./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product40.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product40.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1b223e2286b1d2d2d4710f5bd529ee4610cfb9619424734c12c9aa00d3c99444 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-19 07:23:34,798 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-19 07:23:34,801 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-19 07:23:34,830 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-19 07:23:34,830 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-19 07:23:34,831 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-19 07:23:34,833 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-19 07:23:34,834 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-19 07:23:34,836 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-19 07:23:34,837 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-19 07:23:34,838 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-19 07:23:34,839 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-19 07:23:34,840 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-19 07:23:34,841 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-19 07:23:34,842 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-19 07:23:34,843 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-19 07:23:34,844 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-19 07:23:34,845 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-19 07:23:34,847 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-19 07:23:34,849 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-19 07:23:34,851 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-19 07:23:34,852 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-19 07:23:34,853 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-19 07:23:34,854 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-19 07:23:34,858 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-19 07:23:34,859 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-19 07:23:34,859 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-19 07:23:34,860 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-19 07:23:34,861 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-19 07:23:34,862 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-19 07:23:34,862 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-19 07:23:34,863 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-19 07:23:34,864 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-19 07:23:34,865 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-19 07:23:34,866 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-19 07:23:34,867 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-19 07:23:34,868 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-19 07:23:34,868 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-19 07:23:34,868 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-19 07:23:34,869 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-19 07:23:34,870 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-19 07:23:34,871 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-19 07:23:34,894 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-19 07:23:34,895 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-19 07:23:34,895 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-19 07:23:34,895 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-19 07:23:34,896 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-19 07:23:34,896 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-19 07:23:34,897 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-19 07:23:34,897 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-19 07:23:34,897 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-19 07:23:34,897 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-19 07:23:34,898 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-19 07:23:34,898 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-19 07:23:34,898 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-19 07:23:34,898 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-19 07:23:34,898 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-19 07:23:34,899 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-19 07:23:34,899 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-19 07:23:34,899 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-19 07:23:34,900 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-19 07:23:34,900 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-19 07:23:34,900 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-19 07:23:34,901 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-19 07:23:34,901 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-19 07:23:34,901 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-19 07:23:34,901 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-19 07:23:34,902 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-19 07:23:34,902 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-19 07:23:34,902 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-19 07:23:34,902 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-19 07:23:34,902 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-19 07:23:34,903 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-19 07:23:34,903 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-19 07:23:34,903 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 07:23:34,903 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-19 07:23:34,904 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-19 07:23:34,904 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-19 07:23:34,904 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-19 07:23:34,904 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-19 07:23:34,905 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-19 07:23:34,905 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-19 07:23:34,905 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-19 07:23:34,905 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1b223e2286b1d2d2d4710f5bd529ee4610cfb9619424734c12c9aa00d3c99444 [2022-11-19 07:23:35,169 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-19 07:23:35,200 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-19 07:23:35,203 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-19 07:23:35,204 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-19 07:23:35,205 INFO L275 PluginConnector]: CDTParser initialized [2022-11-19 07:23:35,207 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/../../sv-benchmarks/c/product-lines/minepump_spec2_product40.cil.c [2022-11-19 07:23:35,289 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/data/47fe9d2aa/840e01fcef9048ecab7f1ed0d14e8174/FLAGfc6475bb9 [2022-11-19 07:23:35,812 INFO L306 CDTParser]: Found 1 translation units. [2022-11-19 07:23:35,813 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/sv-benchmarks/c/product-lines/minepump_spec2_product40.cil.c [2022-11-19 07:23:35,829 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/data/47fe9d2aa/840e01fcef9048ecab7f1ed0d14e8174/FLAGfc6475bb9 [2022-11-19 07:23:36,104 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/data/47fe9d2aa/840e01fcef9048ecab7f1ed0d14e8174 [2022-11-19 07:23:36,108 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-19 07:23:36,111 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-19 07:23:36,115 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-19 07:23:36,116 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-19 07:23:36,120 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-19 07:23:36,121 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:23:36" (1/1) ... [2022-11-19 07:23:36,123 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6e8a959d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:23:36, skipping insertion in model container [2022-11-19 07:23:36,124 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:23:36" (1/1) ... [2022-11-19 07:23:36,132 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-19 07:23:36,195 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-19 07:23:36,583 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/sv-benchmarks/c/product-lines/minepump_spec2_product40.cil.c[17002,17015] [2022-11-19 07:23:36,595 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 07:23:36,603 INFO L203 MainTranslator]: Completed pre-run [2022-11-19 07:23:36,669 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/sv-benchmarks/c/product-lines/minepump_spec2_product40.cil.c[17002,17015] [2022-11-19 07:23:36,674 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 07:23:36,694 INFO L208 MainTranslator]: Completed translation [2022-11-19 07:23:36,695 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:23:36 WrapperNode [2022-11-19 07:23:36,695 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-19 07:23:36,696 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-19 07:23:36,696 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-19 07:23:36,696 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-19 07:23:36,704 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:23:36" (1/1) ... [2022-11-19 07:23:36,728 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:23:36" (1/1) ... [2022-11-19 07:23:36,769 INFO L138 Inliner]: procedures = 56, calls = 101, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 197 [2022-11-19 07:23:36,770 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-19 07:23:36,771 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-19 07:23:36,771 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-19 07:23:36,772 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-19 07:23:36,782 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:23:36" (1/1) ... [2022-11-19 07:23:36,782 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:23:36" (1/1) ... [2022-11-19 07:23:36,784 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:23:36" (1/1) ... [2022-11-19 07:23:36,784 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:23:36" (1/1) ... [2022-11-19 07:23:36,789 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:23:36" (1/1) ... [2022-11-19 07:23:36,793 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:23:36" (1/1) ... [2022-11-19 07:23:36,795 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:23:36" (1/1) ... [2022-11-19 07:23:36,796 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:23:36" (1/1) ... [2022-11-19 07:23:36,798 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-19 07:23:36,799 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-19 07:23:36,799 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-19 07:23:36,799 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-19 07:23:36,800 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:23:36" (1/1) ... [2022-11-19 07:23:36,807 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 07:23:36,834 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:23:36,858 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-19 07:23:36,889 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-19 07:23:36,906 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-19 07:23:36,906 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-19 07:23:36,907 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-19 07:23:36,907 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-19 07:23:36,907 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-19 07:23:36,907 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-19 07:23:36,907 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-19 07:23:36,908 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-19 07:23:36,908 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-19 07:23:36,908 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 07:23:36,908 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 07:23:36,908 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-19 07:23:36,908 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-19 07:23:36,909 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-19 07:23:36,909 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-19 07:23:36,910 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-19 07:23:36,910 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-19 07:23:36,910 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-19 07:23:36,910 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-19 07:23:36,910 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-19 07:23:37,021 INFO L235 CfgBuilder]: Building ICFG [2022-11-19 07:23:37,024 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-19 07:23:37,392 INFO L276 CfgBuilder]: Performing block encoding [2022-11-19 07:23:37,488 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-19 07:23:37,488 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-19 07:23:37,491 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:23:37 BoogieIcfgContainer [2022-11-19 07:23:37,491 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-19 07:23:37,503 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-19 07:23:37,504 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-19 07:23:37,511 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-19 07:23:37,511 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 07:23:36" (1/3) ... [2022-11-19 07:23:37,512 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@48f0204b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:23:37, skipping insertion in model container [2022-11-19 07:23:37,512 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:23:36" (2/3) ... [2022-11-19 07:23:37,512 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@48f0204b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:23:37, skipping insertion in model container [2022-11-19 07:23:37,513 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:23:37" (3/3) ... [2022-11-19 07:23:37,514 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product40.cil.c [2022-11-19 07:23:37,539 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-19 07:23:37,539 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-19 07:23:37,607 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-19 07:23:37,614 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3d203de, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-19 07:23:37,614 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-19 07:23:37,622 INFO L276 IsEmpty]: Start isEmpty. Operand has 66 states, 42 states have (on average 1.4523809523809523) internal successors, (61), 51 states have internal predecessors, (61), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2022-11-19 07:23:37,632 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-19 07:23:37,632 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:23:37,633 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:23:37,634 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:23:37,644 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:23:37,644 INFO L85 PathProgramCache]: Analyzing trace with hash 1865798431, now seen corresponding path program 1 times [2022-11-19 07:23:37,655 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:23:37,657 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1446394189] [2022-11-19 07:23:37,657 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:23:37,658 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:23:37,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:23:37,934 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:23:37,935 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:23:37,935 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1446394189] [2022-11-19 07:23:37,936 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1446394189] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:23:37,937 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:23:37,937 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-19 07:23:37,938 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [864816728] [2022-11-19 07:23:37,940 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:23:37,945 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-19 07:23:37,947 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:23:37,985 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-19 07:23:37,986 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-19 07:23:37,989 INFO L87 Difference]: Start difference. First operand has 66 states, 42 states have (on average 1.4523809523809523) internal successors, (61), 51 states have internal predecessors, (61), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:23:38,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:23:38,111 INFO L93 Difference]: Finished difference Result 130 states and 179 transitions. [2022-11-19 07:23:38,112 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-19 07:23:38,114 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-11-19 07:23:38,114 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:23:38,123 INFO L225 Difference]: With dead ends: 130 [2022-11-19 07:23:38,124 INFO L226 Difference]: Without dead ends: 61 [2022-11-19 07:23:38,127 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-19 07:23:38,130 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 68 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:23:38,131 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 68 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:23:38,148 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61 states. [2022-11-19 07:23:38,170 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61 to 61. [2022-11-19 07:23:38,171 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 39 states have (on average 1.358974358974359) internal successors, (53), 47 states have internal predecessors, (53), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-19 07:23:38,173 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 80 transitions. [2022-11-19 07:23:38,175 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 80 transitions. Word has length 17 [2022-11-19 07:23:38,176 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:23:38,176 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 80 transitions. [2022-11-19 07:23:38,177 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:23:38,177 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 80 transitions. [2022-11-19 07:23:38,182 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-19 07:23:38,182 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:23:38,182 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:23:38,183 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-19 07:23:38,183 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:23:38,184 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:23:38,184 INFO L85 PathProgramCache]: Analyzing trace with hash -378815255, now seen corresponding path program 1 times [2022-11-19 07:23:38,185 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:23:38,185 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [52880008] [2022-11-19 07:23:38,185 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:23:38,186 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:23:38,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:23:38,360 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:23:38,360 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:23:38,361 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [52880008] [2022-11-19 07:23:38,362 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [52880008] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:23:38,362 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:23:38,362 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 07:23:38,362 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [254763365] [2022-11-19 07:23:38,364 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:23:38,367 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 07:23:38,368 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:23:38,369 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 07:23:38,372 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:23:38,372 INFO L87 Difference]: Start difference. First operand 61 states and 80 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:23:38,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:23:38,452 INFO L93 Difference]: Finished difference Result 94 states and 122 transitions. [2022-11-19 07:23:38,453 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 07:23:38,454 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-11-19 07:23:38,455 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:23:38,456 INFO L225 Difference]: With dead ends: 94 [2022-11-19 07:23:38,458 INFO L226 Difference]: Without dead ends: 53 [2022-11-19 07:23:38,460 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:23:38,462 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 14 mSDsluCounter, 38 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 92 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 07:23:38,465 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 92 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 07:23:38,466 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2022-11-19 07:23:38,474 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2022-11-19 07:23:38,476 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 34 states have (on average 1.3823529411764706) internal successors, (47), 42 states have internal predecessors, (47), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-19 07:23:38,479 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 69 transitions. [2022-11-19 07:23:38,479 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 69 transitions. Word has length 18 [2022-11-19 07:23:38,480 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:23:38,480 INFO L495 AbstractCegarLoop]: Abstraction has 53 states and 69 transitions. [2022-11-19 07:23:38,480 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:23:38,480 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 69 transitions. [2022-11-19 07:23:38,481 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-19 07:23:38,481 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:23:38,481 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:23:38,482 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-19 07:23:38,482 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:23:38,482 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:23:38,482 INFO L85 PathProgramCache]: Analyzing trace with hash -245993615, now seen corresponding path program 1 times [2022-11-19 07:23:38,483 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:23:38,483 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [640135227] [2022-11-19 07:23:38,483 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:23:38,483 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:23:38,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:23:38,562 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:23:38,562 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:23:38,562 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [640135227] [2022-11-19 07:23:38,563 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [640135227] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:23:38,563 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:23:38,563 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 07:23:38,563 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1707203421] [2022-11-19 07:23:38,563 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:23:38,564 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 07:23:38,564 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:23:38,564 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 07:23:38,565 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:23:38,565 INFO L87 Difference]: Start difference. First operand 53 states and 69 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:23:38,635 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:23:38,635 INFO L93 Difference]: Finished difference Result 155 states and 204 transitions. [2022-11-19 07:23:38,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 07:23:38,636 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2022-11-19 07:23:38,636 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:23:38,638 INFO L225 Difference]: With dead ends: 155 [2022-11-19 07:23:38,638 INFO L226 Difference]: Without dead ends: 104 [2022-11-19 07:23:38,639 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:23:38,640 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 63 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 125 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 07:23:38,641 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [63 Valid, 125 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 07:23:38,642 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104 states. [2022-11-19 07:23:38,660 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104 to 101. [2022-11-19 07:23:38,661 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 64 states have (on average 1.390625) internal successors, (89), 79 states have internal predecessors, (89), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2022-11-19 07:23:38,662 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 133 transitions. [2022-11-19 07:23:38,663 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 133 transitions. Word has length 21 [2022-11-19 07:23:38,663 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:23:38,663 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 133 transitions. [2022-11-19 07:23:38,663 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:23:38,663 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 133 transitions. [2022-11-19 07:23:38,665 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-19 07:23:38,665 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:23:38,665 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:23:38,665 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-19 07:23:38,665 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:23:38,666 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:23:38,666 INFO L85 PathProgramCache]: Analyzing trace with hash 1260550476, now seen corresponding path program 1 times [2022-11-19 07:23:38,666 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:23:38,667 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1558762556] [2022-11-19 07:23:38,667 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:23:38,667 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:23:38,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:23:38,791 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:23:38,792 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:23:38,792 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1558762556] [2022-11-19 07:23:38,792 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1558762556] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:23:38,792 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:23:38,792 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-19 07:23:38,793 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [464365538] [2022-11-19 07:23:38,793 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:23:38,793 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-19 07:23:38,794 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:23:38,794 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-19 07:23:38,794 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-19 07:23:38,795 INFO L87 Difference]: Start difference. First operand 101 states and 133 transitions. Second operand has 6 states, 5 states have (on average 4.2) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:23:38,964 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:23:38,964 INFO L93 Difference]: Finished difference Result 295 states and 392 transitions. [2022-11-19 07:23:38,964 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-19 07:23:38,965 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.2) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-11-19 07:23:38,965 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:23:38,968 INFO L225 Difference]: With dead ends: 295 [2022-11-19 07:23:38,968 INFO L226 Difference]: Without dead ends: 196 [2022-11-19 07:23:38,969 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-19 07:23:38,970 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 45 mSDsluCounter, 215 mSDsCounter, 0 mSdLazyCounter, 107 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 278 SdHoareTripleChecker+Invalid, 108 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 107 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:23:38,971 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 278 Invalid, 108 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 107 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:23:38,972 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 196 states. [2022-11-19 07:23:39,019 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 196 to 188. [2022-11-19 07:23:39,021 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 188 states, 119 states have (on average 1.3697478991596639) internal successors, (163), 146 states have internal predecessors, (163), 42 states have call successors, (42), 26 states have call predecessors, (42), 26 states have return successors, (42), 28 states have call predecessors, (42), 42 states have call successors, (42) [2022-11-19 07:23:39,028 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 188 states and 247 transitions. [2022-11-19 07:23:39,028 INFO L78 Accepts]: Start accepts. Automaton has 188 states and 247 transitions. Word has length 24 [2022-11-19 07:23:39,028 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:23:39,029 INFO L495 AbstractCegarLoop]: Abstraction has 188 states and 247 transitions. [2022-11-19 07:23:39,029 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.2) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:23:39,029 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 247 transitions. [2022-11-19 07:23:39,031 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-19 07:23:39,031 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:23:39,032 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:23:39,032 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-19 07:23:39,032 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:23:39,033 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:23:39,033 INFO L85 PathProgramCache]: Analyzing trace with hash 653436656, now seen corresponding path program 1 times [2022-11-19 07:23:39,033 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:23:39,034 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [832231509] [2022-11-19 07:23:39,034 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:23:39,034 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:23:39,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:23:39,130 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:23:39,130 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:23:39,130 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [832231509] [2022-11-19 07:23:39,130 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [832231509] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:23:39,130 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:23:39,131 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 07:23:39,131 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1739053242] [2022-11-19 07:23:39,131 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:23:39,131 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 07:23:39,132 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:23:39,132 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 07:23:39,132 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:23:39,132 INFO L87 Difference]: Start difference. First operand 188 states and 247 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-19 07:23:39,212 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:23:39,212 INFO L93 Difference]: Finished difference Result 287 states and 382 transitions. [2022-11-19 07:23:39,213 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 07:23:39,213 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 27 [2022-11-19 07:23:39,213 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:23:39,216 INFO L225 Difference]: With dead ends: 287 [2022-11-19 07:23:39,216 INFO L226 Difference]: Without dead ends: 285 [2022-11-19 07:23:39,217 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:23:39,218 INFO L413 NwaCegarLoop]: 64 mSDtfsCounter, 44 mSDsluCounter, 51 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 115 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 07:23:39,219 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 115 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 07:23:39,220 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 285 states. [2022-11-19 07:23:39,282 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 285 to 285. [2022-11-19 07:23:39,283 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 285 states, 180 states have (on average 1.3722222222222222) internal successors, (247), 221 states have internal predecessors, (247), 64 states have call successors, (64), 40 states have call predecessors, (64), 40 states have return successors, (68), 43 states have call predecessors, (68), 64 states have call successors, (68) [2022-11-19 07:23:39,286 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 285 states to 285 states and 379 transitions. [2022-11-19 07:23:39,287 INFO L78 Accepts]: Start accepts. Automaton has 285 states and 379 transitions. Word has length 27 [2022-11-19 07:23:39,287 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:23:39,287 INFO L495 AbstractCegarLoop]: Abstraction has 285 states and 379 transitions. [2022-11-19 07:23:39,287 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-19 07:23:39,288 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 379 transitions. [2022-11-19 07:23:39,299 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-11-19 07:23:39,300 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:23:39,300 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:23:39,300 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-19 07:23:39,302 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:23:39,302 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:23:39,303 INFO L85 PathProgramCache]: Analyzing trace with hash 434397465, now seen corresponding path program 1 times [2022-11-19 07:23:39,303 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:23:39,303 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [361929912] [2022-11-19 07:23:39,303 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:23:39,304 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:23:39,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:23:39,538 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-19 07:23:39,538 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:23:39,539 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [361929912] [2022-11-19 07:23:39,539 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [361929912] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:23:39,539 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:23:39,539 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-19 07:23:39,539 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2100438284] [2022-11-19 07:23:39,540 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:23:39,540 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-19 07:23:39,540 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:23:39,541 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-19 07:23:39,541 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-19 07:23:39,541 INFO L87 Difference]: Start difference. First operand 285 states and 379 transitions. Second operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 6 states have internal predecessors, (38), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-19 07:23:39,931 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:23:39,932 INFO L93 Difference]: Finished difference Result 934 states and 1260 transitions. [2022-11-19 07:23:39,932 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-19 07:23:39,933 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 6 states have internal predecessors, (38), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 48 [2022-11-19 07:23:39,933 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:23:39,938 INFO L225 Difference]: With dead ends: 934 [2022-11-19 07:23:39,938 INFO L226 Difference]: Without dead ends: 651 [2022-11-19 07:23:39,941 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=74, Unknown=0, NotChecked=0, Total=110 [2022-11-19 07:23:39,942 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 129 mSDsluCounter, 103 mSDsCounter, 0 mSdLazyCounter, 159 mSolverCounterSat, 64 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 223 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 64 IncrementalHoareTripleChecker+Valid, 159 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-19 07:23:39,943 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 173 Invalid, 223 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [64 Valid, 159 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-19 07:23:39,944 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 651 states. [2022-11-19 07:23:40,009 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 651 to 604. [2022-11-19 07:23:40,011 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 604 states, 406 states have (on average 1.2635467980295567) internal successors, (513), 445 states have internal predecessors, (513), 98 states have call successors, (98), 83 states have call predecessors, (98), 99 states have return successors, (144), 99 states have call predecessors, (144), 98 states have call successors, (144) [2022-11-19 07:23:40,014 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 604 states to 604 states and 755 transitions. [2022-11-19 07:23:40,015 INFO L78 Accepts]: Start accepts. Automaton has 604 states and 755 transitions. Word has length 48 [2022-11-19 07:23:40,015 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:23:40,015 INFO L495 AbstractCegarLoop]: Abstraction has 604 states and 755 transitions. [2022-11-19 07:23:40,016 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 6 states have internal predecessors, (38), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-19 07:23:40,016 INFO L276 IsEmpty]: Start isEmpty. Operand 604 states and 755 transitions. [2022-11-19 07:23:40,018 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-19 07:23:40,018 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:23:40,018 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:23:40,018 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-19 07:23:40,019 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:23:40,019 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:23:40,019 INFO L85 PathProgramCache]: Analyzing trace with hash -2099161350, now seen corresponding path program 1 times [2022-11-19 07:23:40,019 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:23:40,020 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1246373525] [2022-11-19 07:23:40,020 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:23:40,020 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:23:40,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:23:40,071 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-19 07:23:40,071 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:23:40,071 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1246373525] [2022-11-19 07:23:40,072 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1246373525] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:23:40,072 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:23:40,072 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 07:23:40,072 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [101230974] [2022-11-19 07:23:40,072 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:23:40,073 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 07:23:40,073 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:23:40,073 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 07:23:40,073 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 07:23:40,074 INFO L87 Difference]: Start difference. First operand 604 states and 755 transitions. Second operand has 4 states, 3 states have (on average 14.666666666666666) internal successors, (44), 4 states have internal predecessors, (44), 4 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-19 07:23:40,245 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:23:40,245 INFO L93 Difference]: Finished difference Result 971 states and 1215 transitions. [2022-11-19 07:23:40,245 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-19 07:23:40,245 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 14.666666666666666) internal successors, (44), 4 states have internal predecessors, (44), 4 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 56 [2022-11-19 07:23:40,246 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:23:40,248 INFO L225 Difference]: With dead ends: 971 [2022-11-19 07:23:40,248 INFO L226 Difference]: Without dead ends: 369 [2022-11-19 07:23:40,250 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 07:23:40,251 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 85 mSDsluCounter, 45 mSDsCounter, 0 mSdLazyCounter, 82 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 86 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 82 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:23:40,251 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [85 Valid, 120 Invalid, 86 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 82 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:23:40,252 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 369 states. [2022-11-19 07:23:40,290 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 369 to 352. [2022-11-19 07:23:40,291 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 352 states, 239 states have (on average 1.2510460251046025) internal successors, (299), 261 states have internal predecessors, (299), 55 states have call successors, (55), 49 states have call predecessors, (55), 57 states have return successors, (78), 57 states have call predecessors, (78), 55 states have call successors, (78) [2022-11-19 07:23:40,293 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 352 states to 352 states and 432 transitions. [2022-11-19 07:23:40,293 INFO L78 Accepts]: Start accepts. Automaton has 352 states and 432 transitions. Word has length 56 [2022-11-19 07:23:40,294 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:23:40,294 INFO L495 AbstractCegarLoop]: Abstraction has 352 states and 432 transitions. [2022-11-19 07:23:40,294 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 14.666666666666666) internal successors, (44), 4 states have internal predecessors, (44), 4 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-19 07:23:40,294 INFO L276 IsEmpty]: Start isEmpty. Operand 352 states and 432 transitions. [2022-11-19 07:23:40,296 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-19 07:23:40,296 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:23:40,296 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:23:40,297 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-19 07:23:40,297 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:23:40,297 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:23:40,297 INFO L85 PathProgramCache]: Analyzing trace with hash -37876805, now seen corresponding path program 1 times [2022-11-19 07:23:40,298 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:23:40,298 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1461403176] [2022-11-19 07:23:40,298 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:23:40,298 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:23:40,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:23:40,422 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 17 proven. 4 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-19 07:23:40,423 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:23:40,423 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1461403176] [2022-11-19 07:23:40,423 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1461403176] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:23:40,423 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1679021728] [2022-11-19 07:23:40,424 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:23:40,424 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:23:40,424 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:23:40,427 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:23:40,456 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-19 07:23:40,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:23:40,565 INFO L263 TraceCheckSpWp]: Trace formula consists of 296 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-19 07:23:40,576 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:23:40,705 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:23:40,705 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 07:23:40,706 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1679021728] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:23:40,706 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 07:23:40,706 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 8 [2022-11-19 07:23:40,706 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [451711289] [2022-11-19 07:23:40,707 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:23:40,709 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 07:23:40,710 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:23:40,711 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 07:23:40,711 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2022-11-19 07:23:40,712 INFO L87 Difference]: Start difference. First operand 352 states and 432 transitions. Second operand has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-19 07:23:40,811 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:23:40,811 INFO L93 Difference]: Finished difference Result 704 states and 863 transitions. [2022-11-19 07:23:40,812 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 07:23:40,812 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 60 [2022-11-19 07:23:40,813 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:23:40,814 INFO L225 Difference]: With dead ends: 704 [2022-11-19 07:23:40,814 INFO L226 Difference]: Without dead ends: 354 [2022-11-19 07:23:40,816 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2022-11-19 07:23:40,820 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 31 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 31 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 07:23:40,820 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [31 Valid, 120 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 07:23:40,821 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 354 states. [2022-11-19 07:23:40,856 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 354 to 352. [2022-11-19 07:23:40,857 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 352 states, 239 states have (on average 1.2301255230125523) internal successors, (294), 261 states have internal predecessors, (294), 55 states have call successors, (55), 49 states have call predecessors, (55), 57 states have return successors, (70), 57 states have call predecessors, (70), 55 states have call successors, (70) [2022-11-19 07:23:40,859 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 352 states to 352 states and 419 transitions. [2022-11-19 07:23:40,860 INFO L78 Accepts]: Start accepts. Automaton has 352 states and 419 transitions. Word has length 60 [2022-11-19 07:23:40,860 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:23:40,861 INFO L495 AbstractCegarLoop]: Abstraction has 352 states and 419 transitions. [2022-11-19 07:23:40,861 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-19 07:23:40,861 INFO L276 IsEmpty]: Start isEmpty. Operand 352 states and 419 transitions. [2022-11-19 07:23:40,863 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-11-19 07:23:40,863 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:23:40,863 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:23:40,876 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-19 07:23:41,069 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:23:41,070 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:23:41,070 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:23:41,070 INFO L85 PathProgramCache]: Analyzing trace with hash 479242136, now seen corresponding path program 1 times [2022-11-19 07:23:41,070 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:23:41,070 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1535552964] [2022-11-19 07:23:41,070 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:23:41,070 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:23:41,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:23:41,566 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-19 07:23:41,566 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:23:41,566 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1535552964] [2022-11-19 07:23:41,566 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1535552964] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:23:41,566 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:23:41,566 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-19 07:23:41,567 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1648592888] [2022-11-19 07:23:41,567 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:23:41,567 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-19 07:23:41,567 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:23:41,568 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-19 07:23:41,568 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=66, Unknown=0, NotChecked=0, Total=90 [2022-11-19 07:23:41,568 INFO L87 Difference]: Start difference. First operand 352 states and 419 transitions. Second operand has 10 states, 9 states have (on average 5.0) internal successors, (45), 9 states have internal predecessors, (45), 5 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) [2022-11-19 07:23:42,586 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:23:42,586 INFO L93 Difference]: Finished difference Result 926 states and 1130 transitions. [2022-11-19 07:23:42,587 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-19 07:23:42,587 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 5.0) internal successors, (45), 9 states have internal predecessors, (45), 5 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) Word has length 62 [2022-11-19 07:23:42,587 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:23:42,591 INFO L225 Difference]: With dead ends: 926 [2022-11-19 07:23:42,591 INFO L226 Difference]: Without dead ends: 576 [2022-11-19 07:23:42,593 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 103 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=130, Invalid=376, Unknown=0, NotChecked=0, Total=506 [2022-11-19 07:23:42,596 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 270 mSDsluCounter, 255 mSDsCounter, 0 mSdLazyCounter, 441 mSolverCounterSat, 122 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 279 SdHoareTripleChecker+Valid, 343 SdHoareTripleChecker+Invalid, 563 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 122 IncrementalHoareTripleChecker+Valid, 441 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-19 07:23:42,597 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [279 Valid, 343 Invalid, 563 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [122 Valid, 441 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-19 07:23:42,599 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 576 states. [2022-11-19 07:23:42,696 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 576 to 462. [2022-11-19 07:23:42,697 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 462 states, 321 states have (on average 1.2274143302180685) internal successors, (394), 345 states have internal predecessors, (394), 69 states have call successors, (69), 63 states have call predecessors, (69), 71 states have return successors, (84), 71 states have call predecessors, (84), 69 states have call successors, (84) [2022-11-19 07:23:42,700 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 462 states to 462 states and 547 transitions. [2022-11-19 07:23:42,701 INFO L78 Accepts]: Start accepts. Automaton has 462 states and 547 transitions. Word has length 62 [2022-11-19 07:23:42,702 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:23:42,702 INFO L495 AbstractCegarLoop]: Abstraction has 462 states and 547 transitions. [2022-11-19 07:23:42,702 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 5.0) internal successors, (45), 9 states have internal predecessors, (45), 5 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) [2022-11-19 07:23:42,703 INFO L276 IsEmpty]: Start isEmpty. Operand 462 states and 547 transitions. [2022-11-19 07:23:42,704 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-11-19 07:23:42,705 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:23:42,705 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:23:42,705 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-19 07:23:42,705 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:23:42,706 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:23:42,706 INFO L85 PathProgramCache]: Analyzing trace with hash -517691219, now seen corresponding path program 1 times [2022-11-19 07:23:42,706 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:23:42,706 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [142043284] [2022-11-19 07:23:42,707 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:23:42,707 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:23:42,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:23:42,872 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2022-11-19 07:23:42,873 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:23:42,873 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [142043284] [2022-11-19 07:23:42,873 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [142043284] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:23:42,873 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:23:42,874 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 07:23:42,874 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1982534053] [2022-11-19 07:23:42,874 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:23:42,874 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 07:23:42,875 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:23:42,876 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 07:23:42,876 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 07:23:42,876 INFO L87 Difference]: Start difference. First operand 462 states and 547 transitions. Second operand has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-11-19 07:23:43,013 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:23:43,013 INFO L93 Difference]: Finished difference Result 664 states and 790 transitions. [2022-11-19 07:23:43,013 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 07:23:43,014 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 65 [2022-11-19 07:23:43,014 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:23:43,016 INFO L225 Difference]: With dead ends: 664 [2022-11-19 07:23:43,017 INFO L226 Difference]: Without dead ends: 431 [2022-11-19 07:23:43,018 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-19 07:23:43,018 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 47 mSDsluCounter, 103 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 163 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:23:43,019 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 163 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:23:43,020 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 431 states. [2022-11-19 07:23:43,092 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 431 to 414. [2022-11-19 07:23:43,093 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 414 states, 287 states have (on average 1.2125435540069687) internal successors, (348), 309 states have internal predecessors, (348), 62 states have call successors, (62), 57 states have call predecessors, (62), 64 states have return successors, (72), 63 states have call predecessors, (72), 62 states have call successors, (72) [2022-11-19 07:23:43,095 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 414 states to 414 states and 482 transitions. [2022-11-19 07:23:43,095 INFO L78 Accepts]: Start accepts. Automaton has 414 states and 482 transitions. Word has length 65 [2022-11-19 07:23:43,096 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:23:43,096 INFO L495 AbstractCegarLoop]: Abstraction has 414 states and 482 transitions. [2022-11-19 07:23:43,096 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-11-19 07:23:43,096 INFO L276 IsEmpty]: Start isEmpty. Operand 414 states and 482 transitions. [2022-11-19 07:23:43,098 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2022-11-19 07:23:43,098 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:23:43,098 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:23:43,098 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-19 07:23:43,099 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:23:43,099 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:23:43,099 INFO L85 PathProgramCache]: Analyzing trace with hash 268936039, now seen corresponding path program 1 times [2022-11-19 07:23:43,099 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:23:43,099 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [807763842] [2022-11-19 07:23:43,100 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:23:43,100 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:23:43,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:23:43,291 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 11 proven. 6 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-19 07:23:43,291 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:23:43,291 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [807763842] [2022-11-19 07:23:43,291 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [807763842] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:23:43,292 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1309739443] [2022-11-19 07:23:43,292 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:23:43,292 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:23:43,292 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:23:43,293 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:23:43,327 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-19 07:23:43,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:23:43,413 INFO L263 TraceCheckSpWp]: Trace formula consists of 309 conjuncts, 23 conjunts are in the unsatisfiable core [2022-11-19 07:23:43,421 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:23:43,574 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:23:43,574 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 07:23:43,574 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1309739443] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:23:43,574 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 07:23:43,574 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [9] total 15 [2022-11-19 07:23:43,575 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [494785667] [2022-11-19 07:23:43,575 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:23:43,576 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-19 07:23:43,576 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:23:43,577 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-19 07:23:43,577 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=177, Unknown=0, NotChecked=0, Total=210 [2022-11-19 07:23:43,577 INFO L87 Difference]: Start difference. First operand 414 states and 482 transitions. Second operand has 9 states, 7 states have (on average 7.285714285714286) internal successors, (51), 7 states have internal predecessors, (51), 3 states have call successors, (10), 3 states have call predecessors, (10), 5 states have return successors, (9), 5 states have call predecessors, (9), 3 states have call successors, (9) [2022-11-19 07:23:44,024 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:23:44,024 INFO L93 Difference]: Finished difference Result 843 states and 1013 transitions. [2022-11-19 07:23:44,025 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-19 07:23:44,025 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 7.285714285714286) internal successors, (51), 7 states have internal predecessors, (51), 3 states have call successors, (10), 3 states have call predecessors, (10), 5 states have return successors, (9), 5 states have call predecessors, (9), 3 states have call successors, (9) Word has length 70 [2022-11-19 07:23:44,026 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:23:44,029 INFO L225 Difference]: With dead ends: 843 [2022-11-19 07:23:44,029 INFO L226 Difference]: Without dead ends: 599 [2022-11-19 07:23:44,030 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 87 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 55 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=73, Invalid=433, Unknown=0, NotChecked=0, Total=506 [2022-11-19 07:23:44,031 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 56 mSDsluCounter, 457 mSDsCounter, 0 mSdLazyCounter, 314 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 559 SdHoareTripleChecker+Invalid, 320 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 314 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-19 07:23:44,031 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 559 Invalid, 320 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 314 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-19 07:23:44,033 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 599 states. [2022-11-19 07:23:44,111 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 599 to 589. [2022-11-19 07:23:44,113 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 589 states, 411 states have (on average 1.2043795620437956) internal successors, (495), 439 states have internal predecessors, (495), 87 states have call successors, (87), 81 states have call predecessors, (87), 90 states have return successors, (109), 87 states have call predecessors, (109), 87 states have call successors, (109) [2022-11-19 07:23:44,116 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 589 states to 589 states and 691 transitions. [2022-11-19 07:23:44,116 INFO L78 Accepts]: Start accepts. Automaton has 589 states and 691 transitions. Word has length 70 [2022-11-19 07:23:44,116 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:23:44,117 INFO L495 AbstractCegarLoop]: Abstraction has 589 states and 691 transitions. [2022-11-19 07:23:44,117 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 7.285714285714286) internal successors, (51), 7 states have internal predecessors, (51), 3 states have call successors, (10), 3 states have call predecessors, (10), 5 states have return successors, (9), 5 states have call predecessors, (9), 3 states have call successors, (9) [2022-11-19 07:23:44,117 INFO L276 IsEmpty]: Start isEmpty. Operand 589 states and 691 transitions. [2022-11-19 07:23:44,119 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-11-19 07:23:44,120 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:23:44,120 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:23:44,133 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-19 07:23:44,325 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:23:44,326 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:23:44,326 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:23:44,326 INFO L85 PathProgramCache]: Analyzing trace with hash -906160309, now seen corresponding path program 1 times [2022-11-19 07:23:44,326 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:23:44,327 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [335474060] [2022-11-19 07:23:44,327 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:23:44,327 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:23:44,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:23:44,654 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 6 proven. 16 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-19 07:23:44,655 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:23:44,655 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [335474060] [2022-11-19 07:23:44,655 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [335474060] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:23:44,655 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1743595037] [2022-11-19 07:23:44,655 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:23:44,656 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:23:44,656 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:23:44,657 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:23:44,681 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-19 07:23:44,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:23:44,773 INFO L263 TraceCheckSpWp]: Trace formula consists of 315 conjuncts, 23 conjunts are in the unsatisfiable core [2022-11-19 07:23:44,779 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:23:44,883 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-19 07:23:44,883 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 07:23:44,883 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1743595037] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:23:44,883 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 07:23:44,883 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [13] total 16 [2022-11-19 07:23:44,884 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1899815453] [2022-11-19 07:23:44,884 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:23:44,884 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-19 07:23:44,884 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:23:44,885 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-19 07:23:44,885 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=205, Unknown=0, NotChecked=0, Total=240 [2022-11-19 07:23:44,886 INFO L87 Difference]: Start difference. First operand 589 states and 691 transitions. Second operand has 9 states, 7 states have (on average 6.142857142857143) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-19 07:23:45,234 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:23:45,234 INFO L93 Difference]: Finished difference Result 1099 states and 1305 transitions. [2022-11-19 07:23:45,254 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-19 07:23:45,254 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 6.142857142857143) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) Word has length 73 [2022-11-19 07:23:45,255 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:23:45,256 INFO L225 Difference]: With dead ends: 1099 [2022-11-19 07:23:45,256 INFO L226 Difference]: Without dead ends: 0 [2022-11-19 07:23:45,258 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 98 GetRequests, 77 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 55 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=76, Invalid=430, Unknown=0, NotChecked=0, Total=506 [2022-11-19 07:23:45,259 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 56 mSDsluCounter, 278 mSDsCounter, 0 mSdLazyCounter, 259 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 61 SdHoareTripleChecker+Valid, 344 SdHoareTripleChecker+Invalid, 266 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 259 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-19 07:23:45,260 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [61 Valid, 344 Invalid, 266 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 259 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-19 07:23:45,261 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-19 07:23:45,261 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-19 07:23:45,261 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:23:45,261 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-19 07:23:45,261 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 73 [2022-11-19 07:23:45,262 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:23:45,262 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-19 07:23:45,262 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 6.142857142857143) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-19 07:23:45,262 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-19 07:23:45,262 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-19 07:23:45,266 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-19 07:23:45,278 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-19 07:23:45,479 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-19 07:23:45,481 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-19 07:23:52,379 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 362 369) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (= 0 ~systemActive~0)) [2022-11-19 07:23:52,380 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 362 369) no Hoare annotation was computed. [2022-11-19 07:23:52,380 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 295 301) no Hoare annotation was computed. [2022-11-19 07:23:52,380 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 295 301) the Hoare annotation is: true [2022-11-19 07:23:52,381 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 124 135) the Hoare annotation is: (let ((.cse1 (= |old(~methaneLevelCritical~0)| 0))) (let ((.cse5 (not (= ~pumpRunning~0 0))) (.cse4 (not .cse1)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse6 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (not .cse2) .cse3) (or .cse4 .cse5 .cse2 .cse0 .cse6) (or .cse4 .cse5 .cse2 .cse6 (not (= 0 ~systemActive~0))) (or .cse4 .cse2 .cse0 .cse3 .cse6)))) [2022-11-19 07:23:52,381 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 124 135) no Hoare annotation was computed. [2022-11-19 07:23:52,381 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 845 874) no Hoare annotation was computed. [2022-11-19 07:23:52,381 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 845 874) the Hoare annotation is: true [2022-11-19 07:23:52,381 INFO L899 garLoopResultBuilder]: For program point L859(lines 859 863) no Hoare annotation was computed. [2022-11-19 07:23:52,381 INFO L902 garLoopResultBuilder]: At program point L859-1(lines 859 863) the Hoare annotation is: true [2022-11-19 07:23:52,382 INFO L902 garLoopResultBuilder]: At program point L855-2(lines 855 869) the Hoare annotation is: true [2022-11-19 07:23:52,382 INFO L902 garLoopResultBuilder]: At program point L851(line 851) the Hoare annotation is: true [2022-11-19 07:23:52,382 INFO L899 garLoopResultBuilder]: For program point L851-1(line 851) no Hoare annotation was computed. [2022-11-19 07:23:52,382 INFO L902 garLoopResultBuilder]: At program point L870(lines 845 874) the Hoare annotation is: true [2022-11-19 07:23:52,382 INFO L899 garLoopResultBuilder]: For program point L866(line 866) no Hoare annotation was computed. [2022-11-19 07:23:52,382 INFO L899 garLoopResultBuilder]: For program point L275-1(lines 274 293) no Hoare annotation was computed. [2022-11-19 07:23:52,383 INFO L899 garLoopResultBuilder]: For program point L337(lines 337 345) no Hoare annotation was computed. [2022-11-19 07:23:52,383 INFO L899 garLoopResultBuilder]: For program point L333(lines 333 350) no Hoare annotation was computed. [2022-11-19 07:23:52,383 INFO L895 garLoopResultBuilder]: At program point L375(line 375) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 (= ~methAndRunningLastTime~0 0) .cse0 .cse1) (or .cse3 .cse2 .cse0) (or .cse3 (not (= 0 ~systemActive~0))))) [2022-11-19 07:23:52,383 INFO L895 garLoopResultBuilder]: At program point L375-1(line 375) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2) (or .cse3 .cse0 .cse1) (or .cse1 .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isMethaneAlarm_#t~ret17#1| ~methaneLevelCritical~0))) (or .cse3 (not (= 0 ~systemActive~0))))) [2022-11-19 07:23:52,384 INFO L899 garLoopResultBuilder]: For program point L74(lines 74 84) no Hoare annotation was computed. [2022-11-19 07:23:52,384 INFO L895 garLoopResultBuilder]: At program point L70(lines 70 87) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~0#1| ~methaneLevelCritical~0))) (let ((.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (and .cse1 (or .cse0 .cse10 (= ~waterLevel~0 1)) .cse9)) (.cse7 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3) (or .cse0 .cse2 .cse4 .cse3 .cse5) (or .cse2 .cse4 .cse3 .cse6 .cse5) (or .cse0 .cse2 .cse4 .cse5 .cse7) (or .cse0 .cse2 .cse8 .cse3 (and (<= 1 ~pumpRunning~0) .cse4 .cse9 .cse10)) (let ((.cse11 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0))) (or .cse3 (and .cse1 .cse9 .cse11 (not (= |timeShift_processEnvironment_~tmp~3#1| 0))) .cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~0#1| 0) .cse11))) (or .cse0 .cse8 .cse7)))) [2022-11-19 07:23:52,385 INFO L895 garLoopResultBuilder]: At program point L70-1(lines 62 90) the Hoare annotation is: (let ((.cse15 (= ~methaneLevelCritical~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse9 (or .cse0 .cse13 (= ~waterLevel~0 1))) (.cse14 (= 1 ~systemActive~0)) (.cse12 (<= 1 ~pumpRunning~0)) (.cse16 (not .cse15)) (.cse5 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~0#1| ~methaneLevelCritical~0))) (let ((.cse8 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~0#1| 0)) (.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse10 (and .cse12 .cse16 .cse5 .cse13)) (.cse11 (and .cse7 .cse1 .cse4 .cse9 .cse14 .cse16 .cse5)) (.cse3 (not .cse14))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3) (let ((.cse6 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0))) (or (and .cse1 .cse4 .cse5 .cse6 (not (= |timeShift_processEnvironment_~tmp~3#1| 0))) .cse3 (not (<= 1 |old(~pumpRunning~0)|)) (and .cse7 .cse4 .cse5 .cse8 .cse6))) (or .cse0 (and .cse1 .cse4 .cse9 .cse5) (not (= 0 ~systemActive~0))) (or .cse0 .cse2 .cse10 .cse11 (and .cse12 .cse4 .cse8 .cse13) .cse3 (and .cse7 .cse1 .cse4 .cse9 .cse14 .cse8)) (or .cse0 .cse2 .cse10 .cse11 .cse15 .cse3))))) [2022-11-19 07:23:52,385 INFO L895 garLoopResultBuilder]: At program point L343(line 343) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~methaneLevelCritical~0 0) (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0))) (or .cse2 (= ~methAndRunningLastTime~0 0) .cse0 .cse1) (or .cse3 .cse2 .cse0) (or .cse3 (not (= 0 ~systemActive~0))))) [2022-11-19 07:23:52,385 INFO L895 garLoopResultBuilder]: At program point L339(line 339) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2) (or .cse3 .cse0 .cse1) (or .cse1 .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0) (not (= |timeShift_processEnvironment_~tmp~3#1| 0)))) (or .cse3 (not (= 0 ~systemActive~0))))) [2022-11-19 07:23:52,386 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 81) no Hoare annotation was computed. [2022-11-19 07:23:52,386 INFO L895 garLoopResultBuilder]: At program point L839(line 839) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse1 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0) (or .cse1 (not (= 0 ~systemActive~0))))) [2022-11-19 07:23:52,386 INFO L895 garLoopResultBuilder]: At program point L348(line 348) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse1 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (or (= |old(~waterLevel~0)| ~waterLevel~0) (= ~waterLevel~0 1)))) (or .cse1 (not (= 0 ~systemActive~0))))) [2022-11-19 07:23:52,386 INFO L895 garLoopResultBuilder]: At program point L348-1(lines 329 353) the Hoare annotation is: (let ((.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (= ~pumpRunning~0 0))) (and (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (= ~waterLevel~0 1))) (or (and (<= 1 ~pumpRunning~0) (not .cse0) .cse1 .cse2) .cse3 .cse4 .cse5 (and .cse6 .cse1 (or .cse2 .cse0)))) (or .cse4 .cse1 .cse5 .cse7) (or .cse3 (not (= 0 ~systemActive~0))) (let ((.cse8 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0))) (or .cse5 .cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~methaneLevelCritical~0 0) .cse8) (and .cse6 .cse8 (not (= |timeShift_processEnvironment_~tmp~3#1| 0))))))) [2022-11-19 07:23:52,387 INFO L899 garLoopResultBuilder]: For program point L282-1(lines 282 288) no Hoare annotation was computed. [2022-11-19 07:23:52,387 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 271 294) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= 0 ~systemActive~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5)) (or .cse0 (and .cse3 .cse5) .cse6) (or .cse0 .cse1 .cse4 (not (= ~methaneLevelCritical~0 0)) .cse6) (or .cse1 .cse4 .cse2 .cse7) (or .cse2 .cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5)))) [2022-11-19 07:23:52,387 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 271 294) no Hoare annotation was computed. [2022-11-19 07:23:52,387 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 839) no Hoare annotation was computed. [2022-11-19 07:23:52,388 INFO L895 garLoopResultBuilder]: At program point L68(line 68) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= ~waterLevel~0 1))) (let ((.cse2 (or .cse0 .cse6 .cse4)) (.cse3 (not (= 0 ~systemActive~0))) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse8 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 (and .cse1 .cse2) .cse3) (or (and (<= 1 ~pumpRunning~0) (not .cse4) .cse5 .cse6) .cse0 .cse7 .cse8 (and .cse1 .cse5 .cse2)) (or .cse0 .cse7 .cse5 (not .cse9) .cse3) (or .cse7 .cse5 .cse8 .cse10) (let ((.cse11 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0))) (or .cse8 .cse10 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9 .cse11) (and .cse1 .cse11 (not (= |timeShift_processEnvironment_~tmp~3#1| 0)))))))) [2022-11-19 07:23:52,388 INFO L899 garLoopResultBuilder]: For program point L68-1(line 68) no Hoare annotation was computed. [2022-11-19 07:23:52,388 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 136 144) the Hoare annotation is: true [2022-11-19 07:23:52,388 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 136 144) no Hoare annotation was computed. [2022-11-19 07:23:52,389 INFO L902 garLoopResultBuilder]: At program point L259(lines 196 263) the Hoare annotation is: true [2022-11-19 07:23:52,389 INFO L899 garLoopResultBuilder]: For program point L226(lines 226 232) no Hoare annotation was computed. [2022-11-19 07:23:52,389 INFO L899 garLoopResultBuilder]: For program point L226-1(lines 226 232) no Hoare annotation was computed. [2022-11-19 07:23:52,389 INFO L899 garLoopResultBuilder]: For program point L449(lines 449 455) no Hoare annotation was computed. [2022-11-19 07:23:52,389 INFO L895 garLoopResultBuilder]: At program point L449-1(lines 449 455) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (not (= 0 ~systemActive~0))) (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1))) [2022-11-19 07:23:52,389 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-19 07:23:52,390 INFO L895 garLoopResultBuilder]: At program point L218(line 218) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (and .cse0 .cse3 .cse1 .cse2) (and .cse4 .cse3 .cse1 .cse2) (and .cse4 .cse3 .cse2 (= 0 ~systemActive~0)))) [2022-11-19 07:23:52,390 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-19 07:23:52,390 INFO L895 garLoopResultBuilder]: At program point L256(lines 205 257) the Hoare annotation is: false [2022-11-19 07:23:52,390 INFO L899 garLoopResultBuilder]: For program point L244(lines 244 250) no Hoare annotation was computed. [2022-11-19 07:23:52,391 INFO L895 garLoopResultBuilder]: At program point L244-2(lines 236 251) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1) (and .cse2 .cse1 (= 0 ~systemActive~0)) (and .cse2 (= ~methAndRunningLastTime~0 0) .cse0 .cse1))) [2022-11-19 07:23:52,391 INFO L899 garLoopResultBuilder]: For program point L207(lines 206 255) no Hoare annotation was computed. [2022-11-19 07:23:52,391 INFO L895 garLoopResultBuilder]: At program point L236(lines 236 251) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1) (and .cse2 .cse3 .cse0 .cse1) (and .cse2 .cse3 .cse1 (= 0 ~systemActive~0)))) [2022-11-19 07:23:52,391 INFO L895 garLoopResultBuilder]: At program point L228(line 228) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (and .cse0 .cse3 .cse1 .cse2) (and .cse4 .cse3 .cse1 .cse2) (and .cse4 .cse3 .cse2 (= 0 ~systemActive~0)))) [2022-11-19 07:23:52,391 INFO L895 garLoopResultBuilder]: At program point L451(line 451) the Hoare annotation is: (and (<= 1 ~pumpRunning~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2022-11-19 07:23:52,392 INFO L895 garLoopResultBuilder]: At program point L930(lines 930 937) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-19 07:23:52,392 INFO L902 garLoopResultBuilder]: At program point L930-2(lines 930 937) the Hoare annotation is: true [2022-11-19 07:23:52,392 INFO L895 garLoopResultBuilder]: At program point L253(lines 206 255) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (and .cse0 .cse3 .cse1 .cse2) (and .cse4 .cse3 .cse1 .cse2) (and .cse4 .cse3 .cse2 (= 0 ~systemActive~0)))) [2022-11-19 07:23:52,392 INFO L899 garLoopResultBuilder]: For program point L216(lines 216 222) no Hoare annotation was computed. [2022-11-19 07:23:52,392 INFO L899 garLoopResultBuilder]: For program point L216-1(lines 216 222) no Hoare annotation was computed. [2022-11-19 07:23:52,393 INFO L899 garLoopResultBuilder]: For program point L322-1(lines 303 327) no Hoare annotation was computed. [2022-11-19 07:23:52,393 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 303 327) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0))))) [2022-11-19 07:23:52,393 INFO L895 garLoopResultBuilder]: At program point L317(line 317) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (or (not (= ~waterLevel~0 1)) (and (<= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0) (< 0 (+ |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 1))))) (not (= ~methAndRunningLastTime~0 0))))) [2022-11-19 07:23:52,393 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 303 327) no Hoare annotation was computed. [2022-11-19 07:23:52,394 INFO L895 garLoopResultBuilder]: At program point L311(lines 311 319) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (or (not (= ~waterLevel~0 1)) (and (<= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0) (< 0 (+ |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 1))))) (not (= ~methAndRunningLastTime~0 0))))) [2022-11-19 07:23:52,394 INFO L895 garLoopResultBuilder]: At program point L307(lines 307 324) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0))))) [2022-11-19 07:23:52,394 INFO L895 garLoopResultBuilder]: At program point L322(line 322) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0))))) [2022-11-19 07:23:52,394 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 112 123) no Hoare annotation was computed. [2022-11-19 07:23:52,394 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 112 123) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 ~pumpRunning~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse2 .cse3 (not (= 0 ~systemActive~0))) (or (= ~methaneLevelCritical~0 0) .cse1 .cse4 .cse2) (or .cse1 .cse4 .cse2 .cse3))) [2022-11-19 07:23:52,398 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:23:52,400 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-19 07:23:52,442 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 07:23:52 BoogieIcfgContainer [2022-11-19 07:23:52,442 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-19 07:23:52,442 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-19 07:23:52,442 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-19 07:23:52,443 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-19 07:23:52,443 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:23:37" (3/4) ... [2022-11-19 07:23:52,446 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-19 07:23:52,458 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-19 07:23:52,458 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-19 07:23:52,458 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-19 07:23:52,458 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-19 07:23:52,459 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-19 07:23:52,460 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-19 07:23:52,461 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 07:23:52,461 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-19 07:23:52,474 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 43 nodes and edges [2022-11-19 07:23:52,475 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-11-19 07:23:52,476 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 6 nodes and edges [2022-11-19 07:23:52,476 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-19 07:23:52,476 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-19 07:23:52,505 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning)))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) [2022-11-19 07:23:52,506 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 <= pumpRunning && !(waterLevel == 1)) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && (\old(waterLevel) == waterLevel || waterLevel == 1))) && (((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && methaneLevelCritical == 0) && tmp == methaneLevelCritical)) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && !(tmp == 0))) [2022-11-19 07:23:52,507 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) [2022-11-19 07:23:52,508 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && ((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || waterLevel == 1)) && tmp == methaneLevelCritical)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel))) && (((!(1 == systemActive) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && tmp == methaneLevelCritical) && !(tmp == 0))) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && tmp == 0) && tmp == methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && ((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || waterLevel == 1)) && tmp == methaneLevelCritical)) || !(0 == systemActive)) [2022-11-19 07:23:52,508 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && aux-isMethaneLevelCritical()-aux == methaneLevelCritical))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-19 07:23:52,509 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) && (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == methaneLevelCritical) && tmp == methaneLevelCritical) && !(tmp == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == methaneLevelCritical) && tmp == 0) && tmp == methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && ((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || waterLevel == 1)) && tmp == methaneLevelCritical)) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && ((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || waterLevel == 1)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && ((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || waterLevel == 1)) && 1 == systemActive) && tmp == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && ((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || waterLevel == 1)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical)) || methaneLevelCritical == 0) || !(1 == systemActive)) [2022-11-19 07:23:52,510 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-19 07:23:52,510 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && (!(waterLevel == 1) || (tmp <= 0 && 0 < tmp + 1)))) || !(methAndRunningLastTime == 0)) [2022-11-19 07:23:52,566 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/witness.graphml [2022-11-19 07:23:52,567 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-19 07:23:52,568 INFO L158 Benchmark]: Toolchain (without parser) took 16456.96ms. Allocated memory was 94.4MB in the beginning and 255.9MB in the end (delta: 161.5MB). Free memory was 61.7MB in the beginning and 168.6MB in the end (delta: -106.9MB). Peak memory consumption was 53.1MB. Max. memory is 16.1GB. [2022-11-19 07:23:52,568 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 94.4MB. Free memory is still 50.7MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-19 07:23:52,569 INFO L158 Benchmark]: CACSL2BoogieTranslator took 579.80ms. Allocated memory is still 94.4MB. Free memory was 61.5MB in the beginning and 62.4MB in the end (delta: -848.2kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-11-19 07:23:52,569 INFO L158 Benchmark]: Boogie Procedure Inliner took 74.50ms. Allocated memory is still 94.4MB. Free memory was 62.4MB in the beginning and 60.0MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-19 07:23:52,570 INFO L158 Benchmark]: Boogie Preprocessor took 27.50ms. Allocated memory is still 94.4MB. Free memory was 60.0MB in the beginning and 58.6MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-19 07:23:52,571 INFO L158 Benchmark]: RCFGBuilder took 692.01ms. Allocated memory was 94.4MB in the beginning and 121.6MB in the end (delta: 27.3MB). Free memory was 58.2MB in the beginning and 89.0MB in the end (delta: -30.8MB). Peak memory consumption was 19.5MB. Max. memory is 16.1GB. [2022-11-19 07:23:52,571 INFO L158 Benchmark]: TraceAbstraction took 14938.39ms. Allocated memory was 121.6MB in the beginning and 255.9MB in the end (delta: 134.2MB). Free memory was 88.5MB in the beginning and 174.9MB in the end (delta: -86.4MB). Peak memory consumption was 145.5MB. Max. memory is 16.1GB. [2022-11-19 07:23:52,572 INFO L158 Benchmark]: Witness Printer took 124.81ms. Allocated memory is still 255.9MB. Free memory was 173.8MB in the beginning and 168.6MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-19 07:23:52,576 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 94.4MB. Free memory is still 50.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 579.80ms. Allocated memory is still 94.4MB. Free memory was 61.5MB in the beginning and 62.4MB in the end (delta: -848.2kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 74.50ms. Allocated memory is still 94.4MB. Free memory was 62.4MB in the beginning and 60.0MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 27.50ms. Allocated memory is still 94.4MB. Free memory was 60.0MB in the beginning and 58.6MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 692.01ms. Allocated memory was 94.4MB in the beginning and 121.6MB in the end (delta: 27.3MB). Free memory was 58.2MB in the beginning and 89.0MB in the end (delta: -30.8MB). Peak memory consumption was 19.5MB. Max. memory is 16.1GB. * TraceAbstraction took 14938.39ms. Allocated memory was 121.6MB in the beginning and 255.9MB in the end (delta: 134.2MB). Free memory was 88.5MB in the beginning and 174.9MB in the end (delta: -86.4MB). Peak memory consumption was 145.5MB. Max. memory is 16.1GB. * Witness Printer took 124.81ms. Allocated memory is still 255.9MB. Free memory was 173.8MB in the beginning and 168.6MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 839]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 66 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 14.8s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 3.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 866 SdHoareTripleChecker+Valid, 1.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 840 mSDsluCounter, 2500 SdHoareTripleChecker+Invalid, 1.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1637 mSDsCounter, 214 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1562 IncrementalHoareTripleChecker+Invalid, 1776 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 214 mSolverCounterUnsat, 863 mSDtfsCounter, 1562 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 325 GetRequests, 232 SyntacticMatches, 0 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 234 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=604occurred in iteration=6, InterpolantAutomatonStates: 93, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 218 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 38 LocationsWithAnnotation, 1714 PreInvPairs, 1915 NumberOfFragments, 1697 HoareAnnotationTreeSize, 1714 FomulaSimplifications, 3822 FormulaSimplificationTreeSizeReduction, 0.9s HoareSimplificationTime, 38 FomulaSimplificationsInter, 25361 FormulaSimplificationTreeSizeReductionInter, 5.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 2.3s InterpolantComputationTime, 744 NumberOfCodeBlocks, 744 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 729 ConstructedInterpolants, 0 QuantifiedInterpolants, 1662 SizeOfPredicates, 13 NumberOfNonLiveVariables, 920 ConjunctsInSsa, 50 ConjunctsInUnsatCore, 15 InterpolantComputations, 12 PerfectInterpolantSequences, 230/256 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 206]: Loop Invariant Derived loop invariant: (((((1 <= pumpRunning && 1 == systemActive) && !(methaneLevelCritical == 0)) && splverifierCounter == 0) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 205]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 196]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 845]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning)))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 307]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 329]: Loop Invariant Derived loop invariant: (((((((((1 <= pumpRunning && !(waterLevel == 1)) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && (\old(waterLevel) == waterLevel || waterLevel == 1))) && (((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && methaneLevelCritical == 0) && tmp == methaneLevelCritical)) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && !(tmp == 0))) - InvariantResult [Line: 236]: Loop Invariant Derived loop invariant: (((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && splverifierCounter == 0) && !(0 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 70]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && ((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || waterLevel == 1)) && tmp == methaneLevelCritical)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel))) && (((!(1 == systemActive) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && tmp == methaneLevelCritical) && !(tmp == 0))) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && tmp == 0) && tmp == methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && ((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || waterLevel == 1)) && tmp == methaneLevelCritical)) || !(0 == systemActive)) - InvariantResult [Line: 855]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) && (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == methaneLevelCritical) && tmp == methaneLevelCritical) && !(tmp == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == methaneLevelCritical) && tmp == 0) && tmp == methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && ((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || waterLevel == 1)) && tmp == methaneLevelCritical)) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && ((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || waterLevel == 1)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && ((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || waterLevel == 1)) && 1 == systemActive) && tmp == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && ((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || waterLevel == 1)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical)) || methaneLevelCritical == 0) || !(1 == systemActive)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 311]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && (!(waterLevel == 1) || (tmp <= 0 && 0 < tmp + 1)))) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 375]: Loop Invariant Derived loop invariant: (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && aux-isMethaneLevelCritical()-aux == methaneLevelCritical))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) RESULT: Ultimate proved your program to be correct! [2022-11-19 07:23:52,638 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7bca55fc-6518-4574-a0eb-7baf0877b7c8/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE