitions. Word has length 27 [2022-11-03 03:40:18,355 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:40:18,355 INFO L495 AbstractCegarLoop]: Abstraction has 228 states and 300 transitions. [2022-11-03 03:40:18,355 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 03:40:18,355 INFO L276 IsEmpty]: Start isEmpty. Operand 228 states and 300 transitions. [2022-11-03 03:40:18,358 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-03 03:40:18,358 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:40:18,359 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:40:18,359 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-03 03:40:18,359 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:40:18,360 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:40:18,360 INFO L85 PathProgramCache]: Analyzing trace with hash 105517168, now seen corresponding path program 1 times [2022-11-03 03:40:18,360 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:40:18,360 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [739215568] [2022-11-03 03:40:18,360 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:40:18,361 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:40:18,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:40:18,587 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 03:40:18,588 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:40:18,588 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [739215568] [2022-11-03 03:40:18,588 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [739215568] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:40:18,588 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:40:18,588 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 03:40:18,589 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [668601025] [2022-11-03 03:40:18,589 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:40:18,589 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 03:40:18,589 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:40:18,590 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 03:40:18,590 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-03 03:40:18,590 INFO L87 Difference]: Start difference. First operand 228 states and 300 transitions. Second operand has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-03 03:40:18,897 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:40:18,897 INFO L93 Difference]: Finished difference Result 603 states and 817 transitions. [2022-11-03 03:40:18,897 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-03 03:40:18,898 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 47 [2022-11-03 03:40:18,898 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:40:18,901 INFO L225 Difference]: With dead ends: 603 [2022-11-03 03:40:18,901 INFO L226 Difference]: Without dead ends: 377 [2022-11-03 03:40:18,903 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2022-11-03 03:40:18,904 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 126 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 134 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 127 SdHoareTripleChecker+Valid, 170 SdHoareTripleChecker+Invalid, 192 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 134 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 03:40:18,904 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [127 Valid, 170 Invalid, 192 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 134 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 03:40:18,906 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 377 states. [2022-11-03 03:40:18,974 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 377 to 355. [2022-11-03 03:40:18,975 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 355 states, 242 states have (on average 1.2644628099173554) internal successors, (306), 265 states have internal predecessors, (306), 54 states have call successors, (54), 51 states have call predecessors, (54), 58 states have return successors, (85), 55 states have call predecessors, (85), 54 states have call successors, (85) [2022-11-03 03:40:18,978 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 355 states to 355 states and 445 transitions. [2022-11-03 03:40:18,978 INFO L78 Accepts]: Start accepts. Automaton has 355 states and 445 transitions. Word has length 47 [2022-11-03 03:40:18,979 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:40:18,979 INFO L495 AbstractCegarLoop]: Abstraction has 355 states and 445 transitions. [2022-11-03 03:40:18,979 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-03 03:40:18,979 INFO L276 IsEmpty]: Start isEmpty. Operand 355 states and 445 transitions. [2022-11-03 03:40:18,984 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-11-03 03:40:18,984 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:40:18,985 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:40:18,985 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-03 03:40:18,985 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:40:18,986 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:40:18,986 INFO L85 PathProgramCache]: Analyzing trace with hash 962647073, now seen corresponding path program 1 times [2022-11-03 03:40:18,986 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:40:18,986 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1584598163] [2022-11-03 03:40:18,986 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:40:18,987 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:40:19,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:40:19,130 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 03:40:19,130 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:40:19,131 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1584598163] [2022-11-03 03:40:19,131 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1584598163] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:40:19,131 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:40:19,131 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 03:40:19,131 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1427433563] [2022-11-03 03:40:19,132 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:40:19,132 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 03:40:19,132 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:40:19,133 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 03:40:19,136 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 03:40:19,136 INFO L87 Difference]: Start difference. First operand 355 states and 445 transitions. Second operand has 4 states, 3 states have (on average 15.666666666666666) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-11-03 03:40:19,290 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:40:19,290 INFO L93 Difference]: Finished difference Result 712 states and 892 transitions. [2022-11-03 03:40:19,291 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 03:40:19,291 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 15.666666666666666) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 61 [2022-11-03 03:40:19,291 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:40:19,293 INFO L225 Difference]: With dead ends: 712 [2022-11-03 03:40:19,293 INFO L226 Difference]: Without dead ends: 286 [2022-11-03 03:40:19,294 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 03:40:19,295 INFO L413 NwaCegarLoop]: 74 mSDtfsCounter, 84 mSDsluCounter, 65 mSDsCounter, 0 mSdLazyCounter, 76 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 78 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 76 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 03:40:19,296 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 120 Invalid, 78 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 76 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 03:40:19,296 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 286 states. [2022-11-03 03:40:19,328 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 286 to 286. [2022-11-03 03:40:19,329 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 286 states, 194 states have (on average 1.2216494845360826) internal successors, (237), 211 states have internal predecessors, (237), 43 states have call successors, (43), 40 states have call predecessors, (43), 48 states have return successors, (66), 45 states have call predecessors, (66), 43 states have call successors, (66) [2022-11-03 03:40:19,331 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 286 states to 286 states and 346 transitions. [2022-11-03 03:40:19,332 INFO L78 Accepts]: Start accepts. Automaton has 286 states and 346 transitions. Word has length 61 [2022-11-03 03:40:19,332 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:40:19,332 INFO L495 AbstractCegarLoop]: Abstraction has 286 states and 346 transitions. [2022-11-03 03:40:19,333 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 15.666666666666666) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-11-03 03:40:19,333 INFO L276 IsEmpty]: Start isEmpty. Operand 286 states and 346 transitions. [2022-11-03 03:40:19,334 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-11-03 03:40:19,334 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:40:19,335 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:40:19,335 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-03 03:40:19,335 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:40:19,335 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:40:19,335 INFO L85 PathProgramCache]: Analyzing trace with hash -959699185, now seen corresponding path program 1 times [2022-11-03 03:40:19,336 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:40:19,336 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [754074468] [2022-11-03 03:40:19,336 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:40:19,336 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:40:19,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:40:19,831 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 03:40:19,832 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:40:19,836 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [754074468] [2022-11-03 03:40:19,836 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [754074468] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:40:19,837 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:40:19,837 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-03 03:40:19,837 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [889835845] [2022-11-03 03:40:19,837 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:40:19,839 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-03 03:40:19,839 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:40:19,840 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-03 03:40:19,841 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-11-03 03:40:19,842 INFO L87 Difference]: Start difference. First operand 286 states and 346 transitions. Second operand has 8 states, 8 states have (on average 5.5) internal successors, (44), 7 states have internal predecessors, (44), 4 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-11-03 03:40:20,320 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:40:20,320 INFO L93 Difference]: Finished difference Result 796 states and 994 transitions. [2022-11-03 03:40:20,321 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-03 03:40:20,321 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.5) internal successors, (44), 7 states have internal predecessors, (44), 4 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 58 [2022-11-03 03:40:20,322 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:40:20,324 INFO L225 Difference]: With dead ends: 796 [2022-11-03 03:40:20,325 INFO L226 Difference]: Without dead ends: 512 [2022-11-03 03:40:20,326 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=56, Invalid=126, Unknown=0, NotChecked=0, Total=182 [2022-11-03 03:40:20,327 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 136 mSDsluCounter, 202 mSDsCounter, 0 mSdLazyCounter, 262 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 145 SdHoareTripleChecker+Valid, 248 SdHoareTripleChecker+Invalid, 327 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 262 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 03:40:20,327 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [145 Valid, 248 Invalid, 327 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 262 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 03:40:20,328 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 512 states. [2022-11-03 03:40:20,392 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 512 to 469. [2022-11-03 03:40:20,394 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 469 states, 323 states have (on average 1.2352941176470589) internal successors, (399), 350 states have internal predecessors, (399), 75 states have call successors, (75), 60 states have call predecessors, (75), 70 states have return successors, (114), 76 states have call predecessors, (114), 75 states have call successors, (114) [2022-11-03 03:40:20,397 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 469 states to 469 states and 588 transitions. [2022-11-03 03:40:20,398 INFO L78 Accepts]: Start accepts. Automaton has 469 states and 588 transitions. Word has length 58 [2022-11-03 03:40:20,398 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:40:20,398 INFO L495 AbstractCegarLoop]: Abstraction has 469 states and 588 transitions. [2022-11-03 03:40:20,398 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.5) internal successors, (44), 7 states have internal predecessors, (44), 4 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-11-03 03:40:20,399 INFO L276 IsEmpty]: Start isEmpty. Operand 469 states and 588 transitions. [2022-11-03 03:40:20,400 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-11-03 03:40:20,401 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:40:20,401 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:40:20,401 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-03 03:40:20,401 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:40:20,402 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:40:20,402 INFO L85 PathProgramCache]: Analyzing trace with hash 1400233666, now seen corresponding path program 1 times [2022-11-03 03:40:20,402 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:40:20,402 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [758239572] [2022-11-03 03:40:20,403 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:40:20,403 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:40:20,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:40:20,546 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-03 03:40:20,546 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:40:20,547 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [758239572] [2022-11-03 03:40:20,547 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [758239572] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:40:20,547 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:40:20,547 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 03:40:20,547 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1681920754] [2022-11-03 03:40:20,547 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:40:20,548 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 03:40:20,548 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:40:20,549 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 03:40:20,549 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 03:40:20,549 INFO L87 Difference]: Start difference. First operand 469 states and 588 transitions. Second operand has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (7), 1 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-03 03:40:20,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:40:20,688 INFO L93 Difference]: Finished difference Result 747 states and 965 transitions. [2022-11-03 03:40:20,688 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 03:40:20,689 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (7), 1 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 61 [2022-11-03 03:40:20,689 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:40:20,692 INFO L225 Difference]: With dead ends: 747 [2022-11-03 03:40:20,692 INFO L226 Difference]: Without dead ends: 459 [2022-11-03 03:40:20,693 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 03:40:20,694 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 40 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 50 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 40 SdHoareTripleChecker+Valid, 158 SdHoareTripleChecker+Invalid, 53 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 50 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 03:40:20,694 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [40 Valid, 158 Invalid, 53 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 50 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 03:40:20,695 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 459 states. [2022-11-03 03:40:20,742 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 459 to 314. [2022-11-03 03:40:20,743 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 314 states, 215 states have (on average 1.2) internal successors, (258), 231 states have internal predecessors, (258), 46 states have call successors, (46), 44 states have call predecessors, (46), 52 states have return successors, (65), 48 states have call predecessors, (65), 46 states have call successors, (65) [2022-11-03 03:40:20,745 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 314 states to 314 states and 369 transitions. [2022-11-03 03:40:20,745 INFO L78 Accepts]: Start accepts. Automaton has 314 states and 369 transitions. Word has length 61 [2022-11-03 03:40:20,746 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:40:20,746 INFO L495 AbstractCegarLoop]: Abstraction has 314 states and 369 transitions. [2022-11-03 03:40:20,746 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (7), 1 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-03 03:40:20,747 INFO L276 IsEmpty]: Start isEmpty. Operand 314 states and 369 transitions. [2022-11-03 03:40:20,748 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-11-03 03:40:20,748 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:40:20,749 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:40:20,749 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-03 03:40:20,749 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:40:20,749 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:40:20,750 INFO L85 PathProgramCache]: Analyzing trace with hash -1982639529, now seen corresponding path program 1 times [2022-11-03 03:40:20,750 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:40:20,750 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [254171808] [2022-11-03 03:40:20,750 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:40:20,751 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:40:20,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:40:20,877 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 19 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-03 03:40:20,878 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:40:20,878 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [254171808] [2022-11-03 03:40:20,878 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [254171808] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 03:40:20,878 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1901043824] [2022-11-03 03:40:20,879 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:40:20,879 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:40:20,879 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 03:40:20,881 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 03:40:20,889 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-03 03:40:21,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:40:21,017 INFO L263 TraceCheckSpWp]: Trace formula consists of 436 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-03 03:40:21,023 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 03:40:21,114 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:40:21,115 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 03:40:21,115 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1901043824] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:40:21,115 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 03:40:21,116 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5] total 6 [2022-11-03 03:40:21,116 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1642935164] [2022-11-03 03:40:21,116 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:40:21,117 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 03:40:21,117 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:40:21,117 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 03:40:21,117 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-03 03:40:21,118 INFO L87 Difference]: Start difference. First operand 314 states and 369 transitions. Second operand has 3 states, 3 states have (on average 16.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-11-03 03:40:21,229 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:40:21,229 INFO L93 Difference]: Finished difference Result 542 states and 641 transitions. [2022-11-03 03:40:21,230 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 03:40:21,230 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 16.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 63 [2022-11-03 03:40:21,231 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:40:21,232 INFO L225 Difference]: With dead ends: 542 [2022-11-03 03:40:21,233 INFO L226 Difference]: Without dead ends: 294 [2022-11-03 03:40:21,234 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 69 GetRequests, 65 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-03 03:40:21,235 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 25 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 99 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 03:40:21,235 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 99 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 03:40:21,236 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2022-11-03 03:40:21,296 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 294. [2022-11-03 03:40:21,297 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 294 states, 202 states have (on average 1.1782178217821782) internal successors, (238), 217 states have internal predecessors, (238), 43 states have call successors, (43), 41 states have call predecessors, (43), 48 states have return successors, (53), 45 states have call predecessors, (53), 43 states have call successors, (53) [2022-11-03 03:40:21,299 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294 states to 294 states and 334 transitions. [2022-11-03 03:40:21,300 INFO L78 Accepts]: Start accepts. Automaton has 294 states and 334 transitions. Word has length 63 [2022-11-03 03:40:21,301 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:40:21,301 INFO L495 AbstractCegarLoop]: Abstraction has 294 states and 334 transitions. [2022-11-03 03:40:21,301 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 16.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-11-03 03:40:21,302 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 334 transitions. [2022-11-03 03:40:21,303 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-11-03 03:40:21,303 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:40:21,304 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:40:21,343 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-03 03:40:21,522 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-03 03:40:21,523 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:40:21,523 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:40:21,524 INFO L85 PathProgramCache]: Analyzing trace with hash -1052650222, now seen corresponding path program 1 times [2022-11-03 03:40:21,524 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:40:21,524 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [485674818] [2022-11-03 03:40:21,524 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:40:21,524 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:40:21,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:40:22,391 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 7 proven. 13 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 03:40:22,392 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:40:22,392 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [485674818] [2022-11-03 03:40:22,392 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [485674818] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 03:40:22,392 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [47225179] [2022-11-03 03:40:22,393 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:40:22,393 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:40:22,393 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 03:40:22,394 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 03:40:22,414 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-03 03:40:22,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:40:22,537 INFO L263 TraceCheckSpWp]: Trace formula consists of 441 conjuncts, 34 conjunts are in the unsatisfiable core [2022-11-03 03:40:22,545 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 03:40:23,139 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 13 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:40:23,140 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 03:40:23,887 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 15 proven. 3 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 03:40:23,887 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [47225179] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 03:40:23,888 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [918075412] [2022-11-03 03:40:23,910 INFO L159 IcfgInterpreter]: Started Sifa with 43 locations of interest [2022-11-03 03:40:23,910 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 03:40:23,914 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 03:40:23,920 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 03:40:23,920 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 03:40:31,428 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 50 for LOIs [2022-11-03 03:40:31,442 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 46 for LOIs [2022-11-03 03:40:31,807 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 22 for LOIs [2022-11-03 03:40:31,876 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 22 for LOIs [2022-11-03 03:40:31,878 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 24 for LOIs [2022-11-03 03:40:31,882 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 25 for LOIs [2022-11-03 03:40:31,885 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 03:40:38,103 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10504#(and (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|) (= ~head~0.offset 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= |timeShift_isPumpRunning_#res#1| 2147483647) (<= |#NULL.offset| 0) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= 0 ~methAndRunningLastTime~0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 2147483647) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)) (<= 0 |old(~methAndRunningLastTime~0)|) (<= 0 ~head~0.base) (<= ~head~0.base 0) (<= 0 |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1|) (<= 0 (+ |timeShift_isPumpRunning_#res#1| 2147483648)) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| ~methaneLevelCritical~0) (<= 0 |#NULL.offset|) (not (= ~methAndRunningLastTime~0 0)) (<= 0 |#StackHeapBarrier|) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 0)) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-03 03:40:38,103 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 03:40:38,103 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 03:40:38,103 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 11, 14] total 35 [2022-11-03 03:40:38,104 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1775673110] [2022-11-03 03:40:38,104 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 03:40:38,105 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-11-03 03:40:38,105 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:40:38,105 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-11-03 03:40:38,107 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=444, Invalid=3588, Unknown=0, NotChecked=0, Total=4032 [2022-11-03 03:40:38,107 INFO L87 Difference]: Start difference. First operand 294 states and 334 transitions. Second operand has 35 states, 32 states have (on average 3.5625) internal successors, (114), 29 states have internal predecessors, (114), 14 states have call successors, (24), 13 states have call predecessors, (24), 11 states have return successors, (21), 10 states have call predecessors, (21), 12 states have call successors, (21) [2022-11-03 03:40:40,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:40:40,923 INFO L93 Difference]: Finished difference Result 909 states and 1066 transitions. [2022-11-03 03:40:40,923 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2022-11-03 03:40:40,924 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 32 states have (on average 3.5625) internal successors, (114), 29 states have internal predecessors, (114), 14 states have call successors, (24), 13 states have call predecessors, (24), 11 states have return successors, (21), 10 states have call predecessors, (21), 12 states have call successors, (21) Word has length 66 [2022-11-03 03:40:40,924 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:40:40,927 INFO L225 Difference]: With dead ends: 909 [2022-11-03 03:40:40,927 INFO L226 Difference]: Without dead ends: 681 [2022-11-03 03:40:40,931 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 254 GetRequests, 153 SyntacticMatches, 5 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3568 ImplicationChecksByTransitivity, 8.2s TimeCoverageRelationStatistics Valid=1143, Invalid=8363, Unknown=0, NotChecked=0, Total=9506 [2022-11-03 03:40:40,931 INFO L413 NwaCegarLoop]: 121 mSDtfsCounter, 1138 mSDsluCounter, 992 mSDsCounter, 0 mSdLazyCounter, 1439 mSolverCounterSat, 618 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1141 SdHoareTripleChecker+Valid, 1006 SdHoareTripleChecker+Invalid, 2057 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 618 IncrementalHoareTripleChecker+Valid, 1439 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-03 03:40:40,932 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1141 Valid, 1006 Invalid, 2057 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [618 Valid, 1439 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-11-03 03:40:40,933 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 681 states. [2022-11-03 03:40:40,996 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 681 to 543. [2022-11-03 03:40:40,998 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 543 states, 378 states have (on average 1.17989417989418) internal successors, (446), 402 states have internal predecessors, (446), 76 states have call successors, (76), 72 states have call predecessors, (76), 88 states have return successors, (95), 85 states have call predecessors, (95), 76 states have call successors, (95) [2022-11-03 03:40:41,000 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 543 states to 543 states and 617 transitions. [2022-11-03 03:40:41,001 INFO L78 Accepts]: Start accepts. Automaton has 543 states and 617 transitions. Word has length 66 [2022-11-03 03:40:41,001 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:40:41,001 INFO L495 AbstractCegarLoop]: Abstraction has 543 states and 617 transitions. [2022-11-03 03:40:41,001 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 32 states have (on average 3.5625) internal successors, (114), 29 states have internal predecessors, (114), 14 states have call successors, (24), 13 states have call predecessors, (24), 11 states have return successors, (21), 10 states have call predecessors, (21), 12 states have call successors, (21) [2022-11-03 03:40:41,002 INFO L276 IsEmpty]: Start isEmpty. Operand 543 states and 617 transitions. [2022-11-03 03:40:41,003 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2022-11-03 03:40:41,003 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:40:41,004 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:40:41,044 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-03 03:40:41,230 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:40:41,230 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:40:41,230 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:40:41,231 INFO L85 PathProgramCache]: Analyzing trace with hash 1231448645, now seen corresponding path program 1 times [2022-11-03 03:40:41,231 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:40:41,231 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1688044078] [2022-11-03 03:40:41,231 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:40:41,231 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:40:41,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:40:41,569 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 51 proven. 11 refuted. 0 times theorem prover too weak. 69 trivial. 0 not checked. [2022-11-03 03:40:41,570 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:40:41,570 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1688044078] [2022-11-03 03:40:41,570 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1688044078] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 03:40:41,570 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [839672237] [2022-11-03 03:40:41,570 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:40:41,571 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:40:41,571 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 03:40:41,572 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 03:40:41,598 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-03 03:40:41,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:40:41,713 INFO L263 TraceCheckSpWp]: Trace formula consists of 607 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-03 03:40:41,717 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 03:40:42,023 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 87 proven. 18 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2022-11-03 03:40:42,023 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 03:40:42,457 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 63 proven. 28 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-11-03 03:40:42,457 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [839672237] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 03:40:42,458 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [687935947] [2022-11-03 03:40:42,461 INFO L159 IcfgInterpreter]: Started Sifa with 46 locations of interest [2022-11-03 03:40:42,461 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 03:40:42,461 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 03:40:42,463 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 03:40:42,463 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 03:40:48,432 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 28 for LOIs [2022-11-03 03:40:48,439 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 46 for LOIs [2022-11-03 03:40:48,981 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 22 for LOIs [2022-11-03 03:40:49,039 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 38 for LOIs [2022-11-03 03:40:49,044 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 24 for LOIs [2022-11-03 03:40:49,048 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 25 for LOIs [2022-11-03 03:40:49,050 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 47 for LOIs [2022-11-03 03:40:49,057 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 03:40:55,820 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13484#(and (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|) (= ~head~0.offset 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= |timeShift_isPumpRunning_#res#1| 2147483647) (<= |#NULL.offset| 0) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= 0 ~methAndRunningLastTime~0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 2147483647) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)) (<= 0 |old(~methAndRunningLastTime~0)|) (<= 0 ~head~0.base) (<= ~head~0.base 0) (<= 0 |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1|) (<= 0 (+ |timeShift_isPumpRunning_#res#1| 2147483648)) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| ~methaneLevelCritical~0) (<= 0 |#NULL.offset|) (not (= ~methAndRunningLastTime~0 0)) (<= 0 |#StackHeapBarrier|) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 0)) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-03 03:40:55,820 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 03:40:55,820 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 03:40:55,820 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 9, 12] total 26 [2022-11-03 03:40:55,820 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1946801075] [2022-11-03 03:40:55,820 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 03:40:55,821 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-03 03:40:55,821 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:40:55,822 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-03 03:40:55,823 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=325, Invalid=2981, Unknown=0, NotChecked=0, Total=3306 [2022-11-03 03:40:55,823 INFO L87 Difference]: Start difference. First operand 543 states and 617 transitions. Second operand has 26 states, 20 states have (on average 6.5) internal successors, (130), 20 states have internal predecessors, (130), 10 states have call successors, (28), 8 states have call predecessors, (28), 13 states have return successors, (30), 13 states have call predecessors, (30), 10 states have call successors, (30) [2022-11-03 03:40:56,737 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:40:56,738 INFO L93 Difference]: Finished difference Result 1131 states and 1328 transitions. [2022-11-03 03:40:56,738 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-03 03:40:56,739 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 20 states have (on average 6.5) internal successors, (130), 20 states have internal predecessors, (130), 10 states have call successors, (28), 8 states have call predecessors, (28), 13 states have return successors, (30), 13 states have call predecessors, (30), 10 states have call successors, (30) Word has length 116 [2022-11-03 03:40:56,739 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:40:56,743 INFO L225 Difference]: With dead ends: 1131 [2022-11-03 03:40:56,743 INFO L226 Difference]: Without dead ends: 821 [2022-11-03 03:40:56,745 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 371 GetRequests, 292 SyntacticMatches, 12 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1940 ImplicationChecksByTransitivity, 7.3s TimeCoverageRelationStatistics Valid=474, Invalid=4218, Unknown=0, NotChecked=0, Total=4692 [2022-11-03 03:40:56,746 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 442 mSDsluCounter, 165 mSDsCounter, 0 mSdLazyCounter, 638 mSolverCounterSat, 256 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 445 SdHoareTripleChecker+Valid, 213 SdHoareTripleChecker+Invalid, 894 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 256 IncrementalHoareTripleChecker+Valid, 638 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 03:40:56,746 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [445 Valid, 213 Invalid, 894 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [256 Valid, 638 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-03 03:40:56,748 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 821 states. [2022-11-03 03:40:56,829 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 821 to 558. [2022-11-03 03:40:56,830 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 558 states, 383 states have (on average 1.1488250652741514) internal successors, (440), 412 states have internal predecessors, (440), 81 states have call successors, (81), 77 states have call predecessors, (81), 93 states have return successors, (100), 90 states have call predecessors, (100), 81 states have call successors, (100) [2022-11-03 03:40:56,832 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 558 states to 558 states and 621 transitions. [2022-11-03 03:40:56,832 INFO L78 Accepts]: Start accepts. Automaton has 558 states and 621 transitions. Word has length 116 [2022-11-03 03:40:56,832 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:40:56,833 INFO L495 AbstractCegarLoop]: Abstraction has 558 states and 621 transitions. [2022-11-03 03:40:56,833 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 20 states have (on average 6.5) internal successors, (130), 20 states have internal predecessors, (130), 10 states have call successors, (28), 8 states have call predecessors, (28), 13 states have return successors, (30), 13 states have call predecessors, (30), 10 states have call successors, (30) [2022-11-03 03:40:56,833 INFO L276 IsEmpty]: Start isEmpty. Operand 558 states and 621 transitions. [2022-11-03 03:40:56,835 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2022-11-03 03:40:56,835 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:40:56,835 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:40:56,871 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-11-03 03:40:57,050 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:40:57,050 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:40:57,051 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:40:57,051 INFO L85 PathProgramCache]: Analyzing trace with hash 693269375, now seen corresponding path program 2 times [2022-11-03 03:40:57,051 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:40:57,051 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [422071310] [2022-11-03 03:40:57,051 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:40:57,051 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:40:57,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:40:58,279 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 52 proven. 58 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-03 03:40:58,279 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:40:58,279 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [422071310] [2022-11-03 03:40:58,279 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [422071310] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 03:40:58,279 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1502290727] [2022-11-03 03:40:58,279 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 03:40:58,280 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:40:58,280 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 03:40:58,282 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 03:40:58,290 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-03 03:40:58,420 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-03 03:40:58,421 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 03:40:58,423 INFO L263 TraceCheckSpWp]: Trace formula consists of 435 conjuncts, 33 conjunts are in the unsatisfiable core [2022-11-03 03:40:58,431 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 03:40:58,807 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 82 proven. 4 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-11-03 03:40:58,807 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 03:40:59,334 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 68 proven. 2 refuted. 0 times theorem prover too weak. 61 trivial. 0 not checked. [2022-11-03 03:40:59,334 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1502290727] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 03:40:59,334 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [266498006] [2022-11-03 03:40:59,337 INFO L159 IcfgInterpreter]: Started Sifa with 46 locations of interest [2022-11-03 03:40:59,338 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 03:40:59,338 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 03:40:59,338 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 03:40:59,339 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 03:41:04,452 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 28 for LOIs [2022-11-03 03:41:04,456 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 46 for LOIs [2022-11-03 03:41:04,916 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 22 for LOIs [2022-11-03 03:41:04,977 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 38 for LOIs [2022-11-03 03:41:04,983 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 24 for LOIs [2022-11-03 03:41:04,986 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 25 for LOIs [2022-11-03 03:41:04,987 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 47 for LOIs [2022-11-03 03:41:04,994 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 03:41:11,704 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '16782#(and (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|) (= ~head~0.offset 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= |timeShift_isPumpRunning_#res#1| 2147483647) (<= |#NULL.offset| 0) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= 0 ~methAndRunningLastTime~0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 2147483647) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)) (<= 0 |old(~methAndRunningLastTime~0)|) (<= 0 ~head~0.base) (<= ~head~0.base 0) (<= 0 |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1|) (<= 0 (+ |timeShift_isPumpRunning_#res#1| 2147483648)) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| ~methaneLevelCritical~0) (<= 0 |#NULL.offset|) (not (= ~methAndRunningLastTime~0 0)) (<= 0 |#StackHeapBarrier|) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 0)) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-03 03:41:11,704 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 03:41:11,704 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 03:41:11,705 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 7, 8] total 32 [2022-11-03 03:41:11,705 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1294120805] [2022-11-03 03:41:11,705 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 03:41:11,706 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-11-03 03:41:11,706 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:41:11,707 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-11-03 03:41:11,709 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=374, Invalid=3658, Unknown=0, NotChecked=0, Total=4032 [2022-11-03 03:41:11,710 INFO L87 Difference]: Start difference. First operand 558 states and 621 transitions. Second operand has 32 states, 30 states have (on average 6.1) internal successors, (183), 29 states have internal predecessors, (183), 15 states have call successors, (34), 7 states have call predecessors, (34), 12 states have return successors, (35), 11 states have call predecessors, (35), 15 states have call successors, (35) [2022-11-03 03:41:13,164 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:41:13,164 INFO L93 Difference]: Finished difference Result 752 states and 847 transitions. [2022-11-03 03:41:13,165 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-11-03 03:41:13,165 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 30 states have (on average 6.1) internal successors, (183), 29 states have internal predecessors, (183), 15 states have call successors, (34), 7 states have call predecessors, (34), 12 states have return successors, (35), 11 states have call predecessors, (35), 15 states have call successors, (35) Word has length 116 [2022-11-03 03:41:13,166 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:41:13,166 INFO L225 Difference]: With dead ends: 752 [2022-11-03 03:41:13,166 INFO L226 Difference]: Without dead ends: 0 [2022-11-03 03:41:13,170 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 394 GetRequests, 302 SyntacticMatches, 12 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2841 ImplicationChecksByTransitivity, 8.0s TimeCoverageRelationStatistics Valid=699, Invalid=5943, Unknown=0, NotChecked=0, Total=6642 [2022-11-03 03:41:13,170 INFO L413 NwaCegarLoop]: 64 mSDtfsCounter, 593 mSDsluCounter, 571 mSDsCounter, 0 mSdLazyCounter, 734 mSolverCounterSat, 324 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 593 SdHoareTripleChecker+Valid, 578 SdHoareTripleChecker+Invalid, 1058 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 324 IncrementalHoareTripleChecker+Valid, 734 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-03 03:41:13,171 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [593 Valid, 578 Invalid, 1058 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [324 Valid, 734 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-03 03:41:13,171 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-03 03:41:13,172 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-03 03:41:13,172 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 03:41:13,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-03 03:41:13,172 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 116 [2022-11-03 03:41:13,173 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:41:13,173 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-03 03:41:13,173 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 30 states have (on average 6.1) internal successors, (183), 29 states have internal predecessors, (183), 15 states have call successors, (34), 7 states have call predecessors, (34), 12 states have return successors, (35), 11 states have call predecessors, (35), 15 states have call successors, (35) [2022-11-03 03:41:13,173 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-03 03:41:13,174 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-03 03:41:13,177 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-03 03:41:13,223 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-03 03:41:13,398 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-03 03:41:13,400 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-03 03:41:20,324 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 226 233) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= 0 ~systemActive~0)) [2022-11-03 03:41:20,324 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 226 233) no Hoare annotation was computed. [2022-11-03 03:41:20,324 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 159 165) no Hoare annotation was computed. [2022-11-03 03:41:20,324 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 159 165) the Hoare annotation is: true [2022-11-03 03:41:20,325 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 449 460) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse1 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse4 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse6 (not (= 2 ~waterLevel~0))) (.cse7 (not (= ~pumpRunning~0 1))) (.cse2 (not (= ~pumpRunning~0 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 2 ~waterLevel~0))) (.cse8 (= ~methaneLevelCritical~0 1)) (.cse11 (not (<= ~waterLevel~0 2))) (.cse9 (not (= |old(~methaneLevelCritical~0)| 1))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse3 .cse6 .cse4 .cse7) (or .cse0 .cse2 .cse3 .cse8 .cse9 .cse5) (or .cse1 .cse2 .cse3 .cse4 .cse10 .cse11 .cse5) (or .cse3 .cse6 .cse8 .cse7 .cse9) (or .cse2 .cse3 .cse10 .cse8 .cse11 .cse9 .cse5))) [2022-11-03 03:41:20,325 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 449 460) no Hoare annotation was computed. [2022-11-03 03:41:20,325 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 461 469) the Hoare annotation is: true [2022-11-03 03:41:20,325 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 461 469) no Hoare annotation was computed. [2022-11-03 03:41:20,326 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 527 556) no Hoare annotation was computed. [2022-11-03 03:41:20,326 INFO L899 garLoopResultBuilder]: For program point L541(lines 541 545) no Hoare annotation was computed. [2022-11-03 03:41:20,326 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 527 556) the Hoare annotation is: true [2022-11-03 03:41:20,326 INFO L902 garLoopResultBuilder]: At program point L541-1(lines 541 545) the Hoare annotation is: true [2022-11-03 03:41:20,326 INFO L902 garLoopResultBuilder]: At program point L537-2(lines 537 551) the Hoare annotation is: true [2022-11-03 03:41:20,326 INFO L902 garLoopResultBuilder]: At program point L533(line 533) the Hoare annotation is: true [2022-11-03 03:41:20,327 INFO L899 garLoopResultBuilder]: For program point L533-1(line 533) no Hoare annotation was computed. [2022-11-03 03:41:20,327 INFO L902 garLoopResultBuilder]: At program point L552(lines 527 556) the Hoare annotation is: true [2022-11-03 03:41:20,327 INFO L899 garLoopResultBuilder]: For program point L548(line 548) no Hoare annotation was computed. [2022-11-03 03:41:20,327 INFO L899 garLoopResultBuilder]: For program point L366(lines 366 376) no Hoare annotation was computed. [2022-11-03 03:41:20,327 INFO L899 garLoopResultBuilder]: For program point L139-1(lines 138 157) no Hoare annotation was computed. [2022-11-03 03:41:20,328 INFO L895 garLoopResultBuilder]: At program point L362(lines 362 379) the Hoare annotation is: (let ((.cse10 (= ~methAndRunningLastTime~0 0)) (.cse8 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse17 (= ~waterLevel~0 1)) (.cse16 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| ~methaneLevelCritical~0))) (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse6 (and .cse1 .cse17 .cse16)) (.cse2 (not .cse8)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse14 (and .cse1 (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse17 .cse16)) (.cse15 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse9 (not (= ~methaneLevelCritical~0 1))) (.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse12 (and .cse10 (= |old(~waterLevel~0)| ~waterLevel~0) .cse16 (= ~pumpRunning~0 1))) (.cse13 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse3 .cse4 .cse5 .cse6 .cse9) (or .cse0 .cse3 .cse7 (and .cse10 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 0)) .cse2) (or .cse0 .cse3 .cse5 .cse7 .cse8 .cse11 .cse12 .cse13) (or .cse14 .cse5 .cse7 .cse15 .cse11 .cse13) (or .cse14 .cse5 .cse15 .cse9 .cse11 .cse13) (or .cse0 .cse3 .cse5 .cse9 .cse8 .cse11 .cse12 .cse13)))) [2022-11-03 03:41:20,328 INFO L899 garLoopResultBuilder]: For program point L201(lines 201 209) no Hoare annotation was computed. [2022-11-03 03:41:20,328 INFO L895 garLoopResultBuilder]: At program point L362-1(lines 354 382) the Hoare annotation is: (let ((.cse14 (= 0 ~systemActive~0))) (let ((.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (not .cse14)) (.cse10 (= ~pumpRunning~0 0)) (.cse11 (= ~methAndRunningLastTime~0 0)) (.cse17 (= ~waterLevel~0 1)) (.cse18 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| ~methaneLevelCritical~0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse15 (and (= |old(~waterLevel~0)| ~waterLevel~0) .cse18 (= ~pumpRunning~0 1))) (.cse1 (and .cse10 .cse11 (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse17 .cse18)) (.cse3 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse12 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse13 (and .cse9 .cse10 .cse11 .cse17 .cse18 .cse8)) (.cse16 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse2 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 0) .cse8) (or .cse6 (and .cse9 .cse10 .cse11) .cse8) (or .cse6 .cse7 .cse12 .cse0 .cse13 .cse2 .cse14) (or .cse6 .cse7 .cse15 .cse0 .cse2 .cse14 .cse4 .cse5) (or .cse6 .cse7 .cse15 .cse0 .cse16 .cse14 .cse4 .cse5) (or .cse0 .cse1 .cse3 .cse16 .cse4 .cse5) (or .cse6 .cse7 .cse12 .cse0 .cse13 .cse16 .cse14))))) [2022-11-03 03:41:20,329 INFO L895 garLoopResultBuilder]: At program point L197(lines 197 214) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (= ~pumpRunning~0 0)) (.cse14 (= ~methAndRunningLastTime~0 0)) (.cse0 (= ~waterLevel~0 1))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse7 (and .cse13 .cse14 .cse0)) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 1))) (.cse12 (and .cse11 .cse13 .cse14 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (= |old(~pumpRunning~0)| 0)))) (and (or (and .cse0 (= ~pumpRunning~0 1)) .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse8 .cse9 .cse1 .cse10) (or (and .cse11 .cse0) .cse1 .cse10 .cse2 .cse4 .cse5) (or .cse6 .cse7 .cse8 .cse9 .cse1 .cse3) (or .cse6 .cse8 .cse1 .cse10 .cse12 .cse4 .cse5) (or .cse6 .cse8 .cse1 .cse3 .cse12 .cse4 .cse5) (or .cse6 (not (= 0 ~systemActive~0)))))) [2022-11-03 03:41:20,329 INFO L895 garLoopResultBuilder]: At program point L627(line 627) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 1))) (.cse8 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse3 .cse4 .cse5 .cse6) (or .cse3 .cse7 .cse8 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse3 .cse7) (or .cse3 .cse8 .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse3 .cse7 .cse5 .cse6) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-11-03 03:41:20,329 INFO L899 garLoopResultBuilder]: For program point L367(lines 367 373) no Hoare annotation was computed. [2022-11-03 03:41:20,330 INFO L895 garLoopResultBuilder]: At program point L207(line 207) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 1))) (.cse8 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse3 .cse4 .cse5 .cse6) (or .cse3 .cse7 .cse8 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse3 .cse7) (or .cse3 .cse8 .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse3 .cse7 .cse5 .cse6) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-11-03 03:41:20,330 INFO L895 garLoopResultBuilder]: At program point L203(line 203) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (and (= |timeShift_processEnvironment_~tmp~2#1| 1) (= ~waterLevel~0 1) (= ~pumpRunning~0 1))) (.cse6 (not (= ~methaneLevelCritical~0 1))) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse7 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse2 .cse6 .cse3 .cse4 .cse5) (or .cse7 .cse8 .cse9 .cse0 .cse6) (or .cse7 .cse8 .cse0 .cse6 .cse4 .cse5) (or .cse7 .cse8 .cse9 .cse0 .cse1) (or .cse7 .cse8 .cse0 .cse1 .cse4 .cse5) (or .cse7 (not (= 0 ~systemActive~0))))) [2022-11-03 03:41:20,330 INFO L895 garLoopResultBuilder]: At program point L360(line 360) the Hoare annotation is: (let ((.cse14 (= 0 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse15 (= ~methAndRunningLastTime~0 0)) (.cse16 (= ~waterLevel~0 1))) (let ((.cse1 (and .cse6 .cse15 .cse16)) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse7 (not .cse14)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse13 (and .cse15 (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))) (.cse8 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not (= 1 ~systemActive~0))) (.cse9 (and .cse6 (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse16)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (= |old(~pumpRunning~0)| 1))) (.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse12 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse8) (or .cse4 .cse9 .cse10 .cse8 .cse11 .cse12) (or .cse0 .cse2 .cse4 .cse5 .cse13 .cse14 .cse11 .cse12) (or .cse0 .cse2 .cse15 .cse5 .cse7) (or .cse0 .cse2 .cse4 .cse13 .cse8 .cse14 .cse11 .cse12) (or .cse4 .cse9 .cse5 .cse10 .cse11 .cse12)))) [2022-11-03 03:41:20,331 INFO L899 garLoopResultBuilder]: For program point L360-1(line 360) no Hoare annotation was computed. [2022-11-03 03:41:20,331 INFO L895 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 0)) (.cse12 (= ~methAndRunningLastTime~0 0))) (let ((.cse1 (and .cse11 .cse12 (= ~waterLevel~0 1))) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse11 .cse12 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse10 (not (= |old(~pumpRunning~0)| 1))) (.cse6 (not (= ~methaneLevelCritical~0 1))) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse6) (or .cse0 .cse2 .cse4 .cse5 .cse7 .cse8 .cse9) (or .cse0 .cse2 .cse4 .cse6 .cse7 .cse8 .cse9) (or .cse4 .cse5 .cse10 .cse8 .cse9) (or .cse4 .cse10 .cse6 .cse8 .cse9) (or .cse0 (not (= 0 ~systemActive~0)))))) [2022-11-03 03:41:20,331 INFO L895 garLoopResultBuilder]: At program point L212-1(lines 193 217) the Hoare annotation is: (let ((.cse12 (= ~pumpRunning~0 0)) (.cse14 (= ~methAndRunningLastTime~0 0)) (.cse13 (= ~waterLevel~0 1))) (let ((.cse7 (and .cse12 .cse14 .cse13)) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (and .cse14 (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))) (.cse9 (not (= ~methaneLevelCritical~0 1))) (.cse2 (not (= 1 ~systemActive~0))) (.cse10 (and .cse12 (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse13)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse11 (not (= |old(~pumpRunning~0)| 1))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse0 .cse7 .cse1 .cse8 .cse2 .cse3) (or .cse0 .cse7 .cse1 .cse8 .cse2 .cse9) (or .cse2 .cse10 .cse11 .cse9 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse4 .cse9 .cse5 .cse6) (or .cse2 .cse10 .cse3 .cse11 .cse5 .cse6) (or .cse0 (not (= 0 ~systemActive~0)))))) [2022-11-03 03:41:20,332 INFO L899 garLoopResultBuilder]: For program point L146-1(lines 146 152) no Hoare annotation was computed. [2022-11-03 03:41:20,332 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 135 158) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse15 (= 0 ~systemActive~0))) (let ((.cse8 (not .cse15)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~waterLevel~0)| 1))) (.cse3 (= ~waterLevel~0 1)) (.cse9 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse16 (not (= ~methaneLevelCritical~0 1))) (.cse14 (and .cse10 .cse1 .cse2 .cse11)) (.cse12 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (and .cse1 .cse2 .cse3) .cse4 .cse5 .cse6 .cse7) (or .cse0 .cse1 .cse8) (or .cse6 .cse7 .cse9 (and .cse10 .cse11) .cse12 .cse13) (or .cse0 .cse4 .cse2 .cse8) (or .cse0 .cse4 .cse6 .cse7 .cse14 .cse15 .cse12 .cse13) (or .cse0 .cse4 .cse5 .cse6 (and .cse10 .cse1 .cse2 .cse3) .cse16 .cse15) (or .cse6 .cse9 .cse16 .cse12 (and .cse11 (= ~pumpRunning~0 1)) .cse13) (or .cse0 .cse4 .cse6 .cse16 .cse14 .cse15 .cse12 .cse13)))) [2022-11-03 03:41:20,332 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 135 158) no Hoare annotation was computed. [2022-11-03 03:41:20,332 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 627) no Hoare annotation was computed. [2022-11-03 03:41:20,333 INFO L895 garLoopResultBuilder]: At program point L609(lines 609 616) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0)) [2022-11-03 03:41:20,333 INFO L902 garLoopResultBuilder]: At program point L609-2(lines 609 616) the Hoare annotation is: true [2022-11-03 03:41:20,333 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2022-11-03 03:41:20,333 INFO L899 garLoopResultBuilder]: For program point L85-1(lines 85 91) no Hoare annotation was computed. [2022-11-03 03:41:20,333 INFO L895 garLoopResultBuilder]: At program point L110(lines 65 112) the Hoare annotation is: (let ((.cse10 (= 0 ~systemActive~0))) (let ((.cse8 (= ~methaneLevelCritical~0 0)) (.cse5 (= ~waterLevel~0 1)) (.cse7 (= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= ~methaneLevelCritical~0 1)) (.cse6 (not .cse10)) (.cse9 (= ~pumpRunning~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse4 .cse6 .cse9) (and .cse0 .cse1 .cse8 .cse2 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse4 .cse6 .cse9) (and .cse0 .cse1 .cse4 .cse10)))) [2022-11-03 03:41:20,334 INFO L895 garLoopResultBuilder]: At program point L77(line 77) the Hoare annotation is: (let ((.cse7 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (= ~waterLevel~0 1))) (let ((.cse3 (= ~methaneLevelCritical~0 1)) (.cse0 (or (and (= 2 ~waterLevel~0) .cse7) (and .cse7 .cse8))) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 1)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= ~methAndRunningLastTime~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse2 .cse3 .cse7 .cse8) (and .cse5 .cse6 .cse9 .cse2 .cse7 .cse8) (and .cse0 .cse9 .cse1 .cse2 .cse4) (and .cse5 .cse6 .cse7 (= 0 ~systemActive~0))))) [2022-11-03 03:41:20,334 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-03 03:41:20,334 INFO L895 garLoopResultBuilder]: At program point L334(line 334) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2022-11-03 03:41:20,334 INFO L899 garLoopResultBuilder]: For program point L66(lines 65 112) no Hoare annotation was computed. [2022-11-03 03:41:20,334 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-03 03:41:20,335 INFO L899 garLoopResultBuilder]: For program point L95(lines 95 108) no Hoare annotation was computed. [2022-11-03 03:41:20,335 INFO L895 garLoopResultBuilder]: At program point L87(line 87) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 1)) (.cse0 (= 2 ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 1)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse8 (= ~waterLevel~0 1)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse7 (<= 2 ~waterLevel~0) .cse1 .cse3 (<= ~waterLevel~0 2)) (and .cse5 .cse6 .cse0 .cse1 .cse2 .cse3) (and .cse5 .cse6 .cse1 .cse2 .cse3 .cse8) (and .cse0 .cse7 .cse1 .cse3 .cse4) (and .cse5 .cse6 .cse7 .cse1 .cse3 .cse8) (and .cse5 .cse6 .cse3 (= 0 ~systemActive~0)))) [2022-11-03 03:41:20,335 INFO L902 garLoopResultBuilder]: At program point L116(lines 55 120) the Hoare annotation is: true [2022-11-03 03:41:20,335 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 81) no Hoare annotation was computed. [2022-11-03 03:41:20,335 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 75 81) no Hoare annotation was computed. [2022-11-03 03:41:20,336 INFO L895 garLoopResultBuilder]: At program point L113(lines 64 114) the Hoare annotation is: false [2022-11-03 03:41:20,336 INFO L899 garLoopResultBuilder]: For program point L332(lines 332 338) no Hoare annotation was computed. [2022-11-03 03:41:20,336 INFO L895 garLoopResultBuilder]: At program point L332-1(lines 332 338) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (not (= 0 ~systemActive~0))) (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1))) [2022-11-03 03:41:20,336 INFO L899 garLoopResultBuilder]: For program point L101(lines 101 107) no Hoare annotation was computed. [2022-11-03 03:41:20,336 INFO L895 garLoopResultBuilder]: At program point L101-2(lines 95 108) the Hoare annotation is: (let ((.cse10 (= 0 ~systemActive~0))) (let ((.cse7 (= ~waterLevel~0 1)) (.cse4 (= ~methaneLevelCritical~0 1)) (.cse9 (= ~pumpRunning~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse2 (= 2 ~waterLevel~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (not .cse10))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse3 .cse4 .cse5 .cse7 .cse6) (and .cse2 .cse8 .cse3 .cse5 .cse6 .cse9) (and .cse0 .cse1 .cse8 .cse3 .cse5 .cse7 .cse6) (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse9) (and .cse0 .cse5 .cse10) (and .cse0 .cse1 .cse2 .cse8 .cse3 .cse5 .cse6)))) [2022-11-03 03:41:20,337 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 167 191) the Hoare annotation is: (let ((.cse7 (not (= ~waterLevel~0 1))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 2 ~waterLevel~0))) (.cse5 (not (<= ~waterLevel~0 2))) (.cse8 (not (= ~methaneLevelCritical~0 1))) (.cse6 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse0 .cse1 .cse2 .cse8 .cse6) (or .cse7 .cse0 .cse1 .cse2 .cse4 .cse6) (or .cse0 .cse1 .cse2 .cse3 .cse5 .cse8 .cse6))) [2022-11-03 03:41:20,337 INFO L895 garLoopResultBuilder]: At program point L186(line 186) the Hoare annotation is: (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= ~waterLevel~0 1))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 2 ~waterLevel~0))) (.cse6 (not (<= ~waterLevel~0 2))) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse5 .cse3 .cse6 .cse4) (or .cse0 .cse1 .cse2 .cse7 .cse4) (or .cse1 .cse2 .cse5 .cse6 .cse7 .cse4))) [2022-11-03 03:41:20,337 INFO L899 garLoopResultBuilder]: For program point L186-1(lines 167 191) no Hoare annotation was computed. [2022-11-03 03:41:20,337 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 167 191) no Hoare annotation was computed. [2022-11-03 03:41:20,338 INFO L895 garLoopResultBuilder]: At program point L181(line 181) the Hoare annotation is: (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= ~waterLevel~0 1))) (.cse4 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 2 ~waterLevel~0))) (.cse7 (not (<= ~waterLevel~0 2))) (.cse8 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse6 .cse3 .cse7 .cse5) (or .cse0 .cse1 .cse2 .cse4 .cse8 .cse5) (or .cse1 .cse2 .cse6 .cse7 .cse8 .cse5))) [2022-11-03 03:41:20,338 INFO L895 garLoopResultBuilder]: At program point L175(lines 175 183) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 0))) (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= ~waterLevel~0 1))) (.cse4 (and .cse10 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (.cse6 (and .cse10 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 1))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 2 ~waterLevel~0))) (.cse8 (not (<= ~waterLevel~0 2))) (.cse9 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse1 .cse2 .cse7 .cse3 .cse8 .cse5) (or .cse0 .cse1 .cse2 .cse4 .cse9 .cse5) (or .cse6 .cse1 .cse2 .cse7 .cse8 .cse9 .cse5)))) [2022-11-03 03:41:20,338 INFO L895 garLoopResultBuilder]: At program point L171(lines 171 188) the Hoare annotation is: (let ((.cse7 (not (= ~waterLevel~0 1))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 2 ~waterLevel~0))) (.cse5 (not (<= ~waterLevel~0 2))) (.cse8 (not (= ~methaneLevelCritical~0 1))) (.cse6 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse0 .cse1 .cse2 .cse8 .cse6) (or .cse7 .cse0 .cse1 .cse2 .cse4 .cse6) (or .cse0 .cse1 .cse2 .cse3 .cse5 .cse8 .cse6))) [2022-11-03 03:41:20,338 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 437 448) no Hoare annotation was computed. [2022-11-03 03:41:20,339 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 437 448) the Hoare annotation is: (let ((.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0)))) (let ((.cse2 (not (= ~pumpRunning~0 1))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse8 (= ~waterLevel~0 1)) (.cse9 (let ((.cse10 (not (= ~pumpRunning~0 0))) (.cse11 (= 0 ~systemActive~0)) (.cse12 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse10 .cse7 .cse0 .cse11 .cse12) (or .cse10 .cse0 (not (= |old(~waterLevel~0)| 2)) .cse11 .cse12))))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse2 .cse6 .cse3 .cse4 .cse5) (or .cse7 .cse6 .cse8 .cse9) (or .cse7 .cse1 .cse8 .cse9)))) [2022-11-03 03:41:20,342 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:41:20,344 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-03 03:41:20,395 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 03.11 03:41:20 BoogieIcfgContainer [2022-11-03 03:41:20,410 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-03 03:41:20,410 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-03 03:41:20,411 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-03 03:41:20,411 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-03 03:41:20,411 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 03:40:15" (3/4) ... [2022-11-03 03:41:20,415 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-03 03:41:20,421 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-03 03:41:20,423 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-03 03:41:20,423 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-03 03:41:20,423 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-03 03:41:20,423 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-03 03:41:20,423 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-03 03:41:20,424 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 03:41:20,424 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-03 03:41:20,432 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 74 nodes and edges [2022-11-03 03:41:20,436 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 27 nodes and edges [2022-11-03 03:41:20,437 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2022-11-03 03:41:20,437 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-03 03:41:20,438 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-03 03:41:20,438 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 03:41:20,439 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 03:41:20,472 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && (((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(0 == systemActive))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel == 1)) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-11-03 03:41:20,473 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((waterLevel == 1 && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((((pumpRunning == \old(pumpRunning) && waterLevel == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-03 03:41:20,474 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((((!(1 == systemActive) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-03 03:41:20,474 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || !(methAndRunningLastTime == 0)) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0))) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(methAndRunningLastTime == 0))) && ((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0)) [2022-11-03 03:41:20,476 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive)) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == 1) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == 1) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 1))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(0 == systemActive))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(2 <= \old(waterLevel))) [2022-11-03 03:41:20,476 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(1 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || tmp == 0) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0)) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel == 1) && tmp == methaneLevelCritical) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((\old(waterLevel) == waterLevel && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((\old(waterLevel) == waterLevel && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel == 1) && tmp == methaneLevelCritical) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || 0 == systemActive) [2022-11-03 03:41:20,478 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-03 03:41:20,480 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && tmp == 0)) || !(methAndRunningLastTime == 0)) && (((((((pumpRunning == 0 && tmp == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || !(methAndRunningLastTime == 0))) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && tmp == 0)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0))) && (((((((pumpRunning == 0 && tmp == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0)) [2022-11-03 03:41:20,529 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/witness.graphml [2022-11-03 03:41:20,529 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-03 03:41:20,530 INFO L158 Benchmark]: Toolchain (without parser) took 66403.14ms. Allocated memory was 127.9MB in the beginning and 564.1MB in the end (delta: 436.2MB). Free memory was 95.3MB in the beginning and 491.5MB in the end (delta: -396.1MB). Peak memory consumption was 39.3MB. Max. memory is 16.1GB. [2022-11-03 03:41:20,530 INFO L158 Benchmark]: CDTParser took 0.31ms. Allocated memory is still 88.1MB. Free memory was 44.6MB in the beginning and 44.6MB in the end (delta: 45.4kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 03:41:20,531 INFO L158 Benchmark]: CACSL2BoogieTranslator took 766.44ms. Allocated memory is still 127.9MB. Free memory was 95.0MB in the beginning and 95.4MB in the end (delta: -409.6kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-11-03 03:41:20,532 INFO L158 Benchmark]: Boogie Procedure Inliner took 89.63ms. Allocated memory is still 127.9MB. Free memory was 95.0MB in the beginning and 92.6MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 03:41:20,532 INFO L158 Benchmark]: Boogie Preprocessor took 47.54ms. Allocated memory is still 127.9MB. Free memory was 92.6MB in the beginning and 90.8MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 03:41:20,533 INFO L158 Benchmark]: RCFGBuilder took 910.77ms. Allocated memory is still 127.9MB. Free memory was 90.8MB in the beginning and 61.9MB in the end (delta: 29.0MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. [2022-11-03 03:41:20,534 INFO L158 Benchmark]: TraceAbstraction took 64456.40ms. Allocated memory was 127.9MB in the beginning and 564.1MB in the end (delta: 436.2MB). Free memory was 61.1MB in the beginning and 496.7MB in the end (delta: -435.6MB). Peak memory consumption was 304.4MB. Max. memory is 16.1GB. [2022-11-03 03:41:20,535 INFO L158 Benchmark]: Witness Printer took 118.96ms. Allocated memory is still 564.1MB. Free memory was 496.7MB in the beginning and 491.5MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-03 03:41:20,537 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31ms. Allocated memory is still 88.1MB. Free memory was 44.6MB in the beginning and 44.6MB in the end (delta: 45.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 766.44ms. Allocated memory is still 127.9MB. Free memory was 95.0MB in the beginning and 95.4MB in the end (delta: -409.6kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 89.63ms. Allocated memory is still 127.9MB. Free memory was 95.0MB in the beginning and 92.6MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 47.54ms. Allocated memory is still 127.9MB. Free memory was 92.6MB in the beginning and 90.8MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 910.77ms. Allocated memory is still 127.9MB. Free memory was 90.8MB in the beginning and 61.9MB in the end (delta: 29.0MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. * TraceAbstraction took 64456.40ms. Allocated memory was 127.9MB in the beginning and 564.1MB in the end (delta: 436.2MB). Free memory was 61.1MB in the beginning and 496.7MB in the end (delta: -435.6MB). Peak memory consumption was 304.4MB. Max. memory is 16.1GB. * Witness Printer took 118.96ms. Allocated memory is still 564.1MB. Free memory was 496.7MB in the beginning and 491.5MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 627]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 64 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 64.3s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 7.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2783 SdHoareTripleChecker+Valid, 3.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2761 mSDsluCounter, 3277 SdHoareTripleChecker+Invalid, 2.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2739 mSDsCounter, 1343 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3603 IncrementalHoareTripleChecker+Invalid, 4946 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1343 mSolverCounterUnsat, 890 mSDtfsCounter, 3603 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1149 GetRequests, 836 SyntacticMatches, 29 SemanticMatches, 284 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8378 ImplicationChecksByTransitivity, 23.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=558occurred in iteration=12, InterpolantAutomatonStates: 127, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 13 MinimizatonAttempts, 636 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 36 LocationsWithAnnotation, 1423 PreInvPairs, 1511 NumberOfFragments, 3422 HoareAnnotationTreeSize, 1423 FomulaSimplifications, 2632 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 36 FomulaSimplificationsInter, 19749 FormulaSimplificationTreeSizeReductionInter, 6.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 7.2s InterpolantComputationTime, 1056 NumberOfCodeBlocks, 1003 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 1334 ConstructedInterpolants, 0 QuantifiedInterpolants, 4306 SizeOfPredicates, 37 NumberOfNonLiveVariables, 1919 ConjunctsInSsa, 95 ConjunctsInUnsatCore, 20 InterpolantComputations, 10 PerfectInterpolantSequences, 838/988 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 362]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive)) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == 1) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == 1) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 1))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(0 == systemActive))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive)) || (((((2 == waterLevel && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive))) || (((((2 == waterLevel && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && !(0 == systemActive)) && pumpRunning == 1)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 171]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || !(methAndRunningLastTime == 0)) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0))) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(methAndRunningLastTime == 0))) && ((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((((!(1 == systemActive) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: (((((((((((!(1 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || tmp == 0) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0)) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel == 1) && tmp == methaneLevelCritical) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((\old(waterLevel) == waterLevel && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((\old(waterLevel) == waterLevel && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel == 1) && tmp == methaneLevelCritical) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || 0 == systemActive) - InvariantResult [Line: 197]: Loop Invariant Derived loop invariant: (((((((((((waterLevel == 1 && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((((pumpRunning == \old(pumpRunning) && waterLevel == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && splverifierCounter == 0) && !(0 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) - InvariantResult [Line: 135]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && (((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(0 == systemActive))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel == 1)) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 537]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 627]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 609]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 55]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 609]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 527]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: (((((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && tmp == 0)) || !(methAndRunningLastTime == 0)) && (((((((pumpRunning == 0 && tmp == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || !(methAndRunningLastTime == 0))) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && tmp == 0)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0))) && (((((((pumpRunning == 0 && tmp == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0)) RESULT: Ultimate proved your program to be correct! [2022-11-03 03:41:20,626 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6c80b11c-2ec5-40bf-8925-2390e710a1c3/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE