./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0552f986eafe304f33f56d4376c7c6a56e2d691e1035259c5c13e13b2a7157c1 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 02:11:03,964 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 02:11:03,967 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 02:11:04,001 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 02:11:04,001 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 02:11:04,003 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 02:11:04,005 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 02:11:04,007 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 02:11:04,009 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 02:11:04,010 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 02:11:04,012 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 02:11:04,013 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 02:11:04,014 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 02:11:04,015 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 02:11:04,017 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 02:11:04,018 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 02:11:04,020 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 02:11:04,021 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 02:11:04,024 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 02:11:04,027 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 02:11:04,029 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 02:11:04,031 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 02:11:04,032 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 02:11:04,033 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 02:11:04,038 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 02:11:04,039 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 02:11:04,039 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 02:11:04,041 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 02:11:04,042 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 02:11:04,043 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 02:11:04,043 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 02:11:04,045 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 02:11:04,046 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 02:11:04,047 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 02:11:04,048 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 02:11:04,048 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 02:11:04,050 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 02:11:04,050 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 02:11:04,050 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 02:11:04,052 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 02:11:04,053 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 02:11:04,054 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-03 02:11:04,084 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 02:11:04,084 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 02:11:04,085 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 02:11:04,085 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 02:11:04,086 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 02:11:04,087 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 02:11:04,087 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 02:11:04,087 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 02:11:04,088 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 02:11:04,088 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-03 02:11:04,088 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 02:11:04,089 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 02:11:04,089 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-03 02:11:04,089 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-03 02:11:04,090 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 02:11:04,090 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-03 02:11:04,091 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-03 02:11:04,091 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-03 02:11:04,092 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 02:11:04,092 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-03 02:11:04,092 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-03 02:11:04,093 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-03 02:11:04,093 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 02:11:04,093 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-03 02:11:04,093 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 02:11:04,094 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-03 02:11:04,094 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-03 02:11:04,094 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-03 02:11:04,095 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 02:11:04,095 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-03 02:11:04,095 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 02:11:04,095 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 02:11:04,096 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:11:04,096 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 02:11:04,096 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-03 02:11:04,097 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 02:11:04,097 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-03 02:11:04,097 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-03 02:11:04,097 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-03 02:11:04,098 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-03 02:11:04,098 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 02:11:04,098 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0552f986eafe304f33f56d4376c7c6a56e2d691e1035259c5c13e13b2a7157c1 [2022-11-03 02:11:04,407 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 02:11:04,436 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 02:11:04,440 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 02:11:04,441 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 02:11:04,443 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 02:11:04,444 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c [2022-11-03 02:11:04,543 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/data/44b09120d/305ae2feb6424af8a1b2cae010336463/FLAG1e8050065 [2022-11-03 02:11:05,343 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 02:11:05,344 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c [2022-11-03 02:11:05,367 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/data/44b09120d/305ae2feb6424af8a1b2cae010336463/FLAG1e8050065 [2022-11-03 02:11:05,603 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/data/44b09120d/305ae2feb6424af8a1b2cae010336463 [2022-11-03 02:11:05,607 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 02:11:05,610 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 02:11:05,617 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 02:11:05,618 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 02:11:05,623 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 02:11:05,624 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:11:05" (1/1) ... [2022-11-03 02:11:05,626 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5483db7c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:05, skipping insertion in model container [2022-11-03 02:11:05,629 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:11:05" (1/1) ... [2022-11-03 02:11:05,638 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 02:11:05,701 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 02:11:06,105 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c[15143,15156] [2022-11-03 02:11:06,132 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:11:06,144 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 02:11:06,219 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c[15143,15156] [2022-11-03 02:11:06,246 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:11:06,274 INFO L208 MainTranslator]: Completed translation [2022-11-03 02:11:06,274 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:06 WrapperNode [2022-11-03 02:11:06,275 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 02:11:06,276 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 02:11:06,277 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 02:11:06,277 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 02:11:06,286 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:06" (1/1) ... [2022-11-03 02:11:06,319 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:06" (1/1) ... [2022-11-03 02:11:06,376 INFO L138 Inliner]: procedures = 56, calls = 156, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 266 [2022-11-03 02:11:06,376 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 02:11:06,377 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 02:11:06,377 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 02:11:06,377 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 02:11:06,391 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:06" (1/1) ... [2022-11-03 02:11:06,391 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:06" (1/1) ... [2022-11-03 02:11:06,409 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:06" (1/1) ... [2022-11-03 02:11:06,409 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:06" (1/1) ... [2022-11-03 02:11:06,415 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:06" (1/1) ... [2022-11-03 02:11:06,420 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:06" (1/1) ... [2022-11-03 02:11:06,438 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:06" (1/1) ... [2022-11-03 02:11:06,440 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:06" (1/1) ... [2022-11-03 02:11:06,443 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 02:11:06,444 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 02:11:06,444 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 02:11:06,444 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 02:11:06,453 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:06" (1/1) ... [2022-11-03 02:11:06,462 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:11:06,476 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:11:06,497 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 02:11:06,522 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 02:11:06,563 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-03 02:11:06,563 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-03 02:11:06,563 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-03 02:11:06,564 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-03 02:11:06,564 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-03 02:11:06,564 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-03 02:11:06,565 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-03 02:11:06,565 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-03 02:11:06,566 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-03 02:11:06,566 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 02:11:06,566 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 02:11:06,566 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-03 02:11:06,567 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-03 02:11:06,567 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-03 02:11:06,567 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-03 02:11:06,568 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-03 02:11:06,568 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 02:11:06,569 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 02:11:06,676 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 02:11:06,678 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 02:11:07,122 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 02:11:07,438 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 02:11:07,439 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-03 02:11:07,442 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:11:07 BoogieIcfgContainer [2022-11-03 02:11:07,442 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 02:11:07,452 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 02:11:07,452 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 02:11:07,459 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 02:11:07,461 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 02:11:05" (1/3) ... [2022-11-03 02:11:07,462 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3ac78429 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:11:07, skipping insertion in model container [2022-11-03 02:11:07,462 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:06" (2/3) ... [2022-11-03 02:11:07,463 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3ac78429 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:11:07, skipping insertion in model container [2022-11-03 02:11:07,463 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:11:07" (3/3) ... [2022-11-03 02:11:07,467 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product50.cil.c [2022-11-03 02:11:07,494 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 02:11:07,494 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-03 02:11:07,576 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 02:11:07,586 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7c04df90, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 02:11:07,586 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-03 02:11:07,592 INFO L276 IsEmpty]: Start isEmpty. Operand has 56 states, 36 states have (on average 1.4444444444444444) internal successors, (52), 44 states have internal predecessors, (52), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-03 02:11:07,605 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-03 02:11:07,605 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:07,607 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:07,607 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:07,615 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:07,615 INFO L85 PathProgramCache]: Analyzing trace with hash 44590314, now seen corresponding path program 1 times [2022-11-03 02:11:07,629 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:11:07,630 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1748604655] [2022-11-03 02:11:07,630 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:07,631 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:11:07,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:08,020 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:11:08,021 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:11:08,023 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1748604655] [2022-11-03 02:11:08,024 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1748604655] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:08,024 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:08,025 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:11:08,027 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1841110625] [2022-11-03 02:11:08,028 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:08,035 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-03 02:11:08,037 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:11:08,083 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-03 02:11:08,085 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 02:11:08,088 INFO L87 Difference]: Start difference. First operand has 56 states, 36 states have (on average 1.4444444444444444) internal successors, (52), 44 states have internal predecessors, (52), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:11:08,195 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:08,196 INFO L93 Difference]: Finished difference Result 110 states and 149 transitions. [2022-11-03 02:11:08,198 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-03 02:11:08,199 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-11-03 02:11:08,200 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:08,212 INFO L225 Difference]: With dead ends: 110 [2022-11-03 02:11:08,213 INFO L226 Difference]: Without dead ends: 51 [2022-11-03 02:11:08,217 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 02:11:08,222 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 53 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:08,228 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 53 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:11:08,260 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51 states. [2022-11-03 02:11:08,308 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51. [2022-11-03 02:11:08,311 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 33 states have (on average 1.3333333333333333) internal successors, (44), 40 states have internal predecessors, (44), 11 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2022-11-03 02:11:08,320 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 65 transitions. [2022-11-03 02:11:08,323 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 65 transitions. Word has length 17 [2022-11-03 02:11:08,323 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:08,324 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 65 transitions. [2022-11-03 02:11:08,325 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:11:08,326 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 65 transitions. [2022-11-03 02:11:08,331 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-03 02:11:08,331 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:08,333 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:08,333 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-03 02:11:08,334 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:08,336 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:08,337 INFO L85 PathProgramCache]: Analyzing trace with hash 1997038865, now seen corresponding path program 1 times [2022-11-03 02:11:08,337 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:11:08,338 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [581330711] [2022-11-03 02:11:08,338 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:08,338 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:11:08,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:08,510 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:11:08,511 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:11:08,511 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [581330711] [2022-11-03 02:11:08,511 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [581330711] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:08,512 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:08,512 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:11:08,512 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1711926958] [2022-11-03 02:11:08,512 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:08,520 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:11:08,520 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:11:08,521 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:11:08,521 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:11:08,521 INFO L87 Difference]: Start difference. First operand 51 states and 65 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:11:08,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:08,619 INFO L93 Difference]: Finished difference Result 79 states and 101 transitions. [2022-11-03 02:11:08,621 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:11:08,621 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-11-03 02:11:08,623 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:08,627 INFO L225 Difference]: With dead ends: 79 [2022-11-03 02:11:08,628 INFO L226 Difference]: Without dead ends: 43 [2022-11-03 02:11:08,631 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:11:08,633 INFO L413 NwaCegarLoop]: 39 mSDtfsCounter, 7 mSDsluCounter, 42 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 69 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:08,634 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 69 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:11:08,635 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2022-11-03 02:11:08,641 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 43. [2022-11-03 02:11:08,642 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 28 states have (on average 1.3571428571428572) internal successors, (38), 35 states have internal predecessors, (38), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2022-11-03 02:11:08,655 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 54 transitions. [2022-11-03 02:11:08,655 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 54 transitions. Word has length 18 [2022-11-03 02:11:08,656 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:08,657 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 54 transitions. [2022-11-03 02:11:08,658 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:11:08,658 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 54 transitions. [2022-11-03 02:11:08,659 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-03 02:11:08,659 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:08,660 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:08,660 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-03 02:11:08,660 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:08,661 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:08,661 INFO L85 PathProgramCache]: Analyzing trace with hash -2026259861, now seen corresponding path program 1 times [2022-11-03 02:11:08,661 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:11:08,662 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1902641876] [2022-11-03 02:11:08,662 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:08,662 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:11:08,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:09,015 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:11:09,015 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:11:09,016 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1902641876] [2022-11-03 02:11:09,016 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1902641876] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:09,016 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:09,017 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:11:09,017 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1820499326] [2022-11-03 02:11:09,017 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:09,018 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:11:09,018 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:11:09,019 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:11:09,019 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:11:09,019 INFO L87 Difference]: Start difference. First operand 43 states and 54 transitions. Second operand has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:11:09,162 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:09,163 INFO L93 Difference]: Finished difference Result 84 states and 107 transitions. [2022-11-03 02:11:09,163 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 02:11:09,164 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2022-11-03 02:11:09,164 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:09,165 INFO L225 Difference]: With dead ends: 84 [2022-11-03 02:11:09,165 INFO L226 Difference]: Without dead ends: 43 [2022-11-03 02:11:09,166 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:11:09,168 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 44 mSDsluCounter, 26 mSDsCounter, 0 mSdLazyCounter, 44 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 48 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 44 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:09,169 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 49 Invalid, 48 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 44 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:11:09,170 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2022-11-03 02:11:09,178 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 43. [2022-11-03 02:11:09,179 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 28 states have (on average 1.3214285714285714) internal successors, (37), 35 states have internal predecessors, (37), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2022-11-03 02:11:09,180 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 53 transitions. [2022-11-03 02:11:09,180 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 53 transitions. Word has length 20 [2022-11-03 02:11:09,180 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:09,181 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 53 transitions. [2022-11-03 02:11:09,181 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:11:09,181 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 53 transitions. [2022-11-03 02:11:09,182 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-03 02:11:09,182 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:09,183 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:09,183 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-03 02:11:09,183 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:09,184 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:09,184 INFO L85 PathProgramCache]: Analyzing trace with hash 674423549, now seen corresponding path program 1 times [2022-11-03 02:11:09,184 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:11:09,185 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [703910566] [2022-11-03 02:11:09,185 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:09,185 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:11:09,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:09,292 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:11:09,293 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:11:09,293 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [703910566] [2022-11-03 02:11:09,293 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [703910566] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:09,294 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:09,294 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:11:09,294 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [798091533] [2022-11-03 02:11:09,294 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:09,295 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:11:09,295 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:11:09,296 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:11:09,296 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:11:09,296 INFO L87 Difference]: Start difference. First operand 43 states and 53 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:11:09,380 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:09,380 INFO L93 Difference]: Finished difference Result 119 states and 150 transitions. [2022-11-03 02:11:09,380 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:11:09,381 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-11-03 02:11:09,381 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:09,382 INFO L225 Difference]: With dead ends: 119 [2022-11-03 02:11:09,383 INFO L226 Difference]: Without dead ends: 78 [2022-11-03 02:11:09,384 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:11:09,385 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 35 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:09,386 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 87 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:11:09,387 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-11-03 02:11:09,404 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 76. [2022-11-03 02:11:09,405 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 51 states have (on average 1.2745098039215685) internal successors, (65), 58 states have internal predecessors, (65), 12 states have call successors, (12), 12 states have call predecessors, (12), 12 states have return successors, (16), 12 states have call predecessors, (16), 12 states have call successors, (16) [2022-11-03 02:11:09,406 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 93 transitions. [2022-11-03 02:11:09,406 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 93 transitions. Word has length 23 [2022-11-03 02:11:09,406 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:09,407 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 93 transitions. [2022-11-03 02:11:09,407 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:11:09,407 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 93 transitions. [2022-11-03 02:11:09,408 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-03 02:11:09,408 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:09,409 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:09,409 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-03 02:11:09,409 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:09,410 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:09,410 INFO L85 PathProgramCache]: Analyzing trace with hash -2050400496, now seen corresponding path program 1 times [2022-11-03 02:11:09,410 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:11:09,410 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2115713509] [2022-11-03 02:11:09,411 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:09,411 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:11:09,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:09,831 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:11:09,831 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:11:09,832 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2115713509] [2022-11-03 02:11:09,832 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2115713509] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:09,832 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:09,832 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-03 02:11:09,834 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1585162994] [2022-11-03 02:11:09,835 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:09,838 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-03 02:11:09,842 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:11:09,843 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-03 02:11:09,843 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-03 02:11:09,843 INFO L87 Difference]: Start difference. First operand 76 states and 93 transitions. Second operand has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 3 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-03 02:11:10,100 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:10,101 INFO L93 Difference]: Finished difference Result 224 states and 276 transitions. [2022-11-03 02:11:10,101 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-03 02:11:10,101 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 3 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 28 [2022-11-03 02:11:10,102 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:10,103 INFO L225 Difference]: With dead ends: 224 [2022-11-03 02:11:10,104 INFO L226 Difference]: Without dead ends: 150 [2022-11-03 02:11:10,105 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2022-11-03 02:11:10,106 INFO L413 NwaCegarLoop]: 64 mSDtfsCounter, 103 mSDsluCounter, 121 mSDsCounter, 0 mSdLazyCounter, 136 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 105 SdHoareTripleChecker+Valid, 164 SdHoareTripleChecker+Invalid, 159 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 136 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:10,107 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [105 Valid, 164 Invalid, 159 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 136 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 02:11:10,108 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2022-11-03 02:11:10,131 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 122. [2022-11-03 02:11:10,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 122 states, 83 states have (on average 1.2650602409638554) internal successors, (105), 91 states have internal predecessors, (105), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (24), 19 states have call predecessors, (24), 18 states have call successors, (24) [2022-11-03 02:11:10,133 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 122 states to 122 states and 147 transitions. [2022-11-03 02:11:10,134 INFO L78 Accepts]: Start accepts. Automaton has 122 states and 147 transitions. Word has length 28 [2022-11-03 02:11:10,134 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:10,134 INFO L495 AbstractCegarLoop]: Abstraction has 122 states and 147 transitions. [2022-11-03 02:11:10,135 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 3 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-03 02:11:10,135 INFO L276 IsEmpty]: Start isEmpty. Operand 122 states and 147 transitions. [2022-11-03 02:11:10,136 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-03 02:11:10,136 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:10,137 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:10,137 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-03 02:11:10,137 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:10,140 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:10,141 INFO L85 PathProgramCache]: Analyzing trace with hash -1862021105, now seen corresponding path program 1 times [2022-11-03 02:11:10,141 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:11:10,141 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [840406737] [2022-11-03 02:11:10,141 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:10,142 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:11:10,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:10,301 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:11:10,301 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:11:10,319 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [840406737] [2022-11-03 02:11:10,319 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [840406737] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:10,319 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:10,320 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:11:10,320 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [184642837] [2022-11-03 02:11:10,320 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:10,321 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:11:10,321 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:11:10,321 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:11:10,321 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:11:10,322 INFO L87 Difference]: Start difference. First operand 122 states and 147 transitions. Second operand has 4 states, 4 states have (on average 6.0) internal successors, (24), 4 states have internal predecessors, (24), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-03 02:11:10,437 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:10,438 INFO L93 Difference]: Finished difference Result 213 states and 259 transitions. [2022-11-03 02:11:10,438 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 02:11:10,439 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 6.0) internal successors, (24), 4 states have internal predecessors, (24), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 31 [2022-11-03 02:11:10,439 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:10,441 INFO L225 Difference]: With dead ends: 213 [2022-11-03 02:11:10,441 INFO L226 Difference]: Without dead ends: 126 [2022-11-03 02:11:10,442 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:11:10,443 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 37 mSDsluCounter, 109 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 138 SdHoareTripleChecker+Invalid, 63 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:10,444 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 138 Invalid, 63 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:11:10,445 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 126 states. [2022-11-03 02:11:10,466 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 126 to 122. [2022-11-03 02:11:10,467 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 122 states, 83 states have (on average 1.216867469879518) internal successors, (101), 91 states have internal predecessors, (101), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (21), 19 states have call predecessors, (21), 18 states have call successors, (21) [2022-11-03 02:11:10,468 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 122 states to 122 states and 140 transitions. [2022-11-03 02:11:10,469 INFO L78 Accepts]: Start accepts. Automaton has 122 states and 140 transitions. Word has length 31 [2022-11-03 02:11:10,469 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:10,469 INFO L495 AbstractCegarLoop]: Abstraction has 122 states and 140 transitions. [2022-11-03 02:11:10,469 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 6.0) internal successors, (24), 4 states have internal predecessors, (24), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-03 02:11:10,470 INFO L276 IsEmpty]: Start isEmpty. Operand 122 states and 140 transitions. [2022-11-03 02:11:10,471 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-03 02:11:10,471 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:10,471 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:10,472 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-03 02:11:10,472 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:10,473 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:10,473 INFO L85 PathProgramCache]: Analyzing trace with hash 1838330544, now seen corresponding path program 1 times [2022-11-03 02:11:10,473 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:11:10,473 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2092222654] [2022-11-03 02:11:10,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:10,474 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:11:10,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:10,692 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:11:10,692 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:11:10,693 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2092222654] [2022-11-03 02:11:10,693 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2092222654] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:10,693 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:10,693 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 02:11:10,694 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [29489714] [2022-11-03 02:11:10,694 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:10,694 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:11:10,695 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:11:10,695 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:11:10,696 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:11:10,696 INFO L87 Difference]: Start difference. First operand 122 states and 140 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-03 02:11:10,820 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:10,820 INFO L93 Difference]: Finished difference Result 245 states and 282 transitions. [2022-11-03 02:11:10,821 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 02:11:10,821 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 31 [2022-11-03 02:11:10,822 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:10,830 INFO L225 Difference]: With dead ends: 245 [2022-11-03 02:11:10,830 INFO L226 Difference]: Without dead ends: 125 [2022-11-03 02:11:10,832 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:11:10,838 INFO L413 NwaCegarLoop]: 50 mSDtfsCounter, 37 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 71 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 172 SdHoareTripleChecker+Invalid, 74 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 71 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:10,839 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 172 Invalid, 74 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 71 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:11:10,843 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 125 states. [2022-11-03 02:11:10,876 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 125 to 121. [2022-11-03 02:11:10,880 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 121 states, 82 states have (on average 1.1951219512195121) internal successors, (98), 90 states have internal predecessors, (98), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (21), 19 states have call predecessors, (21), 18 states have call successors, (21) [2022-11-03 02:11:10,883 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 121 states to 121 states and 137 transitions. [2022-11-03 02:11:10,884 INFO L78 Accepts]: Start accepts. Automaton has 121 states and 137 transitions. Word has length 31 [2022-11-03 02:11:10,886 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:10,886 INFO L495 AbstractCegarLoop]: Abstraction has 121 states and 137 transitions. [2022-11-03 02:11:10,886 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-03 02:11:10,887 INFO L276 IsEmpty]: Start isEmpty. Operand 121 states and 137 transitions. [2022-11-03 02:11:10,891 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-03 02:11:10,894 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:10,895 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:10,895 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-03 02:11:10,895 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:10,896 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:10,896 INFO L85 PathProgramCache]: Analyzing trace with hash 326511953, now seen corresponding path program 1 times [2022-11-03 02:11:10,897 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:11:10,897 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [594570601] [2022-11-03 02:11:10,897 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:10,897 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:11:10,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:11,556 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:11:11,557 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:11:11,557 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [594570601] [2022-11-03 02:11:11,559 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [594570601] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:11,561 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:11,562 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-03 02:11:11,562 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1684578193] [2022-11-03 02:11:11,562 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:11,563 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-03 02:11:11,563 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:11:11,564 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-03 02:11:11,565 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=62, Unknown=0, NotChecked=0, Total=90 [2022-11-03 02:11:11,565 INFO L87 Difference]: Start difference. First operand 121 states and 137 transitions. Second operand has 10 states, 9 states have (on average 2.7777777777777777) internal successors, (25), 9 states have internal predecessors, (25), 5 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-03 02:11:12,261 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:12,264 INFO L93 Difference]: Finished difference Result 356 states and 417 transitions. [2022-11-03 02:11:12,265 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-03 02:11:12,265 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 2.7777777777777777) internal successors, (25), 9 states have internal predecessors, (25), 5 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 34 [2022-11-03 02:11:12,266 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:12,269 INFO L225 Difference]: With dead ends: 356 [2022-11-03 02:11:12,269 INFO L226 Difference]: Without dead ends: 269 [2022-11-03 02:11:12,272 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 32 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=73, Invalid=167, Unknown=0, NotChecked=0, Total=240 [2022-11-03 02:11:12,274 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 253 mSDsluCounter, 169 mSDsCounter, 0 mSdLazyCounter, 294 mSolverCounterSat, 109 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 263 SdHoareTripleChecker+Valid, 201 SdHoareTripleChecker+Invalid, 403 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 109 IncrementalHoareTripleChecker+Valid, 294 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:12,277 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [263 Valid, 201 Invalid, 403 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [109 Valid, 294 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-03 02:11:12,279 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 269 states. [2022-11-03 02:11:12,339 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 269 to 225. [2022-11-03 02:11:12,340 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 225 states, 155 states have (on average 1.206451612903226) internal successors, (187), 168 states have internal predecessors, (187), 33 states have call successors, (33), 33 states have call predecessors, (33), 36 states have return successors, (39), 33 states have call predecessors, (39), 33 states have call successors, (39) [2022-11-03 02:11:12,342 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 225 states to 225 states and 259 transitions. [2022-11-03 02:11:12,343 INFO L78 Accepts]: Start accepts. Automaton has 225 states and 259 transitions. Word has length 34 [2022-11-03 02:11:12,343 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:12,343 INFO L495 AbstractCegarLoop]: Abstraction has 225 states and 259 transitions. [2022-11-03 02:11:12,344 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 2.7777777777777777) internal successors, (25), 9 states have internal predecessors, (25), 5 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-03 02:11:12,344 INFO L276 IsEmpty]: Start isEmpty. Operand 225 states and 259 transitions. [2022-11-03 02:11:12,349 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-03 02:11:12,349 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:12,350 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:12,350 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-03 02:11:12,351 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:12,351 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:12,351 INFO L85 PathProgramCache]: Analyzing trace with hash 1508820517, now seen corresponding path program 1 times [2022-11-03 02:11:12,352 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:11:12,352 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1413413417] [2022-11-03 02:11:12,352 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:12,352 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:11:12,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:12,546 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 15 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:11:12,547 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:11:12,547 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1413413417] [2022-11-03 02:11:12,547 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1413413417] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:11:12,547 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1274599968] [2022-11-03 02:11:12,548 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:12,548 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:11:12,548 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:11:12,552 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:11:12,574 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-03 02:11:12,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:12,703 INFO L263 TraceCheckSpWp]: Trace formula consists of 408 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-03 02:11:12,711 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:11:13,296 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 2 proven. 11 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:11:13,297 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:11:13,945 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 02:11:13,945 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1274599968] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:11:13,946 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1755262748] [2022-11-03 02:11:13,971 INFO L159 IcfgInterpreter]: Started Sifa with 35 locations of interest [2022-11-03 02:11:13,972 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:11:13,977 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:11:13,984 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:11:13,985 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:11:23,974 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 294 for LOIs [2022-11-03 02:11:24,044 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 53 for LOIs [2022-11-03 02:11:24,367 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 51 for LOIs [2022-11-03 02:11:24,464 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 25 for LOIs [2022-11-03 02:11:24,467 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:11:37,915 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1755262748] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:37,916 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:11:37,916 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [22] imperfect sequences [7, 9, 8] total 40 [2022-11-03 02:11:37,917 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1750827357] [2022-11-03 02:11:37,917 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:37,918 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-03 02:11:37,918 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:11:37,918 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-03 02:11:37,919 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=219, Invalid=1341, Unknown=0, NotChecked=0, Total=1560 [2022-11-03 02:11:37,919 INFO L87 Difference]: Start difference. First operand 225 states and 259 transitions. Second operand has 23 states, 19 states have (on average 1.5263157894736843) internal successors, (29), 19 states have internal predecessors, (29), 4 states have call successors, (4), 4 states have call predecessors, (4), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-03 02:11:53,397 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:53,398 INFO L93 Difference]: Finished difference Result 469 states and 546 transitions. [2022-11-03 02:11:53,401 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-03 02:11:53,401 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 19 states have (on average 1.5263157894736843) internal successors, (29), 19 states have internal predecessors, (29), 4 states have call successors, (4), 4 states have call predecessors, (4), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) Word has length 51 [2022-11-03 02:11:53,401 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:53,405 INFO L225 Difference]: With dead ends: 469 [2022-11-03 02:11:53,405 INFO L226 Difference]: Without dead ends: 306 [2022-11-03 02:11:53,407 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 167 GetRequests, 112 SyntacticMatches, 8 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 603 ImplicationChecksByTransitivity, 27.4s TimeCoverageRelationStatistics Valid=348, Invalid=2004, Unknown=0, NotChecked=0, Total=2352 [2022-11-03 02:11:53,408 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 105 mSDsluCounter, 308 mSDsCounter, 0 mSdLazyCounter, 709 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 106 SdHoareTripleChecker+Valid, 319 SdHoareTripleChecker+Invalid, 763 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 709 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:53,408 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [106 Valid, 319 Invalid, 763 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 709 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2022-11-03 02:11:53,409 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 306 states. [2022-11-03 02:11:53,487 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 306 to 281. [2022-11-03 02:11:53,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 281 states, 195 states have (on average 1.1897435897435897) internal successors, (232), 209 states have internal predecessors, (232), 41 states have call successors, (41), 41 states have call predecessors, (41), 44 states have return successors, (47), 40 states have call predecessors, (47), 41 states have call successors, (47) [2022-11-03 02:11:53,490 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 281 states to 281 states and 320 transitions. [2022-11-03 02:11:53,490 INFO L78 Accepts]: Start accepts. Automaton has 281 states and 320 transitions. Word has length 51 [2022-11-03 02:11:53,491 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:53,491 INFO L495 AbstractCegarLoop]: Abstraction has 281 states and 320 transitions. [2022-11-03 02:11:53,491 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 19 states have (on average 1.5263157894736843) internal successors, (29), 19 states have internal predecessors, (29), 4 states have call successors, (4), 4 states have call predecessors, (4), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-03 02:11:53,491 INFO L276 IsEmpty]: Start isEmpty. Operand 281 states and 320 transitions. [2022-11-03 02:11:53,492 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-03 02:11:53,493 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:53,493 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:53,544 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-03 02:11:53,709 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:11:53,710 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:53,710 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:53,710 INFO L85 PathProgramCache]: Analyzing trace with hash 1085177077, now seen corresponding path program 1 times [2022-11-03 02:11:53,711 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:11:53,711 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [34009524] [2022-11-03 02:11:53,711 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:53,711 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:11:53,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:54,201 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:11:54,201 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:11:54,218 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [34009524] [2022-11-03 02:11:54,218 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [34009524] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:54,218 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:54,218 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-03 02:11:54,219 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [308311241] [2022-11-03 02:11:54,219 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:54,221 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-03 02:11:54,221 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:11:54,221 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-03 02:11:54,222 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=67, Unknown=0, NotChecked=0, Total=90 [2022-11-03 02:11:54,222 INFO L87 Difference]: Start difference. First operand 281 states and 320 transitions. Second operand has 10 states, 9 states have (on average 4.444444444444445) internal successors, (40), 8 states have internal predecessors, (40), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-03 02:11:54,997 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:54,997 INFO L93 Difference]: Finished difference Result 485 states and 566 transitions. [2022-11-03 02:11:54,998 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-03 02:11:54,998 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 4.444444444444445) internal successors, (40), 8 states have internal predecessors, (40), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 52 [2022-11-03 02:11:54,998 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:55,003 INFO L225 Difference]: With dead ends: 485 [2022-11-03 02:11:55,004 INFO L226 Difference]: Without dead ends: 320 [2022-11-03 02:11:55,005 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=86, Invalid=220, Unknown=0, NotChecked=0, Total=306 [2022-11-03 02:11:55,006 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 175 mSDsluCounter, 143 mSDsCounter, 0 mSdLazyCounter, 361 mSolverCounterSat, 79 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 181 SdHoareTripleChecker+Valid, 159 SdHoareTripleChecker+Invalid, 440 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 79 IncrementalHoareTripleChecker+Valid, 361 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:55,008 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [181 Valid, 159 Invalid, 440 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [79 Valid, 361 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-03 02:11:55,010 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 320 states. [2022-11-03 02:11:55,108 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 320 to 281. [2022-11-03 02:11:55,108 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 281 states, 195 states have (on average 1.1794871794871795) internal successors, (230), 209 states have internal predecessors, (230), 41 states have call successors, (41), 41 states have call predecessors, (41), 44 states have return successors, (47), 40 states have call predecessors, (47), 41 states have call successors, (47) [2022-11-03 02:11:55,110 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 281 states to 281 states and 318 transitions. [2022-11-03 02:11:55,111 INFO L78 Accepts]: Start accepts. Automaton has 281 states and 318 transitions. Word has length 52 [2022-11-03 02:11:55,111 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:55,111 INFO L495 AbstractCegarLoop]: Abstraction has 281 states and 318 transitions. [2022-11-03 02:11:55,112 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 4.444444444444445) internal successors, (40), 8 states have internal predecessors, (40), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-03 02:11:55,112 INFO L276 IsEmpty]: Start isEmpty. Operand 281 states and 318 transitions. [2022-11-03 02:11:55,113 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-03 02:11:55,113 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:55,113 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:55,114 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-03 02:11:55,114 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:55,114 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:55,115 INFO L85 PathProgramCache]: Analyzing trace with hash 1476180048, now seen corresponding path program 1 times [2022-11-03 02:11:55,115 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:11:55,115 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [97319452] [2022-11-03 02:11:55,115 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:55,115 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:11:55,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:55,710 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 1 proven. 16 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:11:55,710 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:11:55,710 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [97319452] [2022-11-03 02:11:55,711 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [97319452] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:11:55,711 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1784820399] [2022-11-03 02:11:55,711 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:55,711 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:11:55,712 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:11:55,713 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:11:55,724 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-03 02:11:55,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:55,850 INFO L263 TraceCheckSpWp]: Trace formula consists of 428 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-03 02:11:55,853 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:11:56,009 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 18 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:11:56,009 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:11:56,249 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:11:56,249 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1784820399] provided 1 perfect and 1 imperfect interpolant sequences [2022-11-03 02:11:56,249 INFO L184 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-11-03 02:11:56,249 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14, 7] total 21 [2022-11-03 02:11:56,250 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1223216775] [2022-11-03 02:11:56,250 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:56,250 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-03 02:11:56,251 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:11:56,251 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-03 02:11:56,252 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=83, Invalid=337, Unknown=0, NotChecked=0, Total=420 [2022-11-03 02:11:56,252 INFO L87 Difference]: Start difference. First operand 281 states and 318 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 7 states have internal predecessors, (41), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-03 02:11:56,567 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:56,568 INFO L93 Difference]: Finished difference Result 555 states and 660 transitions. [2022-11-03 02:11:56,568 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:11:56,568 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 7 states have internal predecessors, (41), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) Word has length 53 [2022-11-03 02:11:56,569 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:56,572 INFO L225 Difference]: With dead ends: 555 [2022-11-03 02:11:56,572 INFO L226 Difference]: Without dead ends: 394 [2022-11-03 02:11:56,574 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 99 SyntacticMatches, 2 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 131 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=102, Invalid=404, Unknown=0, NotChecked=0, Total=506 [2022-11-03 02:11:56,574 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 156 mSDsluCounter, 128 mSDsCounter, 0 mSdLazyCounter, 113 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 156 SdHoareTripleChecker+Valid, 157 SdHoareTripleChecker+Invalid, 173 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 113 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:56,575 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [156 Valid, 157 Invalid, 173 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 113 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 02:11:56,576 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 394 states. [2022-11-03 02:11:56,681 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 394 to 348. [2022-11-03 02:11:56,682 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 348 states, 240 states have (on average 1.1625) internal successors, (279), 257 states have internal predecessors, (279), 51 states have call successors, (51), 51 states have call predecessors, (51), 56 states have return successors, (61), 50 states have call predecessors, (61), 51 states have call successors, (61) [2022-11-03 02:11:56,685 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 348 states to 348 states and 391 transitions. [2022-11-03 02:11:56,686 INFO L78 Accepts]: Start accepts. Automaton has 348 states and 391 transitions. Word has length 53 [2022-11-03 02:11:56,686 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:56,687 INFO L495 AbstractCegarLoop]: Abstraction has 348 states and 391 transitions. [2022-11-03 02:11:56,687 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 7 states have internal predecessors, (41), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-03 02:11:56,687 INFO L276 IsEmpty]: Start isEmpty. Operand 348 states and 391 transitions. [2022-11-03 02:11:56,689 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2022-11-03 02:11:56,689 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:56,690 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:56,740 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-03 02:11:56,910 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:11:56,911 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:56,911 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:56,911 INFO L85 PathProgramCache]: Analyzing trace with hash 1886032072, now seen corresponding path program 1 times [2022-11-03 02:11:56,911 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:11:56,911 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [157025703] [2022-11-03 02:11:56,912 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:56,912 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:11:56,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:57,091 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 39 proven. 1 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-03 02:11:57,092 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:11:57,092 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [157025703] [2022-11-03 02:11:57,092 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [157025703] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:11:57,092 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [453738307] [2022-11-03 02:11:57,093 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:57,093 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:11:57,093 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:11:57,094 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:11:57,110 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-03 02:11:57,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:57,251 INFO L263 TraceCheckSpWp]: Trace formula consists of 515 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-03 02:11:57,255 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:11:57,386 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-11-03 02:11:57,387 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:11:57,387 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [453738307] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:57,387 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 02:11:57,387 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [7] total 11 [2022-11-03 02:11:57,388 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [54155870] [2022-11-03 02:11:57,388 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:57,389 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:11:57,389 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:11:57,390 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:11:57,390 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2022-11-03 02:11:57,390 INFO L87 Difference]: Start difference. First operand 348 states and 391 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-03 02:11:57,653 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:57,653 INFO L93 Difference]: Finished difference Result 526 states and 604 transitions. [2022-11-03 02:11:57,653 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-03 02:11:57,654 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 84 [2022-11-03 02:11:57,658 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:57,659 INFO L225 Difference]: With dead ends: 526 [2022-11-03 02:11:57,659 INFO L226 Difference]: Without dead ends: 0 [2022-11-03 02:11:57,661 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2022-11-03 02:11:57,661 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 45 mSDsluCounter, 173 mSDsCounter, 0 mSdLazyCounter, 108 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 185 SdHoareTripleChecker+Invalid, 118 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 108 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:57,662 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 185 Invalid, 118 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:11:57,663 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-03 02:11:57,663 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-03 02:11:57,663 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:11:57,663 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-03 02:11:57,664 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 84 [2022-11-03 02:11:57,664 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:57,664 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-03 02:11:57,664 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-03 02:11:57,665 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-03 02:11:57,665 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-03 02:11:57,668 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-03 02:11:57,719 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-03 02:11:57,886 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-03 02:11:57,889 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-03 02:12:29,946 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 806 812) no Hoare annotation was computed. [2022-11-03 02:12:29,947 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 806 812) the Hoare annotation is: true [2022-11-03 02:12:29,947 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 486 497) the Hoare annotation is: true [2022-11-03 02:12:29,947 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 486 497) no Hoare annotation was computed. [2022-11-03 02:12:29,948 INFO L895 garLoopResultBuilder]: At program point L704(line 704) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 1)) .cse0 .cse1))) [2022-11-03 02:12:29,948 INFO L895 garLoopResultBuilder]: At program point L854(line 854) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 1)) (and (<= ~waterLevel~0 1) (= ~pumpRunning~0 1)) .cse0 .cse1))) [2022-11-03 02:12:29,949 INFO L895 garLoopResultBuilder]: At program point L429(lines 429 449) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (<= ~waterLevel~0 1)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse6 (and .cse4 .cse0 .cse7)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (= ~pumpRunning~0 1))) (and (or (not (= |old(~pumpRunning~0)| 1)) (and .cse0 .cse1) .cse2 .cse3 (and .cse4 .cse0)) (or .cse5 (not (= |#NULL.offset| 0)) (not (= 1 ~systemActive~0)) (not (= ~head~0.offset 0)) (and (<= |timeShift___utac_acc__Specification3_spec__1_~tmp~3#1| 0) (<= 0 |timeShift___utac_acc__Specification3_spec__1_~tmp~3#1|)) (not (= ~methaneLevelCritical~0 0)) (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) .cse2 .cse3 (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse6 .cse5 (not (< |old(~waterLevel~0)| 2)) .cse2) (or .cse6 .cse5 .cse2 .cse3 (and .cse7 .cse1))))) [2022-11-03 02:12:29,949 INFO L895 garLoopResultBuilder]: At program point L859(line 859) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 1)) .cse0 .cse1))) [2022-11-03 02:12:29,949 INFO L895 garLoopResultBuilder]: At program point L859-1(lines 840 864) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (<= ~waterLevel~0 1)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (and .cse4 .cse0 .cse7)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (= ~pumpRunning~0 1))) (and (or (not (= |old(~pumpRunning~0)| 1)) (and .cse0 .cse1) .cse2 .cse3 (and .cse4 .cse0)) (or .cse5 .cse6 (not (< |old(~waterLevel~0)| 2)) .cse2) (or .cse5 .cse6 .cse2 .cse3 (and .cse7 .cse1))))) [2022-11-03 02:12:29,950 INFO L899 garLoopResultBuilder]: For program point L793-1(lines 793 799) no Hoare annotation was computed. [2022-11-03 02:12:29,950 INFO L899 garLoopResultBuilder]: For program point L439(lines 439 445) no Hoare annotation was computed. [2022-11-03 02:12:29,950 INFO L895 garLoopResultBuilder]: At program point L435(lines 435 448) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1|)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1| 1)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (= ~pumpRunning~0 1)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and .cse3 .cse6 .cse4 .cse8)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= |#NULL.offset| 0)) (not (= 1 ~systemActive~0)) (not (= ~head~0.offset 0)) (not (= ~methaneLevelCritical~0 0)) (not (= |#NULL.base| 0)) (and (= |timeShift_getWaterLevel_~retValue_acc~4#1| ~waterLevel~0) (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1|) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~3#1| 0)) (not (<= 0 |#StackHeapBarrier|)) .cse1 .cse2 (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)) (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 1)) (and .cse3 .cse4 .cse5) .cse1 .cse2 (and .cse3 .cse6 .cse4)) (or .cse0 .cse7 (and (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1| 2) .cse8 (not .cse4) .cse5) .cse1 .cse2) (or .cse0 (not (< |old(~waterLevel~0)| 2)) .cse7 .cse1)))) [2022-11-03 02:12:29,951 INFO L895 garLoopResultBuilder]: At program point L435-1(lines 420 452) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= 0 ~systemActive~0)) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= ~pumpRunning~0 1)) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (and .cse1 .cse2) (not (< |old(~waterLevel~0)| 2)) .cse3) (let ((.cse4 (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 1)) (and .cse4 .cse5) .cse3 .cse6 (and .cse1 .cse4))) (or .cse0 (not (= |#NULL.offset| 0)) (not (= 1 ~systemActive~0)) (not (= ~head~0.offset 0)) (not (= ~methaneLevelCritical~0 0)) (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) .cse3 .cse6 (and (= |timeShift_getWaterLevel_~retValue_acc~4#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_getWaterLevel_~retValue_acc~4#1| ~waterLevel~0) (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1|) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~3#1| 0)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)) .cse7) (or .cse0 .cse3 .cse6 (and .cse2 .cse5) .cse7))) [2022-11-03 02:12:29,951 INFO L899 garLoopResultBuilder]: For program point L786-1(lines 785 804) no Hoare annotation was computed. [2022-11-03 02:12:29,952 INFO L895 garLoopResultBuilder]: At program point L848(lines 848 856) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 1)) (and (<= ~waterLevel~0 1) (= ~pumpRunning~0 1)) .cse0 .cse1))) [2022-11-03 02:12:29,952 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 782 805) the Hoare annotation is: (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 1)) .cse0 .cse1 (and .cse2 (= ~pumpRunning~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse2) .cse0 .cse1))) [2022-11-03 02:12:29,952 INFO L895 garLoopResultBuilder]: At program point L844(lines 844 861) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 1)) (and (<= ~waterLevel~0 1) (= ~pumpRunning~0 1)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1))) [2022-11-03 02:12:29,952 INFO L895 garLoopResultBuilder]: At program point L427(line 427) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (<= ~waterLevel~0 1)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (and .cse4 .cse0 .cse7)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (= ~pumpRunning~0 1))) (and (or (not (= |old(~pumpRunning~0)| 1)) (and .cse0 .cse1) .cse2 .cse3 (and .cse4 .cse0)) (or .cse5 .cse6 (not (< |old(~waterLevel~0)| 2)) .cse2) (or .cse5 .cse6 .cse2 .cse3 (and .cse7 .cse1))))) [2022-11-03 02:12:29,953 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 782 805) no Hoare annotation was computed. [2022-11-03 02:12:29,953 INFO L899 garLoopResultBuilder]: For program point L427-1(line 427) no Hoare annotation was computed. [2022-11-03 02:12:29,953 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 704) no Hoare annotation was computed. [2022-11-03 02:12:29,953 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 565 594) no Hoare annotation was computed. [2022-11-03 02:12:29,954 INFO L902 garLoopResultBuilder]: At program point L575-2(lines 575 589) the Hoare annotation is: true [2022-11-03 02:12:29,954 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 565 594) the Hoare annotation is: true [2022-11-03 02:12:29,954 INFO L902 garLoopResultBuilder]: At program point L571(line 571) the Hoare annotation is: true [2022-11-03 02:12:29,954 INFO L899 garLoopResultBuilder]: For program point L571-1(line 571) no Hoare annotation was computed. [2022-11-03 02:12:29,954 INFO L902 garLoopResultBuilder]: At program point L590(lines 565 594) the Hoare annotation is: true [2022-11-03 02:12:29,955 INFO L899 garLoopResultBuilder]: For program point L586(line 586) no Hoare annotation was computed. [2022-11-03 02:12:29,955 INFO L899 garLoopResultBuilder]: For program point L579(lines 579 583) no Hoare annotation was computed. [2022-11-03 02:12:29,955 INFO L902 garLoopResultBuilder]: At program point L579-1(lines 579 583) the Hoare annotation is: true [2022-11-03 02:12:29,955 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 498 506) the Hoare annotation is: true [2022-11-03 02:12:29,956 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 498 506) no Hoare annotation was computed. [2022-11-03 02:12:29,956 INFO L895 garLoopResultBuilder]: At program point L758-2(lines 750 763) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3))) [2022-11-03 02:12:29,956 INFO L899 garLoopResultBuilder]: For program point L721(lines 720 767) no Hoare annotation was computed. [2022-11-03 02:12:29,957 INFO L895 garLoopResultBuilder]: At program point L651(lines 651 658) the Hoare annotation is: (let ((.cse2 (select |#memory_int| 22)) (.cse9 (select |#memory_int| 28)) (.cse7 (select |#memory_int| 24)) (.cse4 (select |#memory_int| 26)) (.cse5 (select |#memory_int| 18)) (.cse6 (select |#memory_int| 23)) (.cse3 (select |#memory_int| 27)) (.cse0 (select |#memory_int| 19)) (.cse10 (select |#memory_int| 20)) (.cse11 (select |#memory_int| 1)) (.cse1 (select |#memory_int| 17)) (.cse8 (select |#memory_int| 25))) (and (= (select |#length| 15) 25) (= (select .cse0 0) 79) (= (select .cse1 6) 0) (= 9 (select |#length| 5)) (= (select |#length| 9) 21) (= 30 (select |#length| 7)) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= 2 (select |#length| 20)) (= (select |#valid| 15) 1) (= (select .cse2 0) 79) (= 5 (select |#length| 18)) (= ~pumpRunning~0 0) (= (select |#valid| 26) 1) (= (select .cse3 2) 0) (= (select .cse4 3) 0) (= (select |#valid| 9) 1) (= 13 (select |#length| 16)) (= (select |#length| 12) 25) (= (select .cse5 2) 73) (= (select |#length| 28) 2) (= (select |#valid| 11) 1) (= (select |#valid| 27) 1) (= ~methaneLevelCritical~0 0) (= 30 (select |#length| 4)) (= (select |#length| 22) 3) (= 4 (select |#length| 26)) (= 102 (select .cse6 1)) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= (select |#length| 21) 13) (= (select |#length| 27) 3) (= 2 (select |#length| 1)) (= (select |#length| 8) 9) (= 84 (select .cse5 3)) (= 41 (select .cse3 0)) (= (select |#valid| 3) 1) (= (select |#length| 19) 3) (= (select |#valid| 7) 1) (= (select |#valid| 18) 1) (= (select |#valid| 22) 1) (= 30 (select |#length| 13)) (= 117 (select .cse7 2)) (= (select |#valid| 24) 1) (= 30 (select |#length| 10)) (= (select .cse0 2) 0) (= 3 (select |#length| 25)) (= |ULTIMATE.start_main_~tmp~4#1| 1) (= (select |#valid| 12) 1) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_main_~tmp~4#1|) (= 82 (select .cse5 1)) (= (select .cse8 1) 110) (= (select |#valid| 28) 1) (= (select .cse8 2) 0) (= 102 (select .cse6 2)) (= (select .cse9 1) 0) (= (select |#valid| 4) 1) (= (select .cse2 2) 0) (= (select |#valid| 1) 1) (= (select |#valid| 20) 1) (= (select |#length| 6) 21) (= (select |#valid| 21) 1) (= 7 (select |#length| 24)) (= 58 (select .cse7 5)) (= (select .cse7 1) 80) (= (select .cse4 2) 102) (= (select .cse7 6) 0) (= (select .cse5 4) 0) (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0) (= (select |#valid| 14) 1) (= 109 (select .cse7 3)) (= 77 (select .cse1 1)) (= 110 (select .cse2 1)) (= 9 (select |#length| 14)) (= (select .cse1 4) 104) (= (select |#valid| 0) 0) (= 79 (select .cse4 0)) (= (select .cse9 0) 10) (= (select |#valid| 25) 1) (= ~head~0.base 0) (= 112 (select .cse7 4)) (= (select .cse6 3) 0) (= 116 (select .cse1 3)) (= (select |#valid| 2) 1) (= (select .cse10 0) 41) (= |#NULL.offset| 0) (= 9 (select |#length| 11)) (= 44 (select .cse7 0)) (= ~waterLevel~0 1) (= (select .cse4 1) 102) (= (select .cse11 0) 48) (= 67 (select .cse5 0)) (= (select |#valid| 23) 1) (= 4 (select |#length| 23)) (= (select .cse6 0) 79) (= (select .cse3 1) 32) (= 101 (select .cse1 2)) (= (select |#valid| 19) 1) (= (select .cse0 1) 75) (= (select .cse10 1) 0) (= 44 (select .cse1 0)) (= (select |#valid| 16) 1) (= (select |#valid| 6) 1) (= |ULTIMATE.start_valid_product_~retValue_acc~9#1| |ULTIMATE.start_valid_product_#res#1|) (= (select .cse11 1) 0) (= (select |#length| 17) 7) (= (select |#valid| 17) 1) (= (select |#valid| 10) 1) (= (select |#valid| 8) 1) (= (select .cse1 5) 58) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0) (= (select .cse8 0) 79))) [2022-11-03 02:12:29,957 INFO L902 garLoopResultBuilder]: At program point L651-2(lines 651 658) the Hoare annotation is: true [2022-11-03 02:12:29,958 INFO L895 garLoopResultBuilder]: At program point L742(line 742) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3))) [2022-11-03 02:12:29,958 INFO L902 garLoopResultBuilder]: At program point L771(lines 710 775) the Hoare annotation is: true [2022-11-03 02:12:29,958 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-03 02:12:29,958 INFO L899 garLoopResultBuilder]: For program point L730(lines 730 736) no Hoare annotation was computed. [2022-11-03 02:12:29,958 INFO L899 garLoopResultBuilder]: For program point L730-1(lines 730 736) no Hoare annotation was computed. [2022-11-03 02:12:29,958 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-03 02:12:29,959 INFO L895 garLoopResultBuilder]: At program point L768(lines 719 769) the Hoare annotation is: false [2022-11-03 02:12:29,959 INFO L899 garLoopResultBuilder]: For program point L740(lines 740 746) no Hoare annotation was computed. [2022-11-03 02:12:29,959 INFO L895 garLoopResultBuilder]: At program point L740-1(lines 740 746) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3))) [2022-11-03 02:12:29,959 INFO L895 garLoopResultBuilder]: At program point L765(lines 720 767) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and .cse0 .cse1 (<= ~waterLevel~0 2) .cse2 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) .cse0 .cse1 .cse2))) [2022-11-03 02:12:29,959 INFO L895 garLoopResultBuilder]: At program point L732(line 732) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3))) [2022-11-03 02:12:29,959 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 814 838) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0))) [2022-11-03 02:12:29,962 INFO L895 garLoopResultBuilder]: At program point L828(line 828) the Hoare annotation is: (let ((.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse13 (<= ~waterLevel~0 1)) (.cse14 (= 0 ~systemActive~0))) (and (let ((.cse6 (select |#memory_int| 1)) (.cse4 (select |#memory_int| 27)) (.cse2 (select |#memory_int| 19)) (.cse8 (select |#memory_int| 18)) (.cse12 (select |#memory_int| 23)) (.cse11 (select |#memory_int| 25)) (.cse9 (select |#memory_int| 20)) (.cse0 (select |#memory_int| 26)) (.cse7 (select |#memory_int| 22)) (.cse10 (select |#memory_int| 17)) (.cse1 (select |#memory_int| 24)) (.cse3 (select |#memory_int| 28))) (or (not (= (select .cse0 2) 102)) (not (= ~waterLevel~0 1)) (not (= (select |#valid| 23) 1)) (not (= (select .cse1 1) 80)) (not (= (select .cse2 1) 75)) (not (= (select .cse3 0) 10)) (not (= (select |#length| 12) 25)) (not (= (select .cse4 1) 32)) .cse5 (not (= (select .cse6 0) 48)) (not (= (select .cse7 0) 79)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= 2 (select |#length| 20))) (not (= (select |#valid| 26) 1)) (not (= (select |#length| 27) 3)) (not (= 67 (select .cse8 0))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 3 (select |#length| 25))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= (select .cse8 2) 73)) (not (= (select |#length| 17) 7)) (not (= 2 (select |#length| 1))) (not (= 4 (select |#length| 26))) (not (= (select .cse9 0) 41)) (not (= (select .cse8 4) 0)) (not (= (select |#length| 21) 13)) (not (= 9 (select |#length| 14))) (not (= 1 ~systemActive~0)) (not (= (select |#length| 15) 25)) (not (= 84 (select .cse8 3))) (not (= 77 (select .cse10 1))) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select .cse11 1) 110)) (not (= (select .cse10 6) 0)) (not (= (select .cse0 1) 102)) (not (= (select |#valid| 3) 1)) (not (= 110 (select .cse7 1))) (not (= (select |#valid| 25) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 20) 1)) (not (= (select |#valid| 21) 1)) (not (= (select |#valid| 11) 1)) (not (= (select |#valid| 16) 1)) (not (= 7 (select |#length| 24))) (not (= (select .cse10 5) 58)) (not (= (select |#valid| 28) 1)) (not (= (select |#length| 19) 3)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= ~methaneLevelCritical~0 0)) (not (= (select |#valid| 27) 1)) (not (= (select .cse6 1) 0)) (not (= (select |#valid| 24) 1)) (not (= (select .cse1 6) 0)) (not (= (select |#valid| 19) 1)) (not (= (select |#length| 28) 2)) (not (= (select .cse12 3) 0)) (not (= (select |#valid| 1) 1)) (not (= (select .cse10 4) 104)) (not (= (select |#valid| 22) 1)) (not (= 102 (select .cse12 2))) (not (= (select .cse2 0) 79)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~5#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~12#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~12#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~5#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (not (= 13 (select |#length| 16))) (not (= (select |#valid| 8) 1)) (not (= 44 (select .cse1 0))) (not (= 41 (select .cse4 0))) (not (= 58 (select .cse1 5))) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= (select .cse4 2) 0)) (not (= |#NULL.base| 0)) (not (= 5 (select |#length| 18))) (not (= (select |#length| 22) 3)) (not (= (select .cse0 3) 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= 4 (select |#length| 23))) (not (= (select .cse11 0) 79)) (not (= (select |#valid| 14) 1)) (not (= 101 (select .cse10 2))) (not (= (select .cse2 2) 0)) (not (= 82 (select .cse8 1))) (not (= (select .cse12 0) 79)) (not (= (select |#valid| 13) 1)) (not (= 102 (select .cse12 1))) (not (= 117 (select .cse1 2))) (not (= (select .cse11 2) 0)) (not (= 116 (select .cse10 3))) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (not (= (select .cse9 1) 0)) (not (= 79 (select .cse0 0))) (not (= (select |#valid| 17) 1)) (not (= (select |#valid| 9) 1)) (not (= (select .cse7 2) 0)) (not (= 44 (select .cse10 0))) (not (= 112 (select .cse1 4))) (not (= ~head~0.base 0)) (not (= 109 (select .cse1 3))) (not (= (select .cse3 1) 0)) (not (= ~cleanupTimeShifts~0 4)) (not (= (select |#valid| 18) 1)))) (or .cse5 (and (= ~pumpRunning~0 0) .cse13 (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)) (not (<= ~waterLevel~0 2)) .cse14) (or (not (= |old(~pumpRunning~0)| 1)) (not .cse13) .cse14))) [2022-11-03 02:12:29,964 INFO L895 garLoopResultBuilder]: At program point L822(lines 822 830) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 1))) (let ((.cse1 (not (<= ~waterLevel~0 2))) (.cse8 (not (= |#NULL.offset| 0))) (.cse9 (not (= 1 ~systemActive~0))) (.cse10 (not (= ~head~0.offset 0))) (.cse11 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~12#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|)) (.cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~12#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (.cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~5#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)) (.cse7 (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (.cse12 (not (= |#NULL.base| 0))) (.cse13 (not (= ~head~0.base 0))) (.cse14 (not (= ~cleanupTimeShifts~0 4))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse27 (not .cse3)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (and (= ~pumpRunning~0 0) (or .cse3 (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 1)))) (or (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0) .cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~5#1| 0) .cse5 .cse6 .cse7) .cse0 .cse8 .cse9 .cse10 (not (<= 2 ~waterLevel~0)) .cse11 .cse1 .cse12 (not (<= 0 |#StackHeapBarrier|)) .cse13 .cse14) (let ((.cse20 (select |#memory_int| 1)) (.cse19 (select |#memory_int| 27)) (.cse17 (select |#memory_int| 19)) (.cse22 (select |#memory_int| 18)) (.cse26 (select |#memory_int| 23)) (.cse25 (select |#memory_int| 25)) (.cse23 (select |#memory_int| 20)) (.cse15 (select |#memory_int| 26)) (.cse21 (select |#memory_int| 22)) (.cse24 (select |#memory_int| 17)) (.cse16 (select |#memory_int| 24)) (.cse18 (select |#memory_int| 28))) (or (not (= (select .cse15 2) 102)) (not (= ~waterLevel~0 1)) (not (= (select |#valid| 23) 1)) (not (= (select .cse16 1) 80)) (not (= (select .cse17 1) 75)) (not (= (select .cse18 0) 10)) (not (= (select |#length| 12) 25)) (not (= (select .cse19 1) 32)) .cse0 (not (= (select .cse20 0) 48)) (not (= (select .cse21 0) 79)) .cse8 (not (= 9 (select |#length| 11))) (not (= 2 (select |#length| 20))) (not (= (select |#valid| 26) 1)) (not (= (select |#length| 27) 3)) (not (= 67 (select .cse22 0))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 3 (select |#length| 25))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= (select .cse22 2) 73)) (not (= (select |#length| 17) 7)) (not (= 2 (select |#length| 1))) (not (= 4 (select |#length| 26))) (not (= (select .cse23 0) 41)) (not (= (select .cse22 4) 0)) (not (= (select |#length| 21) 13)) (not (= 9 (select |#length| 14))) .cse9 (not (= (select |#length| 15) 25)) (not (= 84 (select .cse22 3))) (not (= 77 (select .cse24 1))) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select .cse25 1) 110)) (not (= (select .cse24 6) 0)) (not (= (select .cse15 1) 102)) (not (= (select |#valid| 3) 1)) (not (= 110 (select .cse21 1))) (not (= (select |#valid| 25) 1)) .cse10 (not (= (select |#valid| 20) 1)) (not (= (select |#valid| 21) 1)) (not (= (select |#valid| 11) 1)) (not (= (select |#valid| 16) 1)) (not (= 7 (select |#length| 24))) (not (= (select .cse24 5) 58)) (not (= (select |#valid| 28) 1)) (not (= (select |#length| 19) 3)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse11 (not (= (select |#valid| 27) 1)) (not (= (select .cse20 1) 0)) (not (= (select |#valid| 24) 1)) (not (= (select .cse16 6) 0)) (not (= (select |#valid| 19) 1)) (not (= (select |#length| 28) 2)) (not (= (select .cse26 3) 0)) (not (= (select |#valid| 1) 1)) (not (= (select .cse24 4) 104)) (not (= (select |#valid| 22) 1)) (not (= 102 (select .cse26 2))) (not (= (select .cse17 0) 79)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~5#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1|) .cse4 .cse5 .cse6 .cse7) (not (= 13 (select |#length| 16))) (not (= (select |#valid| 8) 1)) (not (= 44 (select .cse16 0))) (not (= 41 (select .cse19 0))) (not (= 58 (select .cse16 5))) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= (select .cse19 2) 0)) .cse12 (not (= 5 (select |#length| 18))) (not (= (select |#length| 22) 3)) (not (= (select .cse15 3) 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= 4 (select |#length| 23))) (not (= (select .cse25 0) 79)) (not (= (select |#valid| 14) 1)) (not (= 101 (select .cse24 2))) (not (= (select .cse17 2) 0)) (not (= 82 (select .cse22 1))) (not (= (select .cse26 0) 79)) (not (= (select |#valid| 13) 1)) (not (= 102 (select .cse26 1))) (not (= 117 (select .cse16 2))) (not (= (select .cse25 2) 0)) (not (= 116 (select .cse24 3))) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (not (= (select .cse23 1) 0)) (not (= 79 (select .cse15 0))) (not (= (select |#valid| 17) 1)) (not (= (select |#valid| 9) 1)) (not (= (select .cse21 2) 0)) (not (= 44 (select .cse24 0))) (not (= 112 (select .cse16 4))) .cse13 (not (= 109 (select .cse16 3))) (not (= (select .cse18 1) 0)) .cse14 (not (= (select |#valid| 18) 1)))) (or (not (= |old(~pumpRunning~0)| 1)) .cse27 .cse2) (or .cse0 (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0) .cse27 .cse2)))) [2022-11-03 02:12:29,965 INFO L895 garLoopResultBuilder]: At program point L818(lines 818 835) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0))) [2022-11-03 02:12:29,965 INFO L895 garLoopResultBuilder]: At program point L833(line 833) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0))) [2022-11-03 02:12:29,965 INFO L899 garLoopResultBuilder]: For program point L833-1(lines 814 838) no Hoare annotation was computed. [2022-11-03 02:12:29,965 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 814 838) no Hoare annotation was computed. [2022-11-03 02:12:29,966 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 474 485) no Hoare annotation was computed. [2022-11-03 02:12:29,966 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 474 485) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse2) (or (not (= ~pumpRunning~0 1)) .cse0 .cse1 .cse2))) [2022-11-03 02:12:29,970 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:12:29,973 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-03 02:12:30,059 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 03.11 02:12:30 BoogieIcfgContainer [2022-11-03 02:12:30,071 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-03 02:12:30,072 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-03 02:12:30,072 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-03 02:12:30,073 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-03 02:12:30,073 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:11:07" (3/4) ... [2022-11-03 02:12:30,077 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-03 02:12:30,089 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-03 02:12:30,090 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-03 02:12:30,090 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-03 02:12:30,090 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-03 02:12:30,090 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-03 02:12:30,091 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 02:12:30,091 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-03 02:12:30,104 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 76 nodes and edges [2022-11-03 02:12:30,107 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 27 nodes and edges [2022-11-03 02:12:30,108 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2022-11-03 02:12:30,109 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-03 02:12:30,110 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-03 02:12:30,111 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 02:12:30,112 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 02:12:30,149 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && unknown-#memory_int-unknown[19][0] == 79) && unknown-#memory_int-unknown[17][6] == 0) && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && 2 == unknown-#length-unknown[20]) && \valid[15] == 1) && unknown-#memory_int-unknown[22][0] == 79) && 5 == unknown-#length-unknown[18]) && pumpRunning == 0) && \valid[26] == 1) && unknown-#memory_int-unknown[27][2] == 0) && unknown-#memory_int-unknown[26][3] == 0) && \valid[9] == 1) && 13 == unknown-#length-unknown[16]) && unknown-#length-unknown[12] == 25) && unknown-#memory_int-unknown[18][2] == 73) && unknown-#length-unknown[28] == 2) && \valid[11] == 1) && \valid[27] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && unknown-#length-unknown[22] == 3) && 4 == unknown-#length-unknown[26]) && 102 == unknown-#memory_int-unknown[23][1]) && 31 == unknown-#length-unknown[2]) && head == 0) && unknown-#length-unknown[21] == 13) && unknown-#length-unknown[27] == 3) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && 84 == unknown-#memory_int-unknown[18][3]) && 41 == unknown-#memory_int-unknown[27][0]) && \valid[3] == 1) && unknown-#length-unknown[19] == 3) && \valid[7] == 1) && \valid[18] == 1) && \valid[22] == 1) && 30 == unknown-#length-unknown[13]) && 117 == unknown-#memory_int-unknown[24][2]) && \valid[24] == 1) && 30 == unknown-#length-unknown[10]) && unknown-#memory_int-unknown[19][2] == 0) && 3 == unknown-#length-unknown[25]) && tmp == 1) && \valid[12] == 1) && \result == tmp) && 82 == unknown-#memory_int-unknown[18][1]) && unknown-#memory_int-unknown[25][1] == 110) && \valid[28] == 1) && unknown-#memory_int-unknown[25][2] == 0) && 102 == unknown-#memory_int-unknown[23][2]) && unknown-#memory_int-unknown[28][1] == 0) && \valid[4] == 1) && unknown-#memory_int-unknown[22][2] == 0) && \valid[1] == 1) && \valid[20] == 1) && unknown-#length-unknown[6] == 21) && \valid[21] == 1) && 7 == unknown-#length-unknown[24]) && 58 == unknown-#memory_int-unknown[24][5]) && unknown-#memory_int-unknown[24][1] == 80) && unknown-#memory_int-unknown[26][2] == 102) && unknown-#memory_int-unknown[24][6] == 0) && unknown-#memory_int-unknown[18][4] == 0) && tmp == systemActive) && \valid[14] == 1) && 109 == unknown-#memory_int-unknown[24][3]) && 77 == unknown-#memory_int-unknown[17][1]) && 110 == unknown-#memory_int-unknown[22][1]) && 9 == unknown-#length-unknown[14]) && unknown-#memory_int-unknown[17][4] == 104) && \valid[0] == 0) && 79 == unknown-#memory_int-unknown[26][0]) && unknown-#memory_int-unknown[28][0] == 10) && \valid[25] == 1) && head == 0) && 112 == unknown-#memory_int-unknown[24][4]) && unknown-#memory_int-unknown[23][3] == 0) && 116 == unknown-#memory_int-unknown[17][3]) && \valid[2] == 1) && unknown-#memory_int-unknown[20][0] == 41) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && 44 == unknown-#memory_int-unknown[24][0]) && waterLevel == 1) && unknown-#memory_int-unknown[26][1] == 102) && unknown-#memory_int-unknown[1][0] == 48) && 67 == unknown-#memory_int-unknown[18][0]) && \valid[23] == 1) && 4 == unknown-#length-unknown[23]) && unknown-#memory_int-unknown[23][0] == 79) && unknown-#memory_int-unknown[27][1] == 32) && 101 == unknown-#memory_int-unknown[17][2]) && \valid[19] == 1) && unknown-#memory_int-unknown[19][1] == 75) && unknown-#memory_int-unknown[20][1] == 0) && 44 == unknown-#memory_int-unknown[17][0]) && \valid[16] == 1) && \valid[6] == 1) && retValue_acc == \result) && unknown-#memory_int-unknown[1][1] == 0) && unknown-#length-unknown[17] == 7) && \valid[17] == 1) && \valid[10] == 1) && \valid[8] == 1) && unknown-#memory_int-unknown[17][5] == 58) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0) && unknown-#memory_int-unknown[25][0] == 79 [2022-11-03 02:12:30,150 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 1) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-11-03 02:12:30,153 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 1) || (waterLevel <= 1 && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-11-03 02:12:30,153 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 1) || (waterLevel <= 1 && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && waterLevel <= 1)) && (((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) < 2)) || 0 == systemActive)) && ((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) [2022-11-03 02:12:30,153 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 1) || !(waterLevel <= 1)) || 0 == systemActive) || pumpRunning == 1) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(waterLevel <= 2)) || 0 == systemActive) [2022-11-03 02:12:30,155 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 1) || (waterLevel <= 1 && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && waterLevel <= 1)) && ((((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || !(1 == systemActive)) || !(head == 0)) || (tmp <= 0 && 0 <= tmp)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && (((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) < 2)) || 0 == systemActive)) && ((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) [2022-11-03 02:12:30,156 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) < 2)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 1) || (waterLevel <= 1 && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && waterLevel <= 1))) && ((((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((retValue_acc == \result && retValue_acc == waterLevel) && \result == tmp___0) && tmp == 0)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel))) [2022-11-03 02:12:30,157 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || ((retValue_acc == waterLevel && \result == tmp___0) && tmp == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 1) || ((waterLevel <= tmp___0 && tmp___0 <= 1) && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((waterLevel <= tmp___0 && pumpRunning == 0) && tmp___0 <= 1))) && ((((!(\old(pumpRunning) == 0) || (((waterLevel <= tmp___0 && pumpRunning == 0) && tmp___0 <= 1) && \old(waterLevel) == waterLevel)) || (((tmp___0 <= 2 && \old(waterLevel) == waterLevel) && !(tmp___0 <= 1)) && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) < 2)) || (((waterLevel <= tmp___0 && pumpRunning == 0) && tmp___0 <= 1) && \old(waterLevel) == waterLevel)) || 0 == systemActive) [2022-11-03 02:12:30,157 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 1) || (waterLevel <= 1 && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-11-03 02:12:30,160 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 1) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-11-03 02:12:30,161 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || 0 == systemActive) || (pumpRunning == 0 && (waterLevel <= 1 || tmp == 1))) && ((((((((((((((((tmp == 0 && retValue_acc == tmp___0) && retValue_acc == 0) && retValue_acc == \result) && retValue_acc == \result) && tmp == \result) || !(\old(pumpRunning) == 0)) || !(#NULL == 0)) || !(1 == systemActive)) || !(head == 0)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[26][2] == 102) || !(waterLevel == 1)) || !(\valid[23] == 1)) || !(unknown-#memory_int-unknown[24][1] == 80)) || !(unknown-#memory_int-unknown[19][1] == 75)) || !(unknown-#memory_int-unknown[28][0] == 10)) || !(unknown-#length-unknown[12] == 25)) || !(unknown-#memory_int-unknown[27][1] == 32)) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(unknown-#memory_int-unknown[22][0] == 79)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(2 == unknown-#length-unknown[20])) || !(\valid[26] == 1)) || !(unknown-#length-unknown[27] == 3)) || !(67 == unknown-#memory_int-unknown[18][0])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(3 == unknown-#length-unknown[25])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[18][2] == 73)) || !(unknown-#length-unknown[17] == 7)) || !(2 == unknown-#length-unknown[1])) || !(4 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[20][0] == 41)) || !(unknown-#memory_int-unknown[18][4] == 0)) || !(unknown-#length-unknown[21] == 13)) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(84 == unknown-#memory_int-unknown[18][3])) || !(77 == unknown-#memory_int-unknown[17][1])) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[25][1] == 110)) || !(unknown-#memory_int-unknown[17][6] == 0)) || !(unknown-#memory_int-unknown[26][1] == 102)) || !(\valid[3] == 1)) || !(110 == unknown-#memory_int-unknown[22][1])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(\valid[16] == 1)) || !(7 == unknown-#length-unknown[24])) || !(unknown-#memory_int-unknown[17][5] == 58)) || !(\valid[28] == 1)) || !(unknown-#length-unknown[19] == 3)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[24][6] == 0)) || !(\valid[19] == 1)) || !(unknown-#length-unknown[28] == 2)) || !(unknown-#memory_int-unknown[23][3] == 0)) || !(\valid[1] == 1)) || !(unknown-#memory_int-unknown[17][4] == 104)) || !(\valid[22] == 1)) || !(102 == unknown-#memory_int-unknown[23][2])) || !(unknown-#memory_int-unknown[19][0] == 79)) || (((((retValue_acc == 1 && \result == tmp) && retValue_acc == tmp___0) && retValue_acc == \result) && retValue_acc == \result) && tmp == \result)) || !(13 == unknown-#length-unknown[16])) || !(\valid[8] == 1)) || !(44 == unknown-#memory_int-unknown[24][0])) || !(41 == unknown-#memory_int-unknown[27][0])) || !(58 == unknown-#memory_int-unknown[24][5])) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(unknown-#memory_int-unknown[27][2] == 0)) || !(#NULL == 0)) || !(5 == unknown-#length-unknown[18])) || !(unknown-#length-unknown[22] == 3)) || !(unknown-#memory_int-unknown[26][3] == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(4 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[25][0] == 79)) || !(\valid[14] == 1)) || !(101 == unknown-#memory_int-unknown[17][2])) || !(unknown-#memory_int-unknown[19][2] == 0)) || !(82 == unknown-#memory_int-unknown[18][1])) || !(unknown-#memory_int-unknown[23][0] == 79)) || !(\valid[13] == 1)) || !(102 == unknown-#memory_int-unknown[23][1])) || !(117 == unknown-#memory_int-unknown[24][2])) || !(unknown-#memory_int-unknown[25][2] == 0)) || !(116 == unknown-#memory_int-unknown[17][3])) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(unknown-#memory_int-unknown[20][1] == 0)) || !(79 == unknown-#memory_int-unknown[26][0])) || !(\valid[17] == 1)) || !(\valid[9] == 1)) || !(unknown-#memory_int-unknown[22][2] == 0)) || !(44 == unknown-#memory_int-unknown[17][0])) || !(112 == unknown-#memory_int-unknown[24][4])) || !(head == 0)) || !(109 == unknown-#memory_int-unknown[24][3])) || !(unknown-#memory_int-unknown[28][1] == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1))) && ((!(\old(pumpRunning) == 1) || !(waterLevel <= 1)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || tmp == 0) || !(waterLevel <= 1)) || 0 == systemActive) [2022-11-03 02:12:30,223 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/witness.graphml [2022-11-03 02:12:30,223 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-03 02:12:30,224 INFO L158 Benchmark]: Toolchain (without parser) took 84613.41ms. Allocated memory was 109.1MB in the beginning and 394.3MB in the end (delta: 285.2MB). Free memory was 75.6MB in the beginning and 265.3MB in the end (delta: -189.7MB). Peak memory consumption was 95.1MB. Max. memory is 16.1GB. [2022-11-03 02:12:30,225 INFO L158 Benchmark]: CDTParser took 0.37ms. Allocated memory is still 79.7MB. Free memory is still 35.7MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 02:12:30,225 INFO L158 Benchmark]: CACSL2BoogieTranslator took 657.80ms. Allocated memory is still 109.1MB. Free memory was 75.4MB in the beginning and 75.6MB in the end (delta: -216.4kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-11-03 02:12:30,226 INFO L158 Benchmark]: Boogie Procedure Inliner took 100.17ms. Allocated memory is still 109.1MB. Free memory was 75.6MB in the beginning and 73.0MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 02:12:30,228 INFO L158 Benchmark]: Boogie Preprocessor took 65.95ms. Allocated memory is still 109.1MB. Free memory was 73.0MB in the beginning and 71.4MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 02:12:30,229 INFO L158 Benchmark]: RCFGBuilder took 998.56ms. Allocated memory was 109.1MB in the beginning and 140.5MB in the end (delta: 31.5MB). Free memory was 71.4MB in the beginning and 114.6MB in the end (delta: -43.2MB). Peak memory consumption was 35.8MB. Max. memory is 16.1GB. [2022-11-03 02:12:30,229 INFO L158 Benchmark]: TraceAbstraction took 82619.41ms. Allocated memory was 140.5MB in the beginning and 394.3MB in the end (delta: 253.8MB). Free memory was 113.8MB in the beginning and 271.6MB in the end (delta: -157.8MB). Peak memory consumption was 238.4MB. Max. memory is 16.1GB. [2022-11-03 02:12:30,230 INFO L158 Benchmark]: Witness Printer took 150.93ms. Allocated memory is still 394.3MB. Free memory was 271.6MB in the beginning and 265.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-03 02:12:30,232 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.37ms. Allocated memory is still 79.7MB. Free memory is still 35.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 657.80ms. Allocated memory is still 109.1MB. Free memory was 75.4MB in the beginning and 75.6MB in the end (delta: -216.4kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 100.17ms. Allocated memory is still 109.1MB. Free memory was 75.6MB in the beginning and 73.0MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 65.95ms. Allocated memory is still 109.1MB. Free memory was 73.0MB in the beginning and 71.4MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 998.56ms. Allocated memory was 109.1MB in the beginning and 140.5MB in the end (delta: 31.5MB). Free memory was 71.4MB in the beginning and 114.6MB in the end (delta: -43.2MB). Peak memory consumption was 35.8MB. Max. memory is 16.1GB. * TraceAbstraction took 82619.41ms. Allocated memory was 140.5MB in the beginning and 394.3MB in the end (delta: 253.8MB). Free memory was 113.8MB in the beginning and 271.6MB in the end (delta: -157.8MB). Peak memory consumption was 238.4MB. Max. memory is 16.1GB. * Witness Printer took 150.93ms. Allocated memory is still 394.3MB. Free memory was 271.6MB in the beginning and 265.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 704]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 56 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 82.4s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 18.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 32.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1025 SdHoareTripleChecker+Valid, 3.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 997 mSDsluCounter, 1753 SdHoareTripleChecker+Invalid, 3.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1406 mSDsCounter, 349 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1974 IncrementalHoareTripleChecker+Invalid, 2323 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 349 mSolverCounterUnsat, 619 mSDtfsCounter, 1974 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 463 GetRequests, 326 SyntacticMatches, 10 SemanticMatches, 127 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 823 ImplicationChecksByTransitivity, 28.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=348occurred in iteration=11, InterpolantAutomatonStates: 99, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 192 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 35 LocationsWithAnnotation, 862 PreInvPairs, 969 NumberOfFragments, 3385 HoareAnnotationTreeSize, 862 FomulaSimplifications, 2509 FormulaSimplificationTreeSizeReduction, 1.3s HoareSimplificationTime, 35 FomulaSimplificationsInter, 52407 FormulaSimplificationTreeSizeReductionInter, 30.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 5.1s InterpolantComputationTime, 630 NumberOfCodeBlocks, 630 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 717 ConstructedInterpolants, 0 QuantifiedInterpolants, 2130 SizeOfPredicates, 36 NumberOfNonLiveVariables, 1351 ConjunctsInSsa, 70 ConjunctsInUnsatCore, 17 InterpolantComputations, 11 PerfectInterpolantSequences, 222/254 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 10.5s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 5, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 40, DAG_INTERPRETER_EARLY_EXITS: 3, TOOLS_POST_APPLICATIONS: 49, TOOLS_POST_TIME: 3.0s, TOOLS_POST_CALL_APPLICATIONS: 20, TOOLS_POST_CALL_TIME: 4.0s, TOOLS_POST_RETURN_APPLICATIONS: 16, TOOLS_POST_RETURN_TIME: 2.3s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 84, TOOLS_QUANTIFIERELIM_TIME: 9.3s, TOOLS_QUANTIFIERELIM_MAX_TIME: 1.2s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 115, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 16, DOMAIN_JOIN_TIME: 0.9s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 0, DOMAIN_WIDEN_TIME: 0.0s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 1, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 40, DOMAIN_ISBOTTOM_TIME: 0.1s, LOOP_SUMMARIZER_APPLICATIONS: 1, LOOP_SUMMARIZER_CACHE_MISSES: 1, LOOP_SUMMARIZER_OVERALL_TIME: 7.2s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 7.2s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 1, CALL_SUMMARIZER_APPLICATIONS: 16, CALL_SUMMARIZER_CACHE_MISSES: 4, CALL_SUMMARIZER_OVERALL_TIME: 0.2s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.2s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 440, DAG_COMPRESSION_RETAINED_NODES: 109, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 651]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 420]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) < 2)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 1) || (waterLevel <= 1 && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && waterLevel <= 1))) && ((((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((retValue_acc == \result && retValue_acc == waterLevel) && \result == tmp___0) && tmp == 0)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 720]: Loop Invariant Derived loop invariant: ((((tmp == 1 && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) && pumpRunning == 1) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp == 1) && splverifierCounter == 0) && tmp == systemActive) - InvariantResult [Line: 844]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 1) || (waterLevel <= 1 && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 704]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 1) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 782]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 1) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || 0 == systemActive) || (pumpRunning == 0 && (waterLevel <= 1 || tmp == 1))) && ((((((((((((((((tmp == 0 && retValue_acc == tmp___0) && retValue_acc == 0) && retValue_acc == \result) && retValue_acc == \result) && tmp == \result) || !(\old(pumpRunning) == 0)) || !(#NULL == 0)) || !(1 == systemActive)) || !(head == 0)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[26][2] == 102) || !(waterLevel == 1)) || !(\valid[23] == 1)) || !(unknown-#memory_int-unknown[24][1] == 80)) || !(unknown-#memory_int-unknown[19][1] == 75)) || !(unknown-#memory_int-unknown[28][0] == 10)) || !(unknown-#length-unknown[12] == 25)) || !(unknown-#memory_int-unknown[27][1] == 32)) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(unknown-#memory_int-unknown[22][0] == 79)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(2 == unknown-#length-unknown[20])) || !(\valid[26] == 1)) || !(unknown-#length-unknown[27] == 3)) || !(67 == unknown-#memory_int-unknown[18][0])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(3 == unknown-#length-unknown[25])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[18][2] == 73)) || !(unknown-#length-unknown[17] == 7)) || !(2 == unknown-#length-unknown[1])) || !(4 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[20][0] == 41)) || !(unknown-#memory_int-unknown[18][4] == 0)) || !(unknown-#length-unknown[21] == 13)) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(84 == unknown-#memory_int-unknown[18][3])) || !(77 == unknown-#memory_int-unknown[17][1])) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[25][1] == 110)) || !(unknown-#memory_int-unknown[17][6] == 0)) || !(unknown-#memory_int-unknown[26][1] == 102)) || !(\valid[3] == 1)) || !(110 == unknown-#memory_int-unknown[22][1])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(\valid[16] == 1)) || !(7 == unknown-#length-unknown[24])) || !(unknown-#memory_int-unknown[17][5] == 58)) || !(\valid[28] == 1)) || !(unknown-#length-unknown[19] == 3)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[24][6] == 0)) || !(\valid[19] == 1)) || !(unknown-#length-unknown[28] == 2)) || !(unknown-#memory_int-unknown[23][3] == 0)) || !(\valid[1] == 1)) || !(unknown-#memory_int-unknown[17][4] == 104)) || !(\valid[22] == 1)) || !(102 == unknown-#memory_int-unknown[23][2])) || !(unknown-#memory_int-unknown[19][0] == 79)) || (((((retValue_acc == 1 && \result == tmp) && retValue_acc == tmp___0) && retValue_acc == \result) && retValue_acc == \result) && tmp == \result)) || !(13 == unknown-#length-unknown[16])) || !(\valid[8] == 1)) || !(44 == unknown-#memory_int-unknown[24][0])) || !(41 == unknown-#memory_int-unknown[27][0])) || !(58 == unknown-#memory_int-unknown[24][5])) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(unknown-#memory_int-unknown[27][2] == 0)) || !(#NULL == 0)) || !(5 == unknown-#length-unknown[18])) || !(unknown-#length-unknown[22] == 3)) || !(unknown-#memory_int-unknown[26][3] == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(4 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[25][0] == 79)) || !(\valid[14] == 1)) || !(101 == unknown-#memory_int-unknown[17][2])) || !(unknown-#memory_int-unknown[19][2] == 0)) || !(82 == unknown-#memory_int-unknown[18][1])) || !(unknown-#memory_int-unknown[23][0] == 79)) || !(\valid[13] == 1)) || !(102 == unknown-#memory_int-unknown[23][1])) || !(117 == unknown-#memory_int-unknown[24][2])) || !(unknown-#memory_int-unknown[25][2] == 0)) || !(116 == unknown-#memory_int-unknown[17][3])) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(unknown-#memory_int-unknown[20][1] == 0)) || !(79 == unknown-#memory_int-unknown[26][0])) || !(\valid[17] == 1)) || !(\valid[9] == 1)) || !(unknown-#memory_int-unknown[22][2] == 0)) || !(44 == unknown-#memory_int-unknown[17][0])) || !(112 == unknown-#memory_int-unknown[24][4])) || !(head == 0)) || !(109 == unknown-#memory_int-unknown[24][3])) || !(unknown-#memory_int-unknown[28][1] == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1))) && ((!(\old(pumpRunning) == 1) || !(waterLevel <= 1)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || tmp == 0) || !(waterLevel <= 1)) || 0 == systemActive) - InvariantResult [Line: 719]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 818]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 1) || !(waterLevel <= 1)) || 0 == systemActive) || pumpRunning == 1) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 840]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 1) || (waterLevel <= 1 && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && waterLevel <= 1)) && (((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) < 2)) || 0 == systemActive)) && ((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) - InvariantResult [Line: 435]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || ((retValue_acc == waterLevel && \result == tmp___0) && tmp == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 1) || ((waterLevel <= tmp___0 && tmp___0 <= 1) && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((waterLevel <= tmp___0 && pumpRunning == 0) && tmp___0 <= 1))) && ((((!(\old(pumpRunning) == 0) || (((waterLevel <= tmp___0 && pumpRunning == 0) && tmp___0 <= 1) && \old(waterLevel) == waterLevel)) || (((tmp___0 <= 2 && \old(waterLevel) == waterLevel) && !(tmp___0 <= 1)) && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) < 2)) || (((waterLevel <= tmp___0 && pumpRunning == 0) && tmp___0 <= 1) && \old(waterLevel) == waterLevel)) || 0 == systemActive) - InvariantResult [Line: 429]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 1) || (waterLevel <= 1 && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && waterLevel <= 1)) && ((((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || !(1 == systemActive)) || !(head == 0)) || (tmp <= 0 && 0 <= tmp)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && (((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) < 2)) || 0 == systemActive)) && ((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) - InvariantResult [Line: 575]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 848]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 1) || (waterLevel <= 1 && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 710]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 740]: Loop Invariant Derived loop invariant: ((((tmp == 1 && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) && pumpRunning == 1) || ((((pumpRunning == 0 && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) - InvariantResult [Line: 651]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && unknown-#memory_int-unknown[19][0] == 79) && unknown-#memory_int-unknown[17][6] == 0) && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && 2 == unknown-#length-unknown[20]) && \valid[15] == 1) && unknown-#memory_int-unknown[22][0] == 79) && 5 == unknown-#length-unknown[18]) && pumpRunning == 0) && \valid[26] == 1) && unknown-#memory_int-unknown[27][2] == 0) && unknown-#memory_int-unknown[26][3] == 0) && \valid[9] == 1) && 13 == unknown-#length-unknown[16]) && unknown-#length-unknown[12] == 25) && unknown-#memory_int-unknown[18][2] == 73) && unknown-#length-unknown[28] == 2) && \valid[11] == 1) && \valid[27] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && unknown-#length-unknown[22] == 3) && 4 == unknown-#length-unknown[26]) && 102 == unknown-#memory_int-unknown[23][1]) && 31 == unknown-#length-unknown[2]) && head == 0) && unknown-#length-unknown[21] == 13) && unknown-#length-unknown[27] == 3) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && 84 == unknown-#memory_int-unknown[18][3]) && 41 == unknown-#memory_int-unknown[27][0]) && \valid[3] == 1) && unknown-#length-unknown[19] == 3) && \valid[7] == 1) && \valid[18] == 1) && \valid[22] == 1) && 30 == unknown-#length-unknown[13]) && 117 == unknown-#memory_int-unknown[24][2]) && \valid[24] == 1) && 30 == unknown-#length-unknown[10]) && unknown-#memory_int-unknown[19][2] == 0) && 3 == unknown-#length-unknown[25]) && tmp == 1) && \valid[12] == 1) && \result == tmp) && 82 == unknown-#memory_int-unknown[18][1]) && unknown-#memory_int-unknown[25][1] == 110) && \valid[28] == 1) && unknown-#memory_int-unknown[25][2] == 0) && 102 == unknown-#memory_int-unknown[23][2]) && unknown-#memory_int-unknown[28][1] == 0) && \valid[4] == 1) && unknown-#memory_int-unknown[22][2] == 0) && \valid[1] == 1) && \valid[20] == 1) && unknown-#length-unknown[6] == 21) && \valid[21] == 1) && 7 == unknown-#length-unknown[24]) && 58 == unknown-#memory_int-unknown[24][5]) && unknown-#memory_int-unknown[24][1] == 80) && unknown-#memory_int-unknown[26][2] == 102) && unknown-#memory_int-unknown[24][6] == 0) && unknown-#memory_int-unknown[18][4] == 0) && tmp == systemActive) && \valid[14] == 1) && 109 == unknown-#memory_int-unknown[24][3]) && 77 == unknown-#memory_int-unknown[17][1]) && 110 == unknown-#memory_int-unknown[22][1]) && 9 == unknown-#length-unknown[14]) && unknown-#memory_int-unknown[17][4] == 104) && \valid[0] == 0) && 79 == unknown-#memory_int-unknown[26][0]) && unknown-#memory_int-unknown[28][0] == 10) && \valid[25] == 1) && head == 0) && 112 == unknown-#memory_int-unknown[24][4]) && unknown-#memory_int-unknown[23][3] == 0) && 116 == unknown-#memory_int-unknown[17][3]) && \valid[2] == 1) && unknown-#memory_int-unknown[20][0] == 41) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && 44 == unknown-#memory_int-unknown[24][0]) && waterLevel == 1) && unknown-#memory_int-unknown[26][1] == 102) && unknown-#memory_int-unknown[1][0] == 48) && 67 == unknown-#memory_int-unknown[18][0]) && \valid[23] == 1) && 4 == unknown-#length-unknown[23]) && unknown-#memory_int-unknown[23][0] == 79) && unknown-#memory_int-unknown[27][1] == 32) && 101 == unknown-#memory_int-unknown[17][2]) && \valid[19] == 1) && unknown-#memory_int-unknown[19][1] == 75) && unknown-#memory_int-unknown[20][1] == 0) && 44 == unknown-#memory_int-unknown[17][0]) && \valid[16] == 1) && \valid[6] == 1) && retValue_acc == \result) && unknown-#memory_int-unknown[1][1] == 0) && unknown-#length-unknown[17] == 7) && \valid[17] == 1) && \valid[10] == 1) && \valid[8] == 1) && unknown-#memory_int-unknown[17][5] == 58) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0) && unknown-#memory_int-unknown[25][0] == 79 - InvariantResult [Line: 565]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-11-03 02:12:30,345 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff130d17-87a8-430c-9cc6-ba0298b42ca3/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE