./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash af2afe79961dd67a52df68c35bd4350c760cf29ba0bba6313951f2194d2dea76 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 01:40:33,727 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 01:40:33,730 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 01:40:33,782 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 01:40:33,782 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 01:40:33,786 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 01:40:33,788 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 01:40:33,792 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 01:40:33,797 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 01:40:33,802 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 01:40:33,804 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 01:40:33,806 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 01:40:33,807 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 01:40:33,810 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 01:40:33,812 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 01:40:33,814 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 01:40:33,816 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 01:40:33,817 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 01:40:33,818 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 01:40:33,826 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 01:40:33,828 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 01:40:33,829 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 01:40:33,833 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 01:40:33,834 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 01:40:33,842 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 01:40:33,843 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 01:40:33,843 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 01:40:33,845 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 01:40:33,845 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 01:40:33,847 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 01:40:33,847 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 01:40:33,848 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 01:40:33,850 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 01:40:33,852 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 01:40:33,854 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 01:40:33,855 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 01:40:33,855 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 01:40:33,856 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 01:40:33,856 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 01:40:33,857 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 01:40:33,858 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 01:40:33,858 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-03 01:40:33,900 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 01:40:33,901 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 01:40:33,901 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 01:40:33,901 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 01:40:33,903 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 01:40:33,903 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 01:40:33,903 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 01:40:33,903 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 01:40:33,904 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 01:40:33,904 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-03 01:40:33,905 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 01:40:33,905 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 01:40:33,906 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-03 01:40:33,906 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-03 01:40:33,906 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 01:40:33,906 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-03 01:40:33,907 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-03 01:40:33,907 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-03 01:40:33,908 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 01:40:33,909 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-03 01:40:33,910 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-03 01:40:33,915 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-03 01:40:33,915 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 01:40:33,918 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-03 01:40:33,919 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 01:40:33,919 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-03 01:40:33,920 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-03 01:40:33,920 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-03 01:40:33,920 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 01:40:33,920 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-03 01:40:33,921 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 01:40:33,921 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 01:40:33,921 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 01:40:33,922 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 01:40:33,922 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-03 01:40:33,922 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 01:40:33,922 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-03 01:40:33,923 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-03 01:40:33,923 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-03 01:40:33,923 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-03 01:40:33,923 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 01:40:33,924 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> af2afe79961dd67a52df68c35bd4350c760cf29ba0bba6313951f2194d2dea76 [2022-11-03 01:40:34,220 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 01:40:34,243 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 01:40:34,247 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 01:40:34,248 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 01:40:34,249 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 01:40:34,250 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c [2022-11-03 01:40:34,322 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/data/d803cfa04/1441fd6aa76a4799a5d34e4f7e19c343/FLAGb7f5270e7 [2022-11-03 01:40:34,826 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 01:40:34,827 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c [2022-11-03 01:40:34,843 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/data/d803cfa04/1441fd6aa76a4799a5d34e4f7e19c343/FLAGb7f5270e7 [2022-11-03 01:40:35,135 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/data/d803cfa04/1441fd6aa76a4799a5d34e4f7e19c343 [2022-11-03 01:40:35,140 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 01:40:35,142 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 01:40:35,144 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 01:40:35,144 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 01:40:35,148 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 01:40:35,149 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 01:40:35" (1/1) ... [2022-11-03 01:40:35,151 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@237bad84 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:40:35, skipping insertion in model container [2022-11-03 01:40:35,151 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 01:40:35" (1/1) ... [2022-11-03 01:40:35,159 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 01:40:35,232 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 01:40:35,645 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c[19335,19348] [2022-11-03 01:40:35,648 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 01:40:35,663 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 01:40:35,735 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c[19335,19348] [2022-11-03 01:40:35,735 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 01:40:35,758 INFO L208 MainTranslator]: Completed translation [2022-11-03 01:40:35,758 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:40:35 WrapperNode [2022-11-03 01:40:35,758 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 01:40:35,760 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 01:40:35,760 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 01:40:35,760 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 01:40:35,769 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:40:35" (1/1) ... [2022-11-03 01:40:35,795 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:40:35" (1/1) ... [2022-11-03 01:40:35,850 INFO L138 Inliner]: procedures = 58, calls = 160, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 280 [2022-11-03 01:40:35,851 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 01:40:35,852 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 01:40:35,852 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 01:40:35,852 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 01:40:35,862 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:40:35" (1/1) ... [2022-11-03 01:40:35,862 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:40:35" (1/1) ... [2022-11-03 01:40:35,879 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:40:35" (1/1) ... [2022-11-03 01:40:35,879 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:40:35" (1/1) ... [2022-11-03 01:40:35,884 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:40:35" (1/1) ... [2022-11-03 01:40:35,903 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:40:35" (1/1) ... [2022-11-03 01:40:35,904 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:40:35" (1/1) ... [2022-11-03 01:40:35,906 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:40:35" (1/1) ... [2022-11-03 01:40:35,908 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 01:40:35,909 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 01:40:35,909 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 01:40:35,909 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 01:40:35,919 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:40:35" (1/1) ... [2022-11-03 01:40:35,925 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 01:40:35,948 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 01:40:35,959 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 01:40:35,966 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 01:40:36,003 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-03 01:40:36,003 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-03 01:40:36,003 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-03 01:40:36,003 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-03 01:40:36,004 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-03 01:40:36,004 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-03 01:40:36,004 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-03 01:40:36,004 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-03 01:40:36,004 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-03 01:40:36,005 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 01:40:36,005 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 01:40:36,005 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-03 01:40:36,005 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-03 01:40:36,005 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-03 01:40:36,006 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-03 01:40:36,006 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-03 01:40:36,006 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-03 01:40:36,006 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-03 01:40:36,006 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-03 01:40:36,007 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-03 01:40:36,007 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 01:40:36,007 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 01:40:36,092 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 01:40:36,095 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 01:40:36,552 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 01:40:36,721 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 01:40:36,723 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-03 01:40:36,726 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 01:40:36 BoogieIcfgContainer [2022-11-03 01:40:36,726 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 01:40:36,729 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 01:40:36,729 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 01:40:36,733 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 01:40:36,733 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 01:40:35" (1/3) ... [2022-11-03 01:40:36,734 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@40d0c55 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 01:40:36, skipping insertion in model container [2022-11-03 01:40:36,735 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 01:40:35" (2/3) ... [2022-11-03 01:40:36,735 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@40d0c55 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 01:40:36, skipping insertion in model container [2022-11-03 01:40:36,735 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 01:40:36" (3/3) ... [2022-11-03 01:40:36,737 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product54.cil.c [2022-11-03 01:40:36,757 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 01:40:36,757 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-03 01:40:36,833 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 01:40:36,840 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2eb7a986, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 01:40:36,840 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-03 01:40:36,845 INFO L276 IsEmpty]: Start isEmpty. Operand has 69 states, 42 states have (on average 1.4285714285714286) internal successors, (60), 52 states have internal predecessors, (60), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-03 01:40:36,855 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-03 01:40:36,855 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:40:36,856 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:40:36,856 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:40:36,863 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:40:36,863 INFO L85 PathProgramCache]: Analyzing trace with hash 843443475, now seen corresponding path program 1 times [2022-11-03 01:40:36,873 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:40:36,873 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1298059051] [2022-11-03 01:40:36,874 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:40:36,874 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:40:37,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:40:37,133 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 01:40:37,134 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:40:37,135 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1298059051] [2022-11-03 01:40:37,135 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1298059051] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:40:37,136 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 01:40:37,136 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 01:40:37,138 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [914984162] [2022-11-03 01:40:37,140 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:40:37,145 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-03 01:40:37,146 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:40:37,180 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-03 01:40:37,181 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 01:40:37,184 INFO L87 Difference]: Start difference. First operand has 69 states, 42 states have (on average 1.4285714285714286) internal successors, (60), 52 states have internal predecessors, (60), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 01:40:37,254 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:40:37,254 INFO L93 Difference]: Finished difference Result 136 states and 185 transitions. [2022-11-03 01:40:37,256 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-03 01:40:37,257 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-11-03 01:40:37,257 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:40:37,266 INFO L225 Difference]: With dead ends: 136 [2022-11-03 01:40:37,270 INFO L226 Difference]: Without dead ends: 64 [2022-11-03 01:40:37,274 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 01:40:37,277 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 71 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 01:40:37,278 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 71 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 01:40:37,296 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2022-11-03 01:40:37,336 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 64. [2022-11-03 01:40:37,338 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 39 states have (on average 1.3333333333333333) internal successors, (52), 48 states have internal predecessors, (52), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-03 01:40:37,343 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 83 transitions. [2022-11-03 01:40:37,344 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 83 transitions. Word has length 17 [2022-11-03 01:40:37,345 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:40:37,345 INFO L495 AbstractCegarLoop]: Abstraction has 64 states and 83 transitions. [2022-11-03 01:40:37,345 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 01:40:37,345 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 83 transitions. [2022-11-03 01:40:37,350 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-03 01:40:37,350 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:40:37,351 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:40:37,351 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-03 01:40:37,351 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:40:37,352 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:40:37,352 INFO L85 PathProgramCache]: Analyzing trace with hash 1066992458, now seen corresponding path program 1 times [2022-11-03 01:40:37,352 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:40:37,353 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [669869153] [2022-11-03 01:40:37,353 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:40:37,353 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:40:37,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:40:37,585 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 01:40:37,585 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:40:37,586 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [669869153] [2022-11-03 01:40:37,586 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [669869153] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:40:37,587 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 01:40:37,588 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 01:40:37,588 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [60787942] [2022-11-03 01:40:37,589 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:40:37,594 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 01:40:37,596 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:40:37,597 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 01:40:37,597 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 01:40:37,597 INFO L87 Difference]: Start difference. First operand 64 states and 83 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 01:40:37,683 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:40:37,686 INFO L93 Difference]: Finished difference Result 105 states and 137 transitions. [2022-11-03 01:40:37,687 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 01:40:37,687 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-11-03 01:40:37,687 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:40:37,690 INFO L225 Difference]: With dead ends: 105 [2022-11-03 01:40:37,691 INFO L226 Difference]: Without dead ends: 56 [2022-11-03 01:40:37,692 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 01:40:37,694 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 7 mSDsluCounter, 60 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 01:40:37,696 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 105 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 01:40:37,697 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2022-11-03 01:40:37,705 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 56. [2022-11-03 01:40:37,707 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 34 states have (on average 1.3529411764705883) internal successors, (46), 43 states have internal predecessors, (46), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-03 01:40:37,709 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 72 transitions. [2022-11-03 01:40:37,709 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 72 transitions. Word has length 18 [2022-11-03 01:40:37,709 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:40:37,710 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 72 transitions. [2022-11-03 01:40:37,710 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 01:40:37,710 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 72 transitions. [2022-11-03 01:40:37,711 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-03 01:40:37,711 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:40:37,712 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:40:37,712 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-03 01:40:37,712 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:40:37,713 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:40:37,713 INFO L85 PathProgramCache]: Analyzing trace with hash 1127821809, now seen corresponding path program 1 times [2022-11-03 01:40:37,713 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:40:37,714 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [503742418] [2022-11-03 01:40:37,714 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:40:37,715 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:40:37,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:40:37,922 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 01:40:37,923 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:40:37,923 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [503742418] [2022-11-03 01:40:37,923 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [503742418] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:40:37,923 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 01:40:37,924 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 01:40:37,924 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [206921763] [2022-11-03 01:40:37,924 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:40:37,924 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 01:40:37,925 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:40:37,925 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 01:40:37,925 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-03 01:40:37,926 INFO L87 Difference]: Start difference. First operand 56 states and 72 transitions. Second operand has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 01:40:38,028 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:40:38,028 INFO L93 Difference]: Finished difference Result 110 states and 143 transitions. [2022-11-03 01:40:38,028 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 01:40:38,029 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2022-11-03 01:40:38,029 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:40:38,030 INFO L225 Difference]: With dead ends: 110 [2022-11-03 01:40:38,030 INFO L226 Difference]: Without dead ends: 56 [2022-11-03 01:40:38,031 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-03 01:40:38,032 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 67 mSDsluCounter, 34 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 75 SdHoareTripleChecker+Invalid, 58 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 01:40:38,033 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 75 Invalid, 58 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 01:40:38,034 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2022-11-03 01:40:38,041 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 56. [2022-11-03 01:40:38,041 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 43 states have internal predecessors, (45), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-03 01:40:38,042 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 71 transitions. [2022-11-03 01:40:38,043 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 71 transitions. Word has length 20 [2022-11-03 01:40:38,043 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:40:38,043 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 71 transitions. [2022-11-03 01:40:38,043 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 01:40:38,044 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 71 transitions. [2022-11-03 01:40:38,045 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-03 01:40:38,045 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:40:38,045 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:40:38,045 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-03 01:40:38,046 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:40:38,046 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:40:38,046 INFO L85 PathProgramCache]: Analyzing trace with hash 1390728789, now seen corresponding path program 1 times [2022-11-03 01:40:38,047 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:40:38,047 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [839756124] [2022-11-03 01:40:38,047 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:40:38,047 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:40:38,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:40:38,169 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 01:40:38,170 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:40:38,170 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [839756124] [2022-11-03 01:40:38,170 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [839756124] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:40:38,170 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 01:40:38,170 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 01:40:38,171 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [497694444] [2022-11-03 01:40:38,171 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:40:38,171 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 01:40:38,172 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:40:38,172 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 01:40:38,172 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 01:40:38,173 INFO L87 Difference]: Start difference. First operand 56 states and 71 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-03 01:40:38,241 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:40:38,241 INFO L93 Difference]: Finished difference Result 149 states and 194 transitions. [2022-11-03 01:40:38,254 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 01:40:38,254 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 30 [2022-11-03 01:40:38,255 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:40:38,256 INFO L225 Difference]: With dead ends: 149 [2022-11-03 01:40:38,256 INFO L226 Difference]: Without dead ends: 95 [2022-11-03 01:40:38,257 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 01:40:38,258 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 43 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 43 SdHoareTripleChecker+Valid, 122 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 01:40:38,259 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [43 Valid, 122 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 01:40:38,260 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95 states. [2022-11-03 01:40:38,274 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95 to 93. [2022-11-03 01:40:38,275 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 60 states have (on average 1.2666666666666666) internal successors, (76), 68 states have internal predecessors, (76), 17 states have call successors, (17), 15 states have call predecessors, (17), 15 states have return successors, (23), 15 states have call predecessors, (23), 17 states have call successors, (23) [2022-11-03 01:40:38,276 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 116 transitions. [2022-11-03 01:40:38,277 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 116 transitions. Word has length 30 [2022-11-03 01:40:38,277 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:40:38,277 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 116 transitions. [2022-11-03 01:40:38,277 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-03 01:40:38,278 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 116 transitions. [2022-11-03 01:40:38,279 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-03 01:40:38,279 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:40:38,279 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:40:38,279 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-03 01:40:38,280 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:40:38,280 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:40:38,280 INFO L85 PathProgramCache]: Analyzing trace with hash -2030151065, now seen corresponding path program 1 times [2022-11-03 01:40:38,281 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:40:38,281 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [896822784] [2022-11-03 01:40:38,281 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:40:38,281 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:40:38,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:40:38,410 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 01:40:38,410 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:40:38,411 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [896822784] [2022-11-03 01:40:38,412 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [896822784] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:40:38,414 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 01:40:38,416 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 01:40:38,417 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1161277516] [2022-11-03 01:40:38,418 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:40:38,418 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 01:40:38,419 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:40:38,419 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 01:40:38,420 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-03 01:40:38,420 INFO L87 Difference]: Start difference. First operand 93 states and 116 transitions. Second operand has 6 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-03 01:40:38,601 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:40:38,606 INFO L93 Difference]: Finished difference Result 271 states and 345 transitions. [2022-11-03 01:40:38,607 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-03 01:40:38,607 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 33 [2022-11-03 01:40:38,608 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:40:38,610 INFO L225 Difference]: With dead ends: 271 [2022-11-03 01:40:38,610 INFO L226 Difference]: Without dead ends: 180 [2022-11-03 01:40:38,618 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-03 01:40:38,619 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 47 mSDsluCounter, 273 mSDsCounter, 0 mSdLazyCounter, 111 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 50 SdHoareTripleChecker+Valid, 292 SdHoareTripleChecker+Invalid, 113 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 111 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 01:40:38,620 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [50 Valid, 292 Invalid, 113 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 01:40:38,621 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2022-11-03 01:40:38,648 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 172. [2022-11-03 01:40:38,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 172 states, 111 states have (on average 1.2342342342342343) internal successors, (137), 124 states have internal predecessors, (137), 32 states have call successors, (32), 28 states have call predecessors, (32), 28 states have return successors, (44), 28 states have call predecessors, (44), 32 states have call successors, (44) [2022-11-03 01:40:38,651 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 213 transitions. [2022-11-03 01:40:38,651 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 213 transitions. Word has length 33 [2022-11-03 01:40:38,652 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:40:38,652 INFO L495 AbstractCegarLoop]: Abstraction has 172 states and 213 transitions. [2022-11-03 01:40:38,652 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-03 01:40:38,652 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 213 transitions. [2022-11-03 01:40:38,653 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-03 01:40:38,654 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:40:38,654 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:40:38,654 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-03 01:40:38,654 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:40:38,655 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:40:38,655 INFO L85 PathProgramCache]: Analyzing trace with hash 1952896824, now seen corresponding path program 1 times [2022-11-03 01:40:38,655 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:40:38,655 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [821674301] [2022-11-03 01:40:38,656 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:40:38,656 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:40:38,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:40:38,728 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 01:40:38,728 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:40:38,729 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [821674301] [2022-11-03 01:40:38,729 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [821674301] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:40:38,729 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 01:40:38,729 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 01:40:38,729 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [19452684] [2022-11-03 01:40:38,730 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:40:38,730 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 01:40:38,730 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:40:38,731 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 01:40:38,731 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 01:40:38,731 INFO L87 Difference]: Start difference. First operand 172 states and 213 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-03 01:40:38,830 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:40:38,830 INFO L93 Difference]: Finished difference Result 263 states and 335 transitions. [2022-11-03 01:40:38,831 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 01:40:38,831 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 36 [2022-11-03 01:40:38,831 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:40:38,837 INFO L225 Difference]: With dead ends: 263 [2022-11-03 01:40:38,838 INFO L226 Difference]: Without dead ends: 261 [2022-11-03 01:40:38,838 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 01:40:38,841 INFO L413 NwaCegarLoop]: 78 mSDtfsCounter, 47 mSDsluCounter, 66 mSDsCounter, 0 mSdLazyCounter, 34 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 131 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 34 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 01:40:38,844 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 131 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 34 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 01:40:38,847 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 261 states. [2022-11-03 01:40:38,913 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 261 to 261. [2022-11-03 01:40:38,916 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 261 states, 168 states have (on average 1.2380952380952381) internal successors, (208), 188 states have internal predecessors, (208), 49 states have call successors, (49), 43 states have call predecessors, (49), 43 states have return successors, (75), 43 states have call predecessors, (75), 49 states have call successors, (75) [2022-11-03 01:40:38,922 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 261 states to 261 states and 332 transitions. [2022-11-03 01:40:38,922 INFO L78 Accepts]: Start accepts. Automaton has 261 states and 332 transitions. Word has length 36 [2022-11-03 01:40:38,922 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:40:38,923 INFO L495 AbstractCegarLoop]: Abstraction has 261 states and 332 transitions. [2022-11-03 01:40:38,923 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-03 01:40:38,923 INFO L276 IsEmpty]: Start isEmpty. Operand 261 states and 332 transitions. [2022-11-03 01:40:38,934 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-11-03 01:40:38,935 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:40:38,937 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:40:38,937 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-03 01:40:38,938 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:40:38,938 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:40:38,938 INFO L85 PathProgramCache]: Analyzing trace with hash 173244105, now seen corresponding path program 1 times [2022-11-03 01:40:38,938 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:40:38,940 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1224758842] [2022-11-03 01:40:38,940 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:40:38,940 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:40:38,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:40:39,532 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 01:40:39,533 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:40:39,533 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1224758842] [2022-11-03 01:40:39,533 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1224758842] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:40:39,533 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 01:40:39,533 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-03 01:40:39,534 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [93690878] [2022-11-03 01:40:39,534 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:40:39,534 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-03 01:40:39,534 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:40:39,536 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-03 01:40:39,536 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-03 01:40:39,536 INFO L87 Difference]: Start difference. First operand 261 states and 332 transitions. Second operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 7 states have internal predecessors, (46), 5 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 4 states have call predecessors, (8), 5 states have call successors, (8) [2022-11-03 01:40:40,228 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:40:40,228 INFO L93 Difference]: Finished difference Result 909 states and 1174 transitions. [2022-11-03 01:40:40,229 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-03 01:40:40,229 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 7 states have internal predecessors, (46), 5 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 4 states have call predecessors, (8), 5 states have call successors, (8) Word has length 65 [2022-11-03 01:40:40,231 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:40:40,236 INFO L225 Difference]: With dead ends: 909 [2022-11-03 01:40:40,236 INFO L226 Difference]: Without dead ends: 650 [2022-11-03 01:40:40,238 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=61, Invalid=149, Unknown=0, NotChecked=0, Total=210 [2022-11-03 01:40:40,242 INFO L413 NwaCegarLoop]: 78 mSDtfsCounter, 218 mSDsluCounter, 143 mSDsCounter, 0 mSdLazyCounter, 342 mSolverCounterSat, 154 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 227 SdHoareTripleChecker+Valid, 194 SdHoareTripleChecker+Invalid, 496 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 154 IncrementalHoareTripleChecker+Valid, 342 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-03 01:40:40,244 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [227 Valid, 194 Invalid, 496 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [154 Valid, 342 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-03 01:40:40,246 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 650 states. [2022-11-03 01:40:40,337 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 650 to 480. [2022-11-03 01:40:40,339 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 480 states, 311 states have (on average 1.2057877813504823) internal successors, (375), 336 states have internal predecessors, (375), 75 states have call successors, (75), 72 states have call predecessors, (75), 93 states have return successors, (125), 84 states have call predecessors, (125), 75 states have call successors, (125) [2022-11-03 01:40:40,343 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 480 states to 480 states and 575 transitions. [2022-11-03 01:40:40,344 INFO L78 Accepts]: Start accepts. Automaton has 480 states and 575 transitions. Word has length 65 [2022-11-03 01:40:40,344 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:40:40,344 INFO L495 AbstractCegarLoop]: Abstraction has 480 states and 575 transitions. [2022-11-03 01:40:40,344 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 7 states have internal predecessors, (46), 5 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 4 states have call predecessors, (8), 5 states have call successors, (8) [2022-11-03 01:40:40,345 INFO L276 IsEmpty]: Start isEmpty. Operand 480 states and 575 transitions. [2022-11-03 01:40:40,346 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-11-03 01:40:40,347 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:40:40,347 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:40:40,347 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-03 01:40:40,347 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:40:40,348 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:40:40,348 INFO L85 PathProgramCache]: Analyzing trace with hash 1681415280, now seen corresponding path program 1 times [2022-11-03 01:40:40,348 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:40:40,348 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1657503165] [2022-11-03 01:40:40,349 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:40:40,349 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:40:40,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:40:40,483 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-03 01:40:40,483 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:40:40,483 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1657503165] [2022-11-03 01:40:40,484 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1657503165] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:40:40,484 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 01:40:40,484 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 01:40:40,484 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1654608109] [2022-11-03 01:40:40,484 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:40:40,486 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 01:40:40,487 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:40:40,488 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 01:40:40,488 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 01:40:40,488 INFO L87 Difference]: Start difference. First operand 480 states and 575 transitions. Second operand has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (9), 1 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-03 01:40:40,633 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:40:40,633 INFO L93 Difference]: Finished difference Result 759 states and 924 transitions. [2022-11-03 01:40:40,634 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 01:40:40,634 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (9), 1 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 68 [2022-11-03 01:40:40,635 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:40:40,637 INFO L225 Difference]: With dead ends: 759 [2022-11-03 01:40:40,637 INFO L226 Difference]: Without dead ends: 427 [2022-11-03 01:40:40,638 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 01:40:40,639 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 45 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 188 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 01:40:40,639 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [45 Valid, 188 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 01:40:40,640 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 427 states. [2022-11-03 01:40:40,698 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 427 to 398. [2022-11-03 01:40:40,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 398 states, 254 states have (on average 1.188976377952756) internal successors, (302), 276 states have internal predecessors, (302), 63 states have call successors, (63), 60 states have call predecessors, (63), 80 states have return successors, (103), 71 states have call predecessors, (103), 63 states have call successors, (103) [2022-11-03 01:40:40,702 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 398 states to 398 states and 468 transitions. [2022-11-03 01:40:40,702 INFO L78 Accepts]: Start accepts. Automaton has 398 states and 468 transitions. Word has length 68 [2022-11-03 01:40:40,702 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:40:40,703 INFO L495 AbstractCegarLoop]: Abstraction has 398 states and 468 transitions. [2022-11-03 01:40:40,703 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (9), 1 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-03 01:40:40,703 INFO L276 IsEmpty]: Start isEmpty. Operand 398 states and 468 transitions. [2022-11-03 01:40:40,705 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-11-03 01:40:40,705 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:40:40,705 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:40:40,705 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-03 01:40:40,706 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:40:40,706 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:40:40,706 INFO L85 PathProgramCache]: Analyzing trace with hash -842966420, now seen corresponding path program 1 times [2022-11-03 01:40:40,706 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:40:40,706 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2060257975] [2022-11-03 01:40:40,707 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:40:40,707 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:40:40,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:40:40,836 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 18 proven. 4 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-03 01:40:40,837 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:40:40,837 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2060257975] [2022-11-03 01:40:40,837 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2060257975] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 01:40:40,837 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1423759780] [2022-11-03 01:40:40,837 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:40:40,838 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 01:40:40,838 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 01:40:40,845 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 01:40:40,882 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-03 01:40:41,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:40:41,003 INFO L263 TraceCheckSpWp]: Trace formula consists of 456 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-03 01:40:41,010 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 01:40:41,129 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 01:40:41,130 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 01:40:41,130 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1423759780] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:40:41,130 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 01:40:41,130 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5] total 6 [2022-11-03 01:40:41,131 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1789925024] [2022-11-03 01:40:41,131 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:40:41,131 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 01:40:41,132 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:40:41,132 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 01:40:41,132 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-03 01:40:41,132 INFO L87 Difference]: Start difference. First operand 398 states and 468 transitions. Second operand has 3 states, 3 states have (on average 17.333333333333332) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-11-03 01:40:41,244 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:40:41,245 INFO L93 Difference]: Finished difference Result 654 states and 792 transitions. [2022-11-03 01:40:41,245 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 01:40:41,245 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.333333333333332) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 71 [2022-11-03 01:40:41,246 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:40:41,248 INFO L225 Difference]: With dead ends: 654 [2022-11-03 01:40:41,248 INFO L226 Difference]: Without dead ends: 328 [2022-11-03 01:40:41,249 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 77 GetRequests, 73 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-03 01:40:41,252 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 33 mSDsluCounter, 43 mSDsCounter, 0 mSdLazyCounter, 36 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 38 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 36 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 01:40:41,252 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 108 Invalid, 38 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 36 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 01:40:41,253 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 328 states. [2022-11-03 01:40:41,301 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 328 to 328. [2022-11-03 01:40:41,302 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 328 states, 212 states have (on average 1.1462264150943395) internal successors, (243), 230 states have internal predecessors, (243), 54 states have call successors, (54), 51 states have call predecessors, (54), 61 states have return successors, (69), 56 states have call predecessors, (69), 54 states have call successors, (69) [2022-11-03 01:40:41,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 328 states to 328 states and 366 transitions. [2022-11-03 01:40:41,305 INFO L78 Accepts]: Start accepts. Automaton has 328 states and 366 transitions. Word has length 71 [2022-11-03 01:40:41,305 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:40:41,306 INFO L495 AbstractCegarLoop]: Abstraction has 328 states and 366 transitions. [2022-11-03 01:40:41,306 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.333333333333332) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-11-03 01:40:41,306 INFO L276 IsEmpty]: Start isEmpty. Operand 328 states and 366 transitions. [2022-11-03 01:40:41,308 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2022-11-03 01:40:41,308 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:40:41,309 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:40:41,346 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-11-03 01:40:41,534 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 01:40:41,534 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:40:41,535 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:40:41,535 INFO L85 PathProgramCache]: Analyzing trace with hash 1236217897, now seen corresponding path program 1 times [2022-11-03 01:40:41,535 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:40:41,535 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [646637860] [2022-11-03 01:40:41,535 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:40:41,535 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:40:41,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:40:41,839 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 11 proven. 6 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-03 01:40:41,839 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:40:41,839 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [646637860] [2022-11-03 01:40:41,839 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [646637860] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 01:40:41,839 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [876927817] [2022-11-03 01:40:41,839 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:40:41,839 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 01:40:41,839 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 01:40:41,840 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 01:40:41,842 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-03 01:40:41,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:40:41,966 INFO L263 TraceCheckSpWp]: Trace formula consists of 481 conjuncts, 30 conjunts are in the unsatisfiable core [2022-11-03 01:40:41,970 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 01:40:42,171 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 20 proven. 5 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 01:40:42,171 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 01:40:42,481 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 11 proven. 6 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-03 01:40:42,481 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [876927817] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 01:40:42,482 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1801906692] [2022-11-03 01:40:42,502 INFO L159 IcfgInterpreter]: Started Sifa with 51 locations of interest [2022-11-03 01:40:42,502 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 01:40:42,506 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 01:40:42,512 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 01:40:42,512 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 01:40:50,122 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 33 for LOIs [2022-11-03 01:40:50,126 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 30 for LOIs [2022-11-03 01:40:50,463 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 38 for LOIs [2022-11-03 01:40:50,620 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 22 for LOIs [2022-11-03 01:40:50,675 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 40 for LOIs [2022-11-03 01:40:50,681 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 24 for LOIs [2022-11-03 01:40:50,684 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 25 for LOIs [2022-11-03 01:40:50,686 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 01:40:57,225 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8885#(and (<= ~cleanupTimeShifts~0 4) (<= ~head~0.offset 0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~5#1|) (<= 0 |#NULL.base|) (<= 0 (+ |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1| 2147483648)) (<= 0 ~head~0.offset) (<= 1 ~systemActive~0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~5#1|) (<= |#NULL.offset| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1|) (<= 0 ~methAndRunningLastTime~0) (<= 4 ~cleanupTimeShifts~0) (<= 0 |old(~methAndRunningLastTime~0)|) (<= 0 ~head~0.base) (<= |#NULL.base| 0) (<= 0 ~methaneLevelCritical~0) (<= ~head~0.base 0) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1| 0)) (<= 0 |#NULL.offset|) (not (= ~methAndRunningLastTime~0 0)) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1| 2147483647) (<= 0 |#StackHeapBarrier|) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 2147483647) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| ~methaneLevelCritical~0) (<= ~systemActive~0 1))' at error location [2022-11-03 01:40:57,225 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 01:40:57,233 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 01:40:57,234 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9, 10] total 19 [2022-11-03 01:40:57,234 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [576670059] [2022-11-03 01:40:57,235 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 01:40:57,237 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2022-11-03 01:40:57,237 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:40:57,238 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2022-11-03 01:40:57,239 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=224, Invalid=2226, Unknown=0, NotChecked=0, Total=2450 [2022-11-03 01:40:57,239 INFO L87 Difference]: Start difference. First operand 328 states and 366 transitions. Second operand has 19 states, 13 states have (on average 7.3076923076923075) internal successors, (95), 15 states have internal predecessors, (95), 5 states have call successors, (25), 7 states have call predecessors, (25), 10 states have return successors, (25), 7 states have call predecessors, (25), 5 states have call successors, (25) [2022-11-03 01:40:58,226 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:40:58,227 INFO L93 Difference]: Finished difference Result 653 states and 746 transitions. [2022-11-03 01:40:58,227 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-03 01:40:58,227 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 13 states have (on average 7.3076923076923075) internal successors, (95), 15 states have internal predecessors, (95), 5 states have call successors, (25), 7 states have call predecessors, (25), 10 states have return successors, (25), 7 states have call predecessors, (25), 5 states have call successors, (25) Word has length 79 [2022-11-03 01:40:58,228 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:40:58,232 INFO L225 Difference]: With dead ends: 653 [2022-11-03 01:40:58,232 INFO L226 Difference]: Without dead ends: 493 [2022-11-03 01:40:58,234 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 257 GetRequests, 182 SyntacticMatches, 18 SemanticMatches, 57 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1594 ImplicationChecksByTransitivity, 6.9s TimeCoverageRelationStatistics Valid=307, Invalid=3115, Unknown=0, NotChecked=0, Total=3422 [2022-11-03 01:40:58,235 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 317 mSDsluCounter, 165 mSDsCounter, 0 mSdLazyCounter, 1060 mSolverCounterSat, 192 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 322 SdHoareTripleChecker+Valid, 212 SdHoareTripleChecker+Invalid, 1252 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 192 IncrementalHoareTripleChecker+Valid, 1060 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-03 01:40:58,236 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [322 Valid, 212 Invalid, 1252 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [192 Valid, 1060 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-03 01:40:58,237 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 493 states. [2022-11-03 01:40:58,286 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 493 to 477. [2022-11-03 01:40:58,288 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 477 states, 312 states have (on average 1.1474358974358974) internal successors, (358), 337 states have internal predecessors, (358), 77 states have call successors, (77), 71 states have call predecessors, (77), 87 states have return successors, (99), 84 states have call predecessors, (99), 77 states have call successors, (99) [2022-11-03 01:40:58,292 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 477 states to 477 states and 534 transitions. [2022-11-03 01:40:58,292 INFO L78 Accepts]: Start accepts. Automaton has 477 states and 534 transitions. Word has length 79 [2022-11-03 01:40:58,293 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:40:58,293 INFO L495 AbstractCegarLoop]: Abstraction has 477 states and 534 transitions. [2022-11-03 01:40:58,293 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 13 states have (on average 7.3076923076923075) internal successors, (95), 15 states have internal predecessors, (95), 5 states have call successors, (25), 7 states have call predecessors, (25), 10 states have return successors, (25), 7 states have call predecessors, (25), 5 states have call successors, (25) [2022-11-03 01:40:58,293 INFO L276 IsEmpty]: Start isEmpty. Operand 477 states and 534 transitions. [2022-11-03 01:40:58,295 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2022-11-03 01:40:58,295 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 01:40:58,295 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:40:58,338 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-03 01:40:58,510 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 01:40:58,510 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 01:40:58,511 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 01:40:58,511 INFO L85 PathProgramCache]: Analyzing trace with hash -545891376, now seen corresponding path program 1 times [2022-11-03 01:40:58,511 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 01:40:58,511 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1303210254] [2022-11-03 01:40:58,511 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:40:58,512 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 01:40:58,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:40:58,845 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 9 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-03 01:40:58,845 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 01:40:58,846 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1303210254] [2022-11-03 01:40:58,846 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1303210254] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 01:40:58,846 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1806414396] [2022-11-03 01:40:58,846 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 01:40:58,846 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 01:40:58,846 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 01:40:58,847 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 01:40:58,868 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-03 01:40:58,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 01:40:58,961 INFO L263 TraceCheckSpWp]: Trace formula consists of 487 conjuncts, 23 conjunts are in the unsatisfiable core [2022-11-03 01:40:58,964 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 01:40:59,040 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-03 01:40:59,041 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 01:40:59,041 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1806414396] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 01:40:59,041 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 01:40:59,041 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [11] total 14 [2022-11-03 01:40:59,041 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [580561478] [2022-11-03 01:40:59,042 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 01:40:59,042 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-03 01:40:59,042 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 01:40:59,043 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-03 01:40:59,043 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2022-11-03 01:40:59,043 INFO L87 Difference]: Start difference. First operand 477 states and 534 transitions. Second operand has 9 states, 7 states have (on average 7.0) internal successors, (49), 7 states have internal predecessors, (49), 2 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-03 01:40:59,399 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 01:40:59,399 INFO L93 Difference]: Finished difference Result 932 states and 1062 transitions. [2022-11-03 01:40:59,399 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-03 01:40:59,400 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 7.0) internal successors, (49), 7 states have internal predecessors, (49), 2 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 2 states have call successors, (11) Word has length 82 [2022-11-03 01:40:59,400 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 01:40:59,401 INFO L225 Difference]: With dead ends: 932 [2022-11-03 01:40:59,401 INFO L226 Difference]: Without dead ends: 0 [2022-11-03 01:40:59,403 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 105 GetRequests, 86 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=72, Invalid=348, Unknown=0, NotChecked=0, Total=420 [2022-11-03 01:40:59,403 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 50 mSDsluCounter, 357 mSDsCounter, 0 mSdLazyCounter, 274 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 344 SdHoareTripleChecker+Invalid, 283 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 274 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 01:40:59,404 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 344 Invalid, 283 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 274 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 01:40:59,405 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-03 01:40:59,405 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-03 01:40:59,405 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 01:40:59,405 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-03 01:40:59,406 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 82 [2022-11-03 01:40:59,406 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 01:40:59,406 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-03 01:40:59,406 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 7.0) internal successors, (49), 7 states have internal predecessors, (49), 2 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-03 01:40:59,406 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-03 01:40:59,407 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-03 01:40:59,409 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-03 01:40:59,449 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-03 01:40:59,634 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 01:40:59,636 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-03 01:41:05,370 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 758 765) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not .cse2))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 1)) .cse2) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2)))) [2022-11-03 01:41:05,371 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 758 765) no Hoare annotation was computed. [2022-11-03 01:41:05,371 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 665 671) no Hoare annotation was computed. [2022-11-03 01:41:05,371 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 665 671) the Hoare annotation is: true [2022-11-03 01:41:05,372 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 896 907) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 1)) (.cse2 (not (= |old(~methaneLevelCritical~0)| 1))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse6 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse7 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse5 (not (<= 1 ~pumpRunning~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 .cse3) (or .cse6 .cse0 .cse7 .cse3 .cse4) (or .cse6 .cse7 .cse5 .cse3))) [2022-11-03 01:41:05,372 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 896 907) no Hoare annotation was computed. [2022-11-03 01:41:05,372 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 908 916) the Hoare annotation is: true [2022-11-03 01:41:05,372 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 908 916) no Hoare annotation was computed. [2022-11-03 01:41:05,372 INFO L899 garLoopResultBuilder]: For program point L733(lines 733 741) no Hoare annotation was computed. [2022-11-03 01:41:05,372 INFO L899 garLoopResultBuilder]: For program point L729(lines 729 746) no Hoare annotation was computed. [2022-11-03 01:41:05,373 INFO L899 garLoopResultBuilder]: For program point L180(lines 180 190) no Hoare annotation was computed. [2022-11-03 01:41:05,376 INFO L895 garLoopResultBuilder]: At program point L176(lines 176 193) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0)) (.cse10 (not (= |old(~pumpRunning~0)| 0)))) (let ((.cse6 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse9 (not (<= |old(~waterLevel~0)| 1))) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse15 (<= 2 ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse4 (or .cse10 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (.cse5 (not .cse7)) (.cse13 (not (= ~methaneLevelCritical~0 1))) (.cse11 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse14 (= ~methAndRunningLastTime~0 0)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (let ((.cse3 (= |timeShift_processEnvironment_~tmp~8#1| ~methaneLevelCritical~0))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6) .cse7 (and .cse8 .cse3 .cse6))) (or .cse9 .cse10 .cse11 .cse1 .cse12 .cse7) (or (and .cse2 (= |timeShift_processEnvironment_~tmp~8#1| 1) .cse4 .cse5) .cse0 .cse13 .cse7) (or .cse10 .cse11 (and .cse8 .cse14 .cse15 .cse4 .cse6) (and .cse2 .cse14 .cse4 .cse6) .cse1 .cse7) (or .cse9 .cse10 .cse11 (and .cse14 .cse12) .cse13 .cse7) (or .cse10 .cse11 (and .cse8 .cse14 .cse15 .cse4) (and .cse2 .cse4 .cse5) .cse13 .cse7) (or .cse11 .cse14 .cse0 .cse1 .cse7)))) [2022-11-03 01:41:05,378 INFO L895 garLoopResultBuilder]: At program point L176-1(lines 168 196) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse7 (= ~pumpRunning~0 0)) (.cse8 (= ~methAndRunningLastTime~0 0)) (.cse10 (not .cse5)) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (let ((.cse13 (<= 2 ~waterLevel~0)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse12 (<= 1 ~pumpRunning~0)) (.cse9 (or .cse1 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (.cse14 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7 .cse8 (<= ~waterLevel~0 1) (= |old(~waterLevel~0)| ~waterLevel~0) .cse10)) (.cse11 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 (and .cse7 .cse8 (= |timeShift_processEnvironment_~tmp~8#1| 1) .cse9 .cse10) .cse11 .cse5) (or .cse1 .cse2 (and .cse12 .cse8 .cse13 .cse9 .cse14) (and .cse7 .cse8 .cse9 .cse14) .cse3 .cse5) (or .cse1 .cse2 (and .cse7 .cse8 .cse9 .cse10) .cse11 .cse5 (and .cse12 .cse13 .cse9)) (let ((.cse15 (= |timeShift_processEnvironment_~tmp~8#1| ~methaneLevelCritical~0))) (or .cse6 .cse3 (and .cse12 .cse8 .cse15 .cse14) (and .cse7 .cse8 .cse15 .cse9 .cse10 .cse14) .cse5)) (or .cse0 .cse1 .cse2 .cse4 .cse11 .cse5))))) [2022-11-03 01:41:05,378 INFO L895 garLoopResultBuilder]: At program point L771(line 771) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse5 .cse6 .cse4 .cse3) (or .cse5 .cse6 .cse2 .cse3) (or .cse6 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3))) [2022-11-03 01:41:05,379 INFO L895 garLoopResultBuilder]: At program point L771-1(line 771) the Hoare annotation is: (let ((.cse2 (<= 1 ~pumpRunning~0)) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and .cse2 (= |timeShift_isMethaneAlarm_#t~ret37#1| ~methaneLevelCritical~0)) .cse3) (or .cse0 .cse4 .cse3 (and .cse2 (= |timeShift_isMethaneAlarm_#t~ret37#1| 1))) (or .cse5 .cse6 .cse4 .cse3) (or .cse5 .cse6 .cse1 .cse3) (or .cse6 (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse3))) [2022-11-03 01:41:05,379 INFO L899 garLoopResultBuilder]: For program point L181(lines 181 187) no Hoare annotation was computed. [2022-11-03 01:41:05,379 INFO L899 garLoopResultBuilder]: For program point L652-1(lines 652 658) no Hoare annotation was computed. [2022-11-03 01:41:05,379 INFO L895 garLoopResultBuilder]: At program point L739(line 739) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 (and (<= 1 ~pumpRunning~0) (= |timeShift_processEnvironment_~tmp~8#1| ~methaneLevelCritical~0)) .cse2) (or .cse4 .cse5 .cse1 .cse2) (or .cse4 .cse5 .cse3 .cse2) (or .cse5 (= ~methAndRunningLastTime~0 0) .cse0 .cse3 .cse2))) [2022-11-03 01:41:05,380 INFO L895 garLoopResultBuilder]: At program point L735(line 735) the Hoare annotation is: (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (and (<= 1 ~pumpRunning~0) (= |timeShift_processEnvironment_~tmp~8#1| 1)) .cse1 .cse2) (or .cse0 .cse3 .cse2) (or .cse4 .cse5 .cse1 .cse2) (or .cse4 .cse5 .cse3 .cse2))) [2022-11-03 01:41:05,380 INFO L895 garLoopResultBuilder]: At program point L1012(line 1012) the Hoare annotation is: (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2) (or .cse4 .cse5 .cse1 .cse2) (or .cse4 .cse5 .cse3 .cse2))) [2022-11-03 01:41:05,380 INFO L895 garLoopResultBuilder]: At program point L174(line 174) the Hoare annotation is: (let ((.cse9 (not (= |old(~pumpRunning~0)| 0)))) (let ((.cse7 (= 0 ~systemActive~0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse13 (= ~methAndRunningLastTime~0 0)) (.cse3 (or .cse9 (<= ~waterLevel~0 |old(~waterLevel~0)|)))) (let ((.cse8 (not (<= |old(~waterLevel~0)| 1))) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (and .cse6 .cse13 (<= 2 ~waterLevel~0) .cse3)) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not .cse7)) (.cse12 (not (= ~methaneLevelCritical~0 1))) (.cse10 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (let ((.cse2 (= |timeShift_processEnvironment_~tmp~8#1| ~methaneLevelCritical~0))) (or .cse0 (and .cse1 .cse2 .cse3 .cse4) .cse5 (and .cse6 .cse2) .cse7)) (or .cse8 .cse9 .cse10 .cse5 .cse11 .cse7) (or (and .cse1 (= |timeShift_processEnvironment_~tmp~8#1| 1) .cse3 .cse4) .cse0 .cse12 .cse7) (or .cse8 .cse9 .cse10 (and .cse13 .cse11) .cse12 .cse7) (or .cse9 .cse10 .cse14 (and .cse1 .cse13 .cse3) .cse5 .cse7) (or .cse9 .cse10 .cse14 (and .cse1 .cse3 .cse4) .cse12 .cse7) (or .cse10 .cse13 .cse0 .cse5 .cse7))))) [2022-11-03 01:41:05,380 INFO L899 garLoopResultBuilder]: For program point L174-1(line 174) no Hoare annotation was computed. [2022-11-03 01:41:05,381 INFO L895 garLoopResultBuilder]: At program point L744(line 744) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0)))) (let ((.cse3 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (or .cse4 (<= ~waterLevel~0 |old(~waterLevel~0)|)))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse1 .cse6 .cse2) (or .cse3 .cse4 .cse5 .cse7 .cse6 .cse2) (or .cse4 .cse5 .cse8 .cse1 .cse2) (or .cse0 .cse7 .cse2) (or .cse4 .cse5 .cse8 .cse7 .cse2)))) [2022-11-03 01:41:05,381 INFO L895 garLoopResultBuilder]: At program point L744-1(lines 725 749) the Hoare annotation is: (let ((.cse9 (not (= |old(~pumpRunning~0)| 0)))) (let ((.cse7 (= 0 ~systemActive~0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse13 (= ~methAndRunningLastTime~0 0)) (.cse3 (or .cse9 (<= ~waterLevel~0 |old(~waterLevel~0)|)))) (let ((.cse8 (not (<= |old(~waterLevel~0)| 1))) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (and .cse6 .cse13 (<= 2 ~waterLevel~0) .cse3)) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not .cse7)) (.cse12 (not (= ~methaneLevelCritical~0 1))) (.cse10 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (let ((.cse2 (= |timeShift_processEnvironment_~tmp~8#1| ~methaneLevelCritical~0))) (or .cse0 (and .cse1 .cse2 .cse3 .cse4) .cse5 (and .cse6 .cse2) .cse7)) (or .cse8 .cse9 .cse10 .cse5 .cse11 .cse7) (or (and .cse1 (= |timeShift_processEnvironment_~tmp~8#1| 1) .cse3 .cse4) .cse0 .cse12 .cse7) (or .cse8 .cse9 .cse10 (and .cse13 .cse11) .cse12 .cse7) (or .cse9 .cse10 .cse14 (and .cse1 .cse13 .cse3) .cse5 .cse7) (or .cse9 .cse10 .cse14 (and .cse1 .cse3 .cse4) .cse12 .cse7) (or .cse10 .cse13 .cse0 .cse5 .cse7))))) [2022-11-03 01:41:05,381 INFO L899 garLoopResultBuilder]: For program point L645-1(lines 644 663) no Hoare annotation was computed. [2022-11-03 01:41:05,381 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 641 664) the Hoare annotation is: (let ((.cse8 (= ~methAndRunningLastTime~0 0)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0))) (let ((.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9 (not .cse3))) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (and (= ~pumpRunning~0 0) .cse8 .cse9)) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7 .cse3) (or .cse0 .cse2 .cse7 .cse3) (or .cse4 .cse5 .cse6 .cse1 .cse3) (or .cse5 .cse8 .cse0 .cse1 .cse3)))) [2022-11-03 01:41:05,381 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 641 664) no Hoare annotation was computed. [2022-11-03 01:41:05,382 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1012) no Hoare annotation was computed. [2022-11-03 01:41:05,382 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-11-03 01:41:05,382 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-11-03 01:41:05,382 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-11-03 01:41:05,382 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-11-03 01:41:05,383 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-11-03 01:41:05,383 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-11-03 01:41:05,383 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-11-03 01:41:05,383 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-11-03 01:41:05,383 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-11-03 01:41:05,383 INFO L899 garLoopResultBuilder]: For program point L576(lines 575 622) no Hoare annotation was computed. [2022-11-03 01:41:05,383 INFO L895 garLoopResultBuilder]: At program point L597(line 597) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 .cse5 .cse4) (and .cse1 .cse6 .cse7 .cse2 .cse3 .cse4) (and .cse1 .cse6 .cse7 .cse3 .cse5 .cse4))) [2022-11-03 01:41:05,384 INFO L902 garLoopResultBuilder]: At program point L626(lines 565 630) the Hoare annotation is: true [2022-11-03 01:41:05,384 INFO L899 garLoopResultBuilder]: For program point L585(lines 585 591) no Hoare annotation was computed. [2022-11-03 01:41:05,384 INFO L899 garLoopResultBuilder]: For program point L585-1(lines 585 591) no Hoare annotation was computed. [2022-11-03 01:41:05,384 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-03 01:41:05,384 INFO L895 garLoopResultBuilder]: At program point L623(lines 574 624) the Hoare annotation is: false [2022-11-03 01:41:05,384 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-03 01:41:05,385 INFO L899 garLoopResultBuilder]: For program point L595(lines 595 601) no Hoare annotation was computed. [2022-11-03 01:41:05,385 INFO L895 garLoopResultBuilder]: At program point L595-1(lines 595 601) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 .cse5 .cse4) (and .cse1 .cse6 .cse7 .cse2 .cse3 .cse4) (and .cse1 .cse6 .cse7 .cse3 .cse5 .cse4))) [2022-11-03 01:41:05,385 INFO L895 garLoopResultBuilder]: At program point L620(lines 575 622) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 .cse5 .cse4) (and .cse1 .cse6 .cse7 .cse2 .cse3 .cse4) (and .cse1 .cse6 .cse7 .cse3 .cse5 .cse4))) [2022-11-03 01:41:05,385 INFO L895 garLoopResultBuilder]: At program point L587(line 587) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 .cse5 .cse4) (and .cse1 .cse6 .cse7 .cse2 .cse3 .cse4) (and .cse1 .cse6 .cse7 .cse3 .cse5 .cse4))) [2022-11-03 01:41:05,385 INFO L895 garLoopResultBuilder]: At program point L142(lines 142 149) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0) (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_main_~tmp~0#1| 1) (<= ~waterLevel~0 1)) [2022-11-03 01:41:05,386 INFO L902 garLoopResultBuilder]: At program point L142-2(lines 142 149) the Hoare annotation is: true [2022-11-03 01:41:05,386 INFO L895 garLoopResultBuilder]: At program point L613-2(lines 605 618) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 .cse5 .cse4) (and .cse1 .cse6 .cse7 .cse2 .cse3 .cse4) (and .cse1 .cse6 .cse7 .cse3 .cse5 .cse4))) [2022-11-03 01:41:05,386 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 673 697) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 1)) .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse4 .cse2) (or .cse0 .cse1 .cse4 .cse2 .cse3))) [2022-11-03 01:41:05,386 INFO L895 garLoopResultBuilder]: At program point L692(line 692) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (= ~methaneLevelCritical~0 1)) .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2022-11-03 01:41:05,386 INFO L899 garLoopResultBuilder]: For program point L692-1(lines 673 697) no Hoare annotation was computed. [2022-11-03 01:41:05,387 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 673 697) no Hoare annotation was computed. [2022-11-03 01:41:05,387 INFO L895 garLoopResultBuilder]: At program point L687(line 687) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse2 (and (<= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0) (< 0 (+ |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 1))))) (and (or .cse0 .cse1 .cse2 (not (<= ~waterLevel~0 1)) .cse3 .cse4) (or .cse0 .cse5 .cse1 .cse3 .cse4) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse3) (or .cse0 (not (= ~methaneLevelCritical~0 1)) .cse3 .cse4 (and .cse5 (or (<= 2 ~waterLevel~0) .cse2))))) [2022-11-03 01:41:05,387 INFO L895 garLoopResultBuilder]: At program point L681(lines 681 689) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse2 (and (<= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0) (< 0 (+ |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 1))))) (and (or .cse0 .cse1 .cse2 (not (<= ~waterLevel~0 1)) .cse3 .cse4) (or .cse0 .cse5 .cse1 .cse3 .cse4) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse3) (or .cse0 (not (= ~methaneLevelCritical~0 1)) .cse3 .cse4 (and .cse5 (or (<= 2 ~waterLevel~0) .cse2))))) [2022-11-03 01:41:05,387 INFO L895 garLoopResultBuilder]: At program point L677(lines 677 694) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 1)) .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse4 .cse2) (or .cse0 .cse1 .cse4 .cse2 .cse3))) [2022-11-03 01:41:05,388 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 884 895) no Hoare annotation was computed. [2022-11-03 01:41:05,388 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 884 895) the Hoare annotation is: (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0))) (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse6 (and .cse2 (not .cse3))) (.cse7 (not (<= 1 ~pumpRunning~0))) (.cse5 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse2 .cse3 .cse4) (or .cse6 .cse1 .cse7 .cse3) (or .cse6 .cse7 .cse5 .cse3)))) [2022-11-03 01:41:05,388 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 699 723) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 1)) .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse4 .cse2) (or .cse0 .cse1 .cse4 .cse2 .cse3))) [2022-11-03 01:41:05,388 INFO L895 garLoopResultBuilder]: At program point L713(line 713) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (= ~methaneLevelCritical~0 1)) .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2022-11-03 01:41:05,388 INFO L895 garLoopResultBuilder]: At program point L709(line 709) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (= ~methaneLevelCritical~0 1)) .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2022-11-03 01:41:05,389 INFO L899 garLoopResultBuilder]: For program point L707(lines 707 715) no Hoare annotation was computed. [2022-11-03 01:41:05,389 INFO L895 garLoopResultBuilder]: At program point L703(lines 703 720) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 1)) .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse4 .cse2) (or .cse0 .cse1 .cse4 .cse2 .cse3))) [2022-11-03 01:41:05,389 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 699 723) no Hoare annotation was computed. [2022-11-03 01:41:05,389 INFO L895 garLoopResultBuilder]: At program point L718(line 718) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 1)) .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse2 .cse3) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse4 .cse2))) [2022-11-03 01:41:05,389 INFO L899 garLoopResultBuilder]: For program point L718-1(lines 699 723) no Hoare annotation was computed. [2022-11-03 01:41:05,393 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 01:41:05,395 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-03 01:41:05,426 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 03.11 01:41:05 BoogieIcfgContainer [2022-11-03 01:41:05,426 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-03 01:41:05,427 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-03 01:41:05,427 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-03 01:41:05,427 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-03 01:41:05,427 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 01:40:36" (3/4) ... [2022-11-03 01:41:05,430 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-03 01:41:05,436 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-03 01:41:05,436 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-03 01:41:05,436 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-03 01:41:05,436 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-03 01:41:05,436 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-03 01:41:05,436 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-03 01:41:05,437 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 01:41:05,437 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-03 01:41:05,437 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-11-03 01:41:05,444 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 80 nodes and edges [2022-11-03 01:41:05,445 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 28 nodes and edges [2022-11-03 01:41:05,446 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2022-11-03 01:41:05,446 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-03 01:41:05,447 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-03 01:41:05,447 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 01:41:05,448 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 01:41:05,472 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-03 01:41:05,473 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(1 <= \old(pumpRunning)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || 0 == systemActive) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) || 0 == systemActive)) && ((((((pumpRunning == 0 && tmp == 1) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel)))) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel)))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel)))) || ((pumpRunning == 0 && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-03 01:41:05,474 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(methaneLevelCritical == 1)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-11-03 01:41:05,475 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && !(0 == systemActive)) && tmp == 0)) || 0 == systemActive) || ((1 <= pumpRunning && tmp == methaneLevelCritical) && tmp == 0)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) || 0 == systemActive)) && ((((((pumpRunning == 0 && tmp == 1) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && tmp == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && tmp == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel)))) || ((pumpRunning == 0 && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-03 01:41:05,475 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && aux-isMethaneLevelCritical()-aux == methaneLevelCritical)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 1)) || 0 == systemActive) || (1 <= pumpRunning && aux-isMethaneLevelCritical()-aux == 1))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-03 01:41:05,475 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(methaneLevelCritical == 1)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-11-03 01:41:05,476 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 1) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && tmp == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && tmp == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || 0 == systemActive) || ((1 <= pumpRunning && 2 <= waterLevel) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && tmp == methaneLevelCritical) && tmp == 0)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && !(0 == systemActive)) && tmp == 0)) || 0 == systemActive)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || 0 == systemActive) [2022-11-03 01:41:05,477 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 1)) || 0 == systemActive) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-03 01:41:05,481 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (tmp <= 0 && 0 < tmp + 1)) || !(waterLevel <= 1)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) || (pumpRunning == 0 && (2 <= waterLevel || (tmp <= 0 && 0 < tmp + 1)))) [2022-11-03 01:41:05,510 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/witness.graphml [2022-11-03 01:41:05,510 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-03 01:41:05,511 INFO L158 Benchmark]: Toolchain (without parser) took 30369.12ms. Allocated memory was 88.1MB in the beginning and 400.6MB in the end (delta: 312.5MB). Free memory was 44.8MB in the beginning and 301.7MB in the end (delta: -256.9MB). Peak memory consumption was 54.6MB. Max. memory is 16.1GB. [2022-11-03 01:41:05,511 INFO L158 Benchmark]: CDTParser took 0.28ms. Allocated memory is still 88.1MB. Free memory is still 62.4MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 01:41:05,511 INFO L158 Benchmark]: CACSL2BoogieTranslator took 614.80ms. Allocated memory is still 88.1MB. Free memory was 44.6MB in the beginning and 49.3MB in the end (delta: -4.7MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-03 01:41:05,512 INFO L158 Benchmark]: Boogie Procedure Inliner took 91.11ms. Allocated memory is still 88.1MB. Free memory was 49.3MB in the beginning and 46.6MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-03 01:41:05,512 INFO L158 Benchmark]: Boogie Preprocessor took 56.76ms. Allocated memory is still 88.1MB. Free memory was 46.6MB in the beginning and 44.9MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 01:41:05,513 INFO L158 Benchmark]: RCFGBuilder took 817.08ms. Allocated memory was 88.1MB in the beginning and 123.7MB in the end (delta: 35.7MB). Free memory was 44.9MB in the beginning and 81.6MB in the end (delta: -36.7MB). Peak memory consumption was 13.9MB. Max. memory is 16.1GB. [2022-11-03 01:41:05,513 INFO L158 Benchmark]: TraceAbstraction took 28696.96ms. Allocated memory was 123.7MB in the beginning and 400.6MB in the end (delta: 276.8MB). Free memory was 80.8MB in the beginning and 308.0MB in the end (delta: -227.2MB). Peak memory consumption was 223.8MB. Max. memory is 16.1GB. [2022-11-03 01:41:05,513 INFO L158 Benchmark]: Witness Printer took 83.86ms. Allocated memory is still 400.6MB. Free memory was 308.0MB in the beginning and 301.7MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-03 01:41:05,515 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.28ms. Allocated memory is still 88.1MB. Free memory is still 62.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 614.80ms. Allocated memory is still 88.1MB. Free memory was 44.6MB in the beginning and 49.3MB in the end (delta: -4.7MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 91.11ms. Allocated memory is still 88.1MB. Free memory was 49.3MB in the beginning and 46.6MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 56.76ms. Allocated memory is still 88.1MB. Free memory was 46.6MB in the beginning and 44.9MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 817.08ms. Allocated memory was 88.1MB in the beginning and 123.7MB in the end (delta: 35.7MB). Free memory was 44.9MB in the beginning and 81.6MB in the end (delta: -36.7MB). Peak memory consumption was 13.9MB. Max. memory is 16.1GB. * TraceAbstraction took 28696.96ms. Allocated memory was 123.7MB in the beginning and 400.6MB in the end (delta: 276.8MB). Free memory was 80.8MB in the beginning and 308.0MB in the end (delta: -227.2MB). Peak memory consumption was 223.8MB. Max. memory is 16.1GB. * Witness Printer took 83.86ms. Allocated memory is still 400.6MB. Free memory was 308.0MB in the beginning and 301.7MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1012]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 69 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 28.6s, OverallIterations: 11, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.7s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 902 SdHoareTripleChecker+Valid, 1.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 874 mSDsluCounter, 1842 SdHoareTripleChecker+Invalid, 1.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1332 mSDsCounter, 380 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2048 IncrementalHoareTripleChecker+Invalid, 2428 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 380 mSolverCounterUnsat, 778 mSDtfsCounter, 2048 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 491 GetRequests, 365 SyntacticMatches, 18 SemanticMatches, 108 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1661 ImplicationChecksByTransitivity, 7.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=480occurred in iteration=7, InterpolantAutomatonStates: 73, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 11 MinimizatonAttempts, 225 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 41 LocationsWithAnnotation, 1276 PreInvPairs, 1424 NumberOfFragments, 2796 HoareAnnotationTreeSize, 1276 FomulaSimplifications, 324 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 41 FomulaSimplificationsInter, 16963 FormulaSimplificationTreeSizeReductionInter, 5.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 2.8s InterpolantComputationTime, 751 NumberOfCodeBlocks, 751 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 815 ConstructedInterpolants, 0 QuantifiedInterpolants, 1656 SizeOfPredicates, 15 NumberOfNonLiveVariables, 1424 ConjunctsInSsa, 57 ConjunctsInUnsatCore, 15 InterpolantComputations, 10 PerfectInterpolantSequences, 239/269 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 681]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (tmp <= 0 && 0 < tmp + 1)) || !(waterLevel <= 1)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) || (pumpRunning == 0 && (2 <= waterLevel || (tmp <= 0 && 0 < tmp + 1)))) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 565]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 574]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 176]: Loop Invariant Derived loop invariant: (((((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && !(0 == systemActive)) && tmp == 0)) || 0 == systemActive) || ((1 <= pumpRunning && tmp == methaneLevelCritical) && tmp == 0)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) || 0 == systemActive)) && ((((((pumpRunning == 0 && tmp == 1) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && tmp == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && tmp == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel)))) || ((pumpRunning == 0 && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 575]: Loop Invariant Derived loop invariant: ((((((1 <= pumpRunning && tmp == systemActive) && methaneLevelCritical == 0) && tmp == 1) && splverifierCounter == 0) || ((((1 <= pumpRunning && tmp == systemActive) && tmp == 1) && methaneLevelCritical == 1) && splverifierCounter == 0)) || (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 1) && splverifierCounter == 0)) || (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && tmp == 1) && methaneLevelCritical == 1) && splverifierCounter == 0) - InvariantResult [Line: 168]: Loop Invariant Derived loop invariant: (((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 1) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && tmp == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && tmp == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || 0 == systemActive) || ((1 <= pumpRunning && 2 <= waterLevel) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && tmp == methaneLevelCritical) && tmp == 0)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && !(0 == systemActive)) && tmp == 0)) || 0 == systemActive)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || 0 == systemActive) - InvariantResult [Line: 641]: Loop Invariant Derived loop invariant: ((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(methaneLevelCritical == 1)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 725]: Loop Invariant Derived loop invariant: (((((((((!(1 <= \old(pumpRunning)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || 0 == systemActive) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) || 0 == systemActive)) && ((((((pumpRunning == 0 && tmp == 1) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel)))) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel)))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel)))) || ((pumpRunning == 0 && (!(\old(pumpRunning) == 0) || waterLevel <= \old(waterLevel))) && !(0 == systemActive))) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 703]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(methaneLevelCritical == 1)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 142]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 595]: Loop Invariant Derived loop invariant: ((((((1 <= pumpRunning && tmp == systemActive) && methaneLevelCritical == 0) && tmp == 1) && splverifierCounter == 0) || ((((1 <= pumpRunning && tmp == systemActive) && tmp == 1) && methaneLevelCritical == 1) && splverifierCounter == 0)) || (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 1) && splverifierCounter == 0)) || (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && tmp == 1) && methaneLevelCritical == 1) && splverifierCounter == 0) - InvariantResult [Line: 771]: Loop Invariant Derived loop invariant: ((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && aux-isMethaneLevelCritical()-aux == methaneLevelCritical)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 1)) || 0 == systemActive) || (1 <= pumpRunning && aux-isMethaneLevelCritical()-aux == 1))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 142]: Loop Invariant Derived loop invariant: ((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 1) && waterLevel <= 1 - InvariantResult [Line: 1012]: Loop Invariant Derived loop invariant: ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 1)) || 0 == systemActive) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-11-03 01:41:05,581 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_42702972-cd13-498a-9f14-a5c1881358f9/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE