./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 80b4c453e300455caffbcb636daccd3af095acb6ed433fb3111a61f5db77a0b9 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-19 08:19:06,289 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-19 08:19:06,291 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-19 08:19:06,332 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-19 08:19:06,335 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-19 08:19:06,339 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-19 08:19:06,342 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-19 08:19:06,349 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-19 08:19:06,354 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-19 08:19:06,360 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-19 08:19:06,362 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-19 08:19:06,364 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-19 08:19:06,365 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-19 08:19:06,370 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-19 08:19:06,371 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-19 08:19:06,373 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-19 08:19:06,375 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-19 08:19:06,377 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-19 08:19:06,379 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-19 08:19:06,381 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-19 08:19:06,386 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-19 08:19:06,387 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-19 08:19:06,389 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-19 08:19:06,394 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-19 08:19:06,399 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-19 08:19:06,400 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-19 08:19:06,400 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-19 08:19:06,401 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-19 08:19:06,401 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-19 08:19:06,402 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-19 08:19:06,402 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-19 08:19:06,403 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-19 08:19:06,404 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-19 08:19:06,405 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-19 08:19:06,405 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-19 08:19:06,411 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-19 08:19:06,413 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-19 08:19:06,413 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-19 08:19:06,413 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-19 08:19:06,414 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-19 08:19:06,415 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-19 08:19:06,416 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-19 08:19:06,461 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-19 08:19:06,461 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-19 08:19:06,462 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-19 08:19:06,462 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-19 08:19:06,463 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-19 08:19:06,463 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-19 08:19:06,463 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-19 08:19:06,463 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-19 08:19:06,464 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-19 08:19:06,464 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-19 08:19:06,465 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-19 08:19:06,465 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-19 08:19:06,465 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-19 08:19:06,466 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-19 08:19:06,466 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-19 08:19:06,466 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-19 08:19:06,466 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-19 08:19:06,466 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-19 08:19:06,467 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-19 08:19:06,467 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-19 08:19:06,468 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-19 08:19:06,468 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-19 08:19:06,468 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-19 08:19:06,470 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-19 08:19:06,470 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-19 08:19:06,471 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-19 08:19:06,471 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-19 08:19:06,471 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-19 08:19:06,471 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-19 08:19:06,471 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-19 08:19:06,472 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-19 08:19:06,472 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-19 08:19:06,472 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 08:19:06,473 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-19 08:19:06,473 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-19 08:19:06,473 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-19 08:19:06,473 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-19 08:19:06,473 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-19 08:19:06,473 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-19 08:19:06,474 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-19 08:19:06,474 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-19 08:19:06,474 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 80b4c453e300455caffbcb636daccd3af095acb6ed433fb3111a61f5db77a0b9 [2022-11-19 08:19:06,784 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-19 08:19:06,811 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-19 08:19:06,814 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-19 08:19:06,816 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-19 08:19:06,817 INFO L275 PluginConnector]: CDTParser initialized [2022-11-19 08:19:06,819 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/../../sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c [2022-11-19 08:19:06,908 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/data/055836d21/f08f0948499e46a79971202226e0d446/FLAG8a423457c [2022-11-19 08:19:07,621 INFO L306 CDTParser]: Found 1 translation units. [2022-11-19 08:19:07,627 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c [2022-11-19 08:19:07,647 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/data/055836d21/f08f0948499e46a79971202226e0d446/FLAG8a423457c [2022-11-19 08:19:07,902 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/data/055836d21/f08f0948499e46a79971202226e0d446 [2022-11-19 08:19:07,905 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-19 08:19:07,908 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-19 08:19:07,913 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-19 08:19:07,914 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-19 08:19:07,918 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-19 08:19:07,919 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 08:19:07" (1/1) ... [2022-11-19 08:19:07,922 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3028d009 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:19:07, skipping insertion in model container [2022-11-19 08:19:07,923 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 08:19:07" (1/1) ... [2022-11-19 08:19:07,932 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-19 08:19:08,003 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-19 08:19:08,281 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c[1605,1618] [2022-11-19 08:19:08,403 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 08:19:08,413 INFO L203 MainTranslator]: Completed pre-run [2022-11-19 08:19:08,429 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c[1605,1618] [2022-11-19 08:19:08,490 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 08:19:08,509 INFO L208 MainTranslator]: Completed translation [2022-11-19 08:19:08,510 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:19:08 WrapperNode [2022-11-19 08:19:08,510 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-19 08:19:08,512 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-19 08:19:08,512 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-19 08:19:08,512 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-19 08:19:08,521 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:19:08" (1/1) ... [2022-11-19 08:19:08,535 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:19:08" (1/1) ... [2022-11-19 08:19:08,563 INFO L138 Inliner]: procedures = 58, calls = 103, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 223 [2022-11-19 08:19:08,563 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-19 08:19:08,564 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-19 08:19:08,564 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-19 08:19:08,564 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-19 08:19:08,575 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:19:08" (1/1) ... [2022-11-19 08:19:08,575 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:19:08" (1/1) ... [2022-11-19 08:19:08,577 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:19:08" (1/1) ... [2022-11-19 08:19:08,578 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:19:08" (1/1) ... [2022-11-19 08:19:08,584 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:19:08" (1/1) ... [2022-11-19 08:19:08,590 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:19:08" (1/1) ... [2022-11-19 08:19:08,592 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:19:08" (1/1) ... [2022-11-19 08:19:08,593 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:19:08" (1/1) ... [2022-11-19 08:19:08,596 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-19 08:19:08,597 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-19 08:19:08,598 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-19 08:19:08,598 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-19 08:19:08,599 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:19:08" (1/1) ... [2022-11-19 08:19:08,605 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 08:19:08,617 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 08:19:08,632 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-19 08:19:08,670 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-19 08:19:08,709 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-19 08:19:08,710 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-19 08:19:08,710 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-19 08:19:08,710 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-19 08:19:08,710 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-19 08:19:08,710 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-19 08:19:08,711 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-19 08:19:08,711 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-19 08:19:08,711 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-19 08:19:08,711 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 08:19:08,711 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 08:19:08,712 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-19 08:19:08,712 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-19 08:19:08,712 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-19 08:19:08,712 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-19 08:19:08,712 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-19 08:19:08,713 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-19 08:19:08,713 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-19 08:19:08,713 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-19 08:19:08,713 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-19 08:19:08,867 INFO L235 CfgBuilder]: Building ICFG [2022-11-19 08:19:08,870 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-19 08:19:09,248 INFO L276 CfgBuilder]: Performing block encoding [2022-11-19 08:19:09,363 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-19 08:19:09,363 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-19 08:19:09,366 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 08:19:09 BoogieIcfgContainer [2022-11-19 08:19:09,366 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-19 08:19:09,369 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-19 08:19:09,369 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-19 08:19:09,373 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-19 08:19:09,373 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 08:19:07" (1/3) ... [2022-11-19 08:19:09,374 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6078444e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 08:19:09, skipping insertion in model container [2022-11-19 08:19:09,374 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:19:08" (2/3) ... [2022-11-19 08:19:09,374 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6078444e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 08:19:09, skipping insertion in model container [2022-11-19 08:19:09,375 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 08:19:09" (3/3) ... [2022-11-19 08:19:09,376 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product59.cil.c [2022-11-19 08:19:09,413 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-19 08:19:09,413 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-19 08:19:09,485 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-19 08:19:09,494 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@12557d7f, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-19 08:19:09,494 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-19 08:19:09,499 INFO L276 IsEmpty]: Start isEmpty. Operand has 66 states, 42 states have (on average 1.4523809523809523) internal successors, (61), 51 states have internal predecessors, (61), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2022-11-19 08:19:09,510 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-19 08:19:09,510 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 08:19:09,511 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:19:09,511 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 08:19:09,517 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 08:19:09,517 INFO L85 PathProgramCache]: Analyzing trace with hash -294393006, now seen corresponding path program 1 times [2022-11-19 08:19:09,528 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 08:19:09,529 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1233316830] [2022-11-19 08:19:09,529 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:19:09,531 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 08:19:09,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:19:09,774 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 08:19:09,775 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 08:19:09,775 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1233316830] [2022-11-19 08:19:09,776 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1233316830] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 08:19:09,776 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 08:19:09,777 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-19 08:19:09,778 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1694211690] [2022-11-19 08:19:09,779 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 08:19:09,784 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-19 08:19:09,784 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 08:19:09,816 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-19 08:19:09,817 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-19 08:19:09,819 INFO L87 Difference]: Start difference. First operand has 66 states, 42 states have (on average 1.4523809523809523) internal successors, (61), 51 states have internal predecessors, (61), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 08:19:09,901 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 08:19:09,901 INFO L93 Difference]: Finished difference Result 130 states and 179 transitions. [2022-11-19 08:19:09,906 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-19 08:19:09,908 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-11-19 08:19:09,908 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 08:19:09,929 INFO L225 Difference]: With dead ends: 130 [2022-11-19 08:19:09,929 INFO L226 Difference]: Without dead ends: 61 [2022-11-19 08:19:09,934 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-19 08:19:09,943 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 69 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 08:19:09,944 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 69 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 08:19:09,968 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61 states. [2022-11-19 08:19:10,011 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61 to 61. [2022-11-19 08:19:10,013 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 39 states have (on average 1.358974358974359) internal successors, (53), 47 states have internal predecessors, (53), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-19 08:19:10,023 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 80 transitions. [2022-11-19 08:19:10,025 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 80 transitions. Word has length 17 [2022-11-19 08:19:10,026 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 08:19:10,027 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 80 transitions. [2022-11-19 08:19:10,028 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 08:19:10,029 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 80 transitions. [2022-11-19 08:19:10,035 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-19 08:19:10,035 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 08:19:10,036 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:19:10,036 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-19 08:19:10,038 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 08:19:10,041 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 08:19:10,042 INFO L85 PathProgramCache]: Analyzing trace with hash 1476513627, now seen corresponding path program 1 times [2022-11-19 08:19:10,042 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 08:19:10,042 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [978699493] [2022-11-19 08:19:10,043 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:19:10,043 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 08:19:10,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:19:10,241 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 08:19:10,242 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 08:19:10,243 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [978699493] [2022-11-19 08:19:10,243 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [978699493] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 08:19:10,244 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 08:19:10,244 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 08:19:10,244 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [377609708] [2022-11-19 08:19:10,246 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 08:19:10,250 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 08:19:10,252 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 08:19:10,254 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 08:19:10,258 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 08:19:10,259 INFO L87 Difference]: Start difference. First operand 61 states and 80 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 08:19:10,359 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 08:19:10,360 INFO L93 Difference]: Finished difference Result 94 states and 122 transitions. [2022-11-19 08:19:10,360 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 08:19:10,360 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-11-19 08:19:10,361 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 08:19:10,362 INFO L225 Difference]: With dead ends: 94 [2022-11-19 08:19:10,362 INFO L226 Difference]: Without dead ends: 53 [2022-11-19 08:19:10,363 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 08:19:10,364 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 14 mSDsluCounter, 38 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 93 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 08:19:10,365 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 93 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 08:19:10,366 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2022-11-19 08:19:10,373 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2022-11-19 08:19:10,374 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 34 states have (on average 1.3823529411764706) internal successors, (47), 42 states have internal predecessors, (47), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-19 08:19:10,375 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 69 transitions. [2022-11-19 08:19:10,375 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 69 transitions. Word has length 18 [2022-11-19 08:19:10,375 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 08:19:10,375 INFO L495 AbstractCegarLoop]: Abstraction has 53 states and 69 transitions. [2022-11-19 08:19:10,376 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 08:19:10,376 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 69 transitions. [2022-11-19 08:19:10,377 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-19 08:19:10,377 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 08:19:10,378 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:19:10,378 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-19 08:19:10,378 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 08:19:10,379 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 08:19:10,379 INFO L85 PathProgramCache]: Analyzing trace with hash 1682934920, now seen corresponding path program 1 times [2022-11-19 08:19:10,379 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 08:19:10,379 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2021186522] [2022-11-19 08:19:10,380 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:19:10,380 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 08:19:10,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:19:10,462 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 08:19:10,462 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 08:19:10,462 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2021186522] [2022-11-19 08:19:10,463 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2021186522] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 08:19:10,463 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 08:19:10,463 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 08:19:10,463 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1165536350] [2022-11-19 08:19:10,464 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 08:19:10,464 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 08:19:10,464 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 08:19:10,465 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 08:19:10,465 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 08:19:10,465 INFO L87 Difference]: Start difference. First operand 53 states and 69 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 08:19:10,561 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 08:19:10,561 INFO L93 Difference]: Finished difference Result 155 states and 204 transitions. [2022-11-19 08:19:10,564 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 08:19:10,564 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2022-11-19 08:19:10,565 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 08:19:10,567 INFO L225 Difference]: With dead ends: 155 [2022-11-19 08:19:10,567 INFO L226 Difference]: Without dead ends: 104 [2022-11-19 08:19:10,568 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 08:19:10,569 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 56 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 128 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 08:19:10,570 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 128 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 08:19:10,571 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104 states. [2022-11-19 08:19:10,607 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104 to 101. [2022-11-19 08:19:10,608 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 64 states have (on average 1.390625) internal successors, (89), 79 states have internal predecessors, (89), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2022-11-19 08:19:10,609 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 133 transitions. [2022-11-19 08:19:10,610 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 133 transitions. Word has length 21 [2022-11-19 08:19:10,610 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 08:19:10,610 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 133 transitions. [2022-11-19 08:19:10,610 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 08:19:10,611 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 133 transitions. [2022-11-19 08:19:10,612 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-19 08:19:10,612 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 08:19:10,613 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:19:10,613 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-19 08:19:10,613 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 08:19:10,616 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 08:19:10,616 INFO L85 PathProgramCache]: Analyzing trace with hash 1949785870, now seen corresponding path program 1 times [2022-11-19 08:19:10,616 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 08:19:10,619 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1119805807] [2022-11-19 08:19:10,619 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:19:10,619 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 08:19:10,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:19:10,874 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 08:19:10,875 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 08:19:10,875 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1119805807] [2022-11-19 08:19:10,875 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1119805807] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 08:19:10,876 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 08:19:10,876 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 08:19:10,876 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [796603718] [2022-11-19 08:19:10,876 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 08:19:10,877 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 08:19:10,877 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 08:19:10,877 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 08:19:10,878 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 08:19:10,878 INFO L87 Difference]: Start difference. First operand 101 states and 133 transitions. Second operand has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 08:19:10,981 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 08:19:10,981 INFO L93 Difference]: Finished difference Result 278 states and 375 transitions. [2022-11-19 08:19:10,982 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 08:19:10,982 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-11-19 08:19:10,982 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 08:19:10,984 INFO L225 Difference]: With dead ends: 278 [2022-11-19 08:19:10,985 INFO L226 Difference]: Without dead ends: 179 [2022-11-19 08:19:10,986 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-19 08:19:10,988 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 39 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 39 SdHoareTripleChecker+Valid, 165 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 08:19:10,988 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [39 Valid, 165 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 08:19:10,989 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 179 states. [2022-11-19 08:19:11,013 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 179 to 170. [2022-11-19 08:19:11,014 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 170 states, 113 states have (on average 1.3185840707964602) internal successors, (149), 128 states have internal predecessors, (149), 30 states have call successors, (30), 26 states have call predecessors, (30), 26 states have return successors, (38), 27 states have call predecessors, (38), 30 states have call successors, (38) [2022-11-19 08:19:11,016 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 170 states to 170 states and 217 transitions. [2022-11-19 08:19:11,016 INFO L78 Accepts]: Start accepts. Automaton has 170 states and 217 transitions. Word has length 24 [2022-11-19 08:19:11,017 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 08:19:11,017 INFO L495 AbstractCegarLoop]: Abstraction has 170 states and 217 transitions. [2022-11-19 08:19:11,017 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 08:19:11,018 INFO L276 IsEmpty]: Start isEmpty. Operand 170 states and 217 transitions. [2022-11-19 08:19:11,019 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-19 08:19:11,019 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 08:19:11,019 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:19:11,020 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-19 08:19:11,020 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 08:19:11,020 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 08:19:11,021 INFO L85 PathProgramCache]: Analyzing trace with hash 906199045, now seen corresponding path program 1 times [2022-11-19 08:19:11,021 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 08:19:11,021 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2137168047] [2022-11-19 08:19:11,021 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:19:11,022 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 08:19:11,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:19:11,097 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-19 08:19:11,098 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 08:19:11,098 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2137168047] [2022-11-19 08:19:11,098 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2137168047] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 08:19:11,098 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 08:19:11,098 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 08:19:11,099 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [758494115] [2022-11-19 08:19:11,099 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 08:19:11,099 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 08:19:11,100 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 08:19:11,100 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 08:19:11,100 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 08:19:11,101 INFO L87 Difference]: Start difference. First operand 170 states and 217 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-19 08:19:11,177 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 08:19:11,177 INFO L93 Difference]: Finished difference Result 301 states and 394 transitions. [2022-11-19 08:19:11,177 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 08:19:11,178 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 33 [2022-11-19 08:19:11,178 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 08:19:11,181 INFO L225 Difference]: With dead ends: 301 [2022-11-19 08:19:11,181 INFO L226 Difference]: Without dead ends: 299 [2022-11-19 08:19:11,182 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 08:19:11,183 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 45 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 117 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 08:19:11,184 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [45 Valid, 117 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 08:19:11,185 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 299 states. [2022-11-19 08:19:11,226 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 299 to 293. [2022-11-19 08:19:11,227 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 293 states, 191 states have (on average 1.3141361256544504) internal successors, (251), 218 states have internal predecessors, (251), 55 states have call successors, (55), 47 states have call predecessors, (55), 46 states have return successors, (77), 46 states have call predecessors, (77), 55 states have call successors, (77) [2022-11-19 08:19:11,230 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 293 states to 293 states and 383 transitions. [2022-11-19 08:19:11,230 INFO L78 Accepts]: Start accepts. Automaton has 293 states and 383 transitions. Word has length 33 [2022-11-19 08:19:11,230 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 08:19:11,231 INFO L495 AbstractCegarLoop]: Abstraction has 293 states and 383 transitions. [2022-11-19 08:19:11,231 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-19 08:19:11,231 INFO L276 IsEmpty]: Start isEmpty. Operand 293 states and 383 transitions. [2022-11-19 08:19:11,235 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-19 08:19:11,235 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 08:19:11,236 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:19:11,236 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-19 08:19:11,236 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 08:19:11,237 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 08:19:11,237 INFO L85 PathProgramCache]: Analyzing trace with hash 1137865473, now seen corresponding path program 1 times [2022-11-19 08:19:11,237 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 08:19:11,237 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1146351556] [2022-11-19 08:19:11,237 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:19:11,238 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 08:19:11,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:19:11,299 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-19 08:19:11,299 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 08:19:11,300 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1146351556] [2022-11-19 08:19:11,300 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1146351556] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 08:19:11,300 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 08:19:11,300 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 08:19:11,300 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2063758060] [2022-11-19 08:19:11,301 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 08:19:11,301 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 08:19:11,301 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 08:19:11,302 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 08:19:11,302 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 08:19:11,302 INFO L87 Difference]: Start difference. First operand 293 states and 383 transitions. Second operand has 4 states, 3 states have (on average 14.333333333333334) internal successors, (43), 4 states have internal predecessors, (43), 4 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-19 08:19:11,477 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 08:19:11,477 INFO L93 Difference]: Finished difference Result 333 states and 436 transitions. [2022-11-19 08:19:11,478 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-19 08:19:11,478 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 14.333333333333334) internal successors, (43), 4 states have internal predecessors, (43), 4 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 56 [2022-11-19 08:19:11,479 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 08:19:11,485 INFO L225 Difference]: With dead ends: 333 [2022-11-19 08:19:11,485 INFO L226 Difference]: Without dead ends: 141 [2022-11-19 08:19:11,489 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 08:19:11,497 INFO L413 NwaCegarLoop]: 77 mSDtfsCounter, 87 mSDsluCounter, 47 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 80 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 08:19:11,498 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [87 Valid, 124 Invalid, 80 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 08:19:11,501 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 141 states. [2022-11-19 08:19:11,532 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 141 to 141. [2022-11-19 08:19:11,539 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 141 states, 92 states have (on average 1.25) internal successors, (115), 104 states have internal predecessors, (115), 25 states have call successors, (25), 23 states have call predecessors, (25), 23 states have return successors, (35), 22 states have call predecessors, (35), 25 states have call successors, (35) [2022-11-19 08:19:11,542 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 141 states to 141 states and 175 transitions. [2022-11-19 08:19:11,542 INFO L78 Accepts]: Start accepts. Automaton has 141 states and 175 transitions. Word has length 56 [2022-11-19 08:19:11,544 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 08:19:11,545 INFO L495 AbstractCegarLoop]: Abstraction has 141 states and 175 transitions. [2022-11-19 08:19:11,545 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 14.333333333333334) internal successors, (43), 4 states have internal predecessors, (43), 4 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-19 08:19:11,546 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states and 175 transitions. [2022-11-19 08:19:11,553 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-11-19 08:19:11,554 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 08:19:11,555 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:19:11,555 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-19 08:19:11,556 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 08:19:11,558 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 08:19:11,559 INFO L85 PathProgramCache]: Analyzing trace with hash -1543761492, now seen corresponding path program 1 times [2022-11-19 08:19:11,559 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 08:19:11,559 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1809311380] [2022-11-19 08:19:11,561 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:19:11,561 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 08:19:11,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:19:12,089 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 18 proven. 2 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-19 08:19:12,089 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 08:19:12,090 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1809311380] [2022-11-19 08:19:12,090 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1809311380] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 08:19:12,090 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [352004793] [2022-11-19 08:19:12,090 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:19:12,091 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 08:19:12,091 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 08:19:12,098 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 08:19:12,131 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-19 08:19:12,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:19:12,241 INFO L263 TraceCheckSpWp]: Trace formula consists of 309 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-19 08:19:12,250 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 08:19:12,929 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-19 08:19:12,929 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 08:19:12,930 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [352004793] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 08:19:12,930 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 08:19:12,931 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [8] total 15 [2022-11-19 08:19:12,931 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [340603686] [2022-11-19 08:19:12,931 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 08:19:12,932 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-19 08:19:12,932 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 08:19:12,933 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-19 08:19:12,934 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=160, Unknown=0, NotChecked=0, Total=210 [2022-11-19 08:19:12,934 INFO L87 Difference]: Start difference. First operand 141 states and 175 transitions. Second operand has 9 states, 9 states have (on average 5.333333333333333) internal successors, (48), 8 states have internal predecessors, (48), 5 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) [2022-11-19 08:19:13,649 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 08:19:13,649 INFO L93 Difference]: Finished difference Result 380 states and 482 transitions. [2022-11-19 08:19:13,649 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-19 08:19:13,650 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.333333333333333) internal successors, (48), 8 states have internal predecessors, (48), 5 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) Word has length 64 [2022-11-19 08:19:13,650 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 08:19:13,652 INFO L225 Difference]: With dead ends: 380 [2022-11-19 08:19:13,652 INFO L226 Difference]: Without dead ends: 241 [2022-11-19 08:19:13,653 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 58 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 61 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=121, Invalid=341, Unknown=0, NotChecked=0, Total=462 [2022-11-19 08:19:13,654 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 239 mSDsluCounter, 136 mSDsCounter, 0 mSdLazyCounter, 298 mSolverCounterSat, 103 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 249 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 401 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 103 IncrementalHoareTripleChecker+Valid, 298 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-19 08:19:13,654 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [249 Valid, 189 Invalid, 401 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [103 Valid, 298 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-19 08:19:13,655 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 241 states. [2022-11-19 08:19:13,685 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 241 to 192. [2022-11-19 08:19:13,686 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 192 states, 130 states have (on average 1.2461538461538462) internal successors, (162), 141 states have internal predecessors, (162), 29 states have call successors, (29), 29 states have call predecessors, (29), 32 states have return successors, (47), 29 states have call predecessors, (47), 29 states have call successors, (47) [2022-11-19 08:19:13,687 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 192 states to 192 states and 238 transitions. [2022-11-19 08:19:13,687 INFO L78 Accepts]: Start accepts. Automaton has 192 states and 238 transitions. Word has length 64 [2022-11-19 08:19:13,688 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 08:19:13,688 INFO L495 AbstractCegarLoop]: Abstraction has 192 states and 238 transitions. [2022-11-19 08:19:13,688 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.333333333333333) internal successors, (48), 8 states have internal predecessors, (48), 5 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) [2022-11-19 08:19:13,688 INFO L276 IsEmpty]: Start isEmpty. Operand 192 states and 238 transitions. [2022-11-19 08:19:13,689 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2022-11-19 08:19:13,690 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 08:19:13,690 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:19:13,697 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-11-19 08:19:13,896 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 08:19:13,897 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 08:19:13,897 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 08:19:13,897 INFO L85 PathProgramCache]: Analyzing trace with hash 609721716, now seen corresponding path program 1 times [2022-11-19 08:19:13,897 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 08:19:13,897 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1024609736] [2022-11-19 08:19:13,897 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:19:13,898 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 08:19:13,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:19:14,606 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 7 proven. 11 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-19 08:19:14,607 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 08:19:14,607 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1024609736] [2022-11-19 08:19:14,607 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1024609736] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 08:19:14,607 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1673732581] [2022-11-19 08:19:14,607 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:19:14,608 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 08:19:14,608 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 08:19:14,609 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 08:19:14,645 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-19 08:19:14,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:19:14,754 INFO L263 TraceCheckSpWp]: Trace formula consists of 315 conjuncts, 34 conjunts are in the unsatisfiable core [2022-11-19 08:19:14,758 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 08:19:15,295 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 15 proven. 11 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-19 08:19:15,296 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 08:19:16,124 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 15 proven. 3 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-19 08:19:16,124 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1673732581] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 08:19:16,124 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1596351721] [2022-11-19 08:19:16,148 INFO L159 IcfgInterpreter]: Started Sifa with 42 locations of interest [2022-11-19 08:19:16,149 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 08:19:16,153 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 08:19:16,159 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 08:19:16,160 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 08:19:19,710 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 116 for LOIs [2022-11-19 08:19:19,733 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 123 for LOIs [2022-11-19 08:19:21,421 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 121 for LOIs [2022-11-19 08:19:22,134 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 43 for LOIs [2022-11-19 08:19:22,143 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 08:19:37,585 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1596351721] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 08:19:37,585 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-19 08:19:37,586 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [23] imperfect sequences [11, 11, 14] total 53 [2022-11-19 08:19:37,586 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [416419534] [2022-11-19 08:19:37,587 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 08:19:37,587 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2022-11-19 08:19:37,587 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 08:19:37,588 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2022-11-19 08:19:37,589 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=451, Invalid=2305, Unknown=0, NotChecked=0, Total=2756 [2022-11-19 08:19:37,590 INFO L87 Difference]: Start difference. First operand 192 states and 238 transitions. Second operand has 24 states, 19 states have (on average 1.736842105263158) internal successors, (33), 19 states have internal predecessors, (33), 6 states have call successors, (7), 5 states have call predecessors, (7), 4 states have return successors, (7), 6 states have call predecessors, (7), 6 states have call successors, (7) [2022-11-19 08:19:51,325 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 08:19:51,325 INFO L93 Difference]: Finished difference Result 598 states and 748 transitions. [2022-11-19 08:19:51,326 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-11-19 08:19:51,326 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 19 states have (on average 1.736842105263158) internal successors, (33), 19 states have internal predecessors, (33), 6 states have call successors, (7), 5 states have call predecessors, (7), 4 states have return successors, (7), 6 states have call predecessors, (7), 6 states have call successors, (7) Word has length 67 [2022-11-19 08:19:51,326 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 08:19:51,329 INFO L225 Difference]: With dead ends: 598 [2022-11-19 08:19:51,329 INFO L226 Difference]: Without dead ends: 408 [2022-11-19 08:19:51,334 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 230 GetRequests, 154 SyntacticMatches, 6 SemanticMatches, 70 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2096 ImplicationChecksByTransitivity, 26.5s TimeCoverageRelationStatistics Valid=908, Invalid=4204, Unknown=0, NotChecked=0, Total=5112 [2022-11-19 08:19:51,337 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 195 mSDsluCounter, 248 mSDsCounter, 0 mSdLazyCounter, 1164 mSolverCounterSat, 92 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 199 SdHoareTripleChecker+Valid, 297 SdHoareTripleChecker+Invalid, 1256 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 92 IncrementalHoareTripleChecker+Valid, 1164 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.0s IncrementalHoareTripleChecker+Time [2022-11-19 08:19:51,337 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [199 Valid, 297 Invalid, 1256 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [92 Valid, 1164 Invalid, 0 Unknown, 0 Unchecked, 3.0s Time] [2022-11-19 08:19:51,339 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 408 states. [2022-11-19 08:19:51,425 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 408 to 378. [2022-11-19 08:19:51,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 378 states, 260 states have (on average 1.2192307692307693) internal successors, (317), 276 states have internal predecessors, (317), 56 states have call successors, (56), 55 states have call predecessors, (56), 61 states have return successors, (86), 56 states have call predecessors, (86), 56 states have call successors, (86) [2022-11-19 08:19:51,429 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 378 states to 378 states and 459 transitions. [2022-11-19 08:19:51,429 INFO L78 Accepts]: Start accepts. Automaton has 378 states and 459 transitions. Word has length 67 [2022-11-19 08:19:51,430 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 08:19:51,430 INFO L495 AbstractCegarLoop]: Abstraction has 378 states and 459 transitions. [2022-11-19 08:19:51,430 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 19 states have (on average 1.736842105263158) internal successors, (33), 19 states have internal predecessors, (33), 6 states have call successors, (7), 5 states have call predecessors, (7), 4 states have return successors, (7), 6 states have call predecessors, (7), 6 states have call successors, (7) [2022-11-19 08:19:51,431 INFO L276 IsEmpty]: Start isEmpty. Operand 378 states and 459 transitions. [2022-11-19 08:19:51,433 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2022-11-19 08:19:51,433 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 08:19:51,434 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:19:51,441 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-11-19 08:19:51,640 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 08:19:51,641 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 08:19:51,641 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 08:19:51,641 INFO L85 PathProgramCache]: Analyzing trace with hash 375713732, now seen corresponding path program 1 times [2022-11-19 08:19:51,641 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 08:19:51,642 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1447834804] [2022-11-19 08:19:51,642 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:19:51,642 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 08:19:51,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:19:52,101 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 7 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-19 08:19:52,102 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 08:19:52,102 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1447834804] [2022-11-19 08:19:52,102 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1447834804] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 08:19:52,103 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [699865673] [2022-11-19 08:19:52,103 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:19:52,103 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 08:19:52,103 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 08:19:52,104 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 08:19:52,134 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-19 08:19:52,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:19:52,242 INFO L263 TraceCheckSpWp]: Trace formula consists of 321 conjuncts, 29 conjunts are in the unsatisfiable core [2022-11-19 08:19:52,245 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 08:19:52,562 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 26 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 08:19:52,563 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 08:19:53,122 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 18 proven. 5 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-19 08:19:53,123 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [699865673] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 08:19:53,123 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [540802636] [2022-11-19 08:19:53,126 INFO L159 IcfgInterpreter]: Started Sifa with 45 locations of interest [2022-11-19 08:19:53,127 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 08:19:53,127 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 08:19:53,127 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 08:19:53,128 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 08:19:57,157 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 130 for LOIs [2022-11-19 08:19:57,182 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 30 for LOIs [2022-11-19 08:19:57,375 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 59 for LOIs [2022-11-19 08:19:57,893 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 49 for LOIs [2022-11-19 08:19:57,905 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 43 for LOIs [2022-11-19 08:19:57,915 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 35 for LOIs [2022-11-19 08:19:57,917 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 08:20:06,824 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6758#(and (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| 0)) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|) (= ~head~0.offset 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~1#1|) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= 0 ~methAndRunningLastTime~0) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)) (<= 0 |old(~methAndRunningLastTime~0)|) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| 2147483647) (<= 0 ~methaneLevelCritical~0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 2147483647) (= ~head~0.base 0) (= |#NULL.offset| 0) (not (= ~methAndRunningLastTime~0 0)) (<= 0 (+ |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 2147483648)) (<= 0 |#StackHeapBarrier|) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| ~methaneLevelCritical~0) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-19 08:20:06,824 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 08:20:06,824 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 08:20:06,825 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 10, 9] total 25 [2022-11-19 08:20:06,825 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [302955935] [2022-11-19 08:20:06,825 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 08:20:06,826 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-11-19 08:20:06,826 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 08:20:06,827 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-11-19 08:20:06,828 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=356, Invalid=3066, Unknown=0, NotChecked=0, Total=3422 [2022-11-19 08:20:06,828 INFO L87 Difference]: Start difference. First operand 378 states and 459 transitions. Second operand has 25 states, 19 states have (on average 4.684210526315789) internal successors, (89), 19 states have internal predecessors, (89), 8 states have call successors, (21), 5 states have call predecessors, (21), 14 states have return successors, (22), 13 states have call predecessors, (22), 8 states have call successors, (22) [2022-11-19 08:20:10,955 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 08:20:10,956 INFO L93 Difference]: Finished difference Result 1318 states and 1951 transitions. [2022-11-19 08:20:10,956 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2022-11-19 08:20:10,957 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 19 states have (on average 4.684210526315789) internal successors, (89), 19 states have internal predecessors, (89), 8 states have call successors, (21), 5 states have call predecessors, (21), 14 states have return successors, (22), 13 states have call predecessors, (22), 8 states have call successors, (22) Word has length 70 [2022-11-19 08:20:10,957 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 08:20:10,965 INFO L225 Difference]: With dead ends: 1318 [2022-11-19 08:20:10,965 INFO L226 Difference]: Without dead ends: 1015 [2022-11-19 08:20:10,971 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 284 GetRequests, 184 SyntacticMatches, 2 SemanticMatches, 98 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3559 ImplicationChecksByTransitivity, 11.3s TimeCoverageRelationStatistics Valid=1118, Invalid=8782, Unknown=0, NotChecked=0, Total=9900 [2022-11-19 08:20:10,972 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 615 mSDsluCounter, 850 mSDsCounter, 0 mSdLazyCounter, 1614 mSolverCounterSat, 475 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 621 SdHoareTripleChecker+Valid, 958 SdHoareTripleChecker+Invalid, 2089 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 475 IncrementalHoareTripleChecker+Valid, 1614 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-11-19 08:20:10,972 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [621 Valid, 958 Invalid, 2089 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [475 Valid, 1614 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-11-19 08:20:10,974 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1015 states. [2022-11-19 08:20:11,143 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1015 to 633. [2022-11-19 08:20:11,145 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 633 states, 441 states have (on average 1.1927437641723355) internal successors, (526), 463 states have internal predecessors, (526), 93 states have call successors, (93), 87 states have call predecessors, (93), 98 states have return successors, (150), 96 states have call predecessors, (150), 93 states have call successors, (150) [2022-11-19 08:20:11,176 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 633 states to 633 states and 769 transitions. [2022-11-19 08:20:11,177 INFO L78 Accepts]: Start accepts. Automaton has 633 states and 769 transitions. Word has length 70 [2022-11-19 08:20:11,178 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 08:20:11,178 INFO L495 AbstractCegarLoop]: Abstraction has 633 states and 769 transitions. [2022-11-19 08:20:11,179 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 19 states have (on average 4.684210526315789) internal successors, (89), 19 states have internal predecessors, (89), 8 states have call successors, (21), 5 states have call predecessors, (21), 14 states have return successors, (22), 13 states have call predecessors, (22), 8 states have call successors, (22) [2022-11-19 08:20:11,179 INFO L276 IsEmpty]: Start isEmpty. Operand 633 states and 769 transitions. [2022-11-19 08:20:11,182 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-11-19 08:20:11,182 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 08:20:11,182 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:20:11,198 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-19 08:20:11,389 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 08:20:11,390 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 08:20:11,391 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 08:20:11,391 INFO L85 PathProgramCache]: Analyzing trace with hash 1340324960, now seen corresponding path program 1 times [2022-11-19 08:20:11,391 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 08:20:11,391 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [453607763] [2022-11-19 08:20:11,392 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:20:11,392 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 08:20:11,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:20:11,506 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-11-19 08:20:11,510 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 08:20:11,510 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [453607763] [2022-11-19 08:20:11,510 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [453607763] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 08:20:11,511 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 08:20:11,511 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 08:20:11,511 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2092116964] [2022-11-19 08:20:11,511 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 08:20:11,512 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 08:20:11,512 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 08:20:11,513 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 08:20:11,513 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 08:20:11,513 INFO L87 Difference]: Start difference. First operand 633 states and 769 transitions. Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2022-11-19 08:20:11,783 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 08:20:11,783 INFO L93 Difference]: Finished difference Result 1100 states and 1400 transitions. [2022-11-19 08:20:11,784 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 08:20:11,784 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) Word has length 71 [2022-11-19 08:20:11,785 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 08:20:11,789 INFO L225 Difference]: With dead ends: 1100 [2022-11-19 08:20:11,789 INFO L226 Difference]: Without dead ends: 576 [2022-11-19 08:20:11,792 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-19 08:20:11,793 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 38 mSDsluCounter, 89 mSDsCounter, 0 mSdLazyCounter, 83 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 164 SdHoareTripleChecker+Invalid, 85 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 83 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 08:20:11,793 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 164 Invalid, 85 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 83 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 08:20:11,794 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 576 states. [2022-11-19 08:20:11,903 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 576 to 568. [2022-11-19 08:20:11,905 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 568 states, 399 states have (on average 1.1804511278195489) internal successors, (471), 419 states have internal predecessors, (471), 83 states have call successors, (83), 81 states have call predecessors, (83), 85 states have return successors, (116), 82 states have call predecessors, (116), 83 states have call successors, (116) [2022-11-19 08:20:11,909 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 568 states to 568 states and 670 transitions. [2022-11-19 08:20:11,910 INFO L78 Accepts]: Start accepts. Automaton has 568 states and 670 transitions. Word has length 71 [2022-11-19 08:20:11,910 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 08:20:11,910 INFO L495 AbstractCegarLoop]: Abstraction has 568 states and 670 transitions. [2022-11-19 08:20:11,911 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2022-11-19 08:20:11,911 INFO L276 IsEmpty]: Start isEmpty. Operand 568 states and 670 transitions. [2022-11-19 08:20:11,915 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2022-11-19 08:20:11,915 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 08:20:11,915 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:20:11,916 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-19 08:20:11,916 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 08:20:11,917 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 08:20:11,917 INFO L85 PathProgramCache]: Analyzing trace with hash -1072544835, now seen corresponding path program 1 times [2022-11-19 08:20:11,917 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 08:20:11,917 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1830569631] [2022-11-19 08:20:11,918 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:20:11,918 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 08:20:11,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:20:12,705 INFO L134 CoverageAnalysis]: Checked inductivity of 81 backedges. 36 proven. 18 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2022-11-19 08:20:12,705 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 08:20:12,705 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1830569631] [2022-11-19 08:20:12,705 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1830569631] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 08:20:12,706 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [257420704] [2022-11-19 08:20:12,706 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:20:12,706 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 08:20:12,706 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 08:20:12,711 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 08:20:12,740 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-19 08:20:12,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:20:12,860 INFO L263 TraceCheckSpWp]: Trace formula consists of 410 conjuncts, 34 conjunts are in the unsatisfiable core [2022-11-19 08:20:12,864 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 08:20:13,560 INFO L134 CoverageAnalysis]: Checked inductivity of 81 backedges. 53 proven. 26 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-19 08:20:13,560 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 08:20:14,506 INFO L134 CoverageAnalysis]: Checked inductivity of 81 backedges. 44 proven. 10 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2022-11-19 08:20:14,506 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [257420704] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 08:20:14,507 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1226910572] [2022-11-19 08:20:14,516 INFO L159 IcfgInterpreter]: Started Sifa with 45 locations of interest [2022-11-19 08:20:14,516 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 08:20:14,517 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 08:20:14,517 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 08:20:14,518 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 08:20:17,792 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 45 for LOIs [2022-11-19 08:20:17,802 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 30 for LOIs [2022-11-19 08:20:18,043 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 59 for LOIs [2022-11-19 08:20:18,450 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 49 for LOIs [2022-11-19 08:20:18,470 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 43 for LOIs [2022-11-19 08:20:18,480 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 35 for LOIs [2022-11-19 08:20:18,483 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 08:20:24,784 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12843#(and (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| 0)) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|) (= ~head~0.offset 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~1#1|) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= 0 ~methAndRunningLastTime~0) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)) (<= 0 |old(~methAndRunningLastTime~0)|) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| 2147483647) (<= 0 ~methaneLevelCritical~0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 2147483647) (= ~head~0.base 0) (= |#NULL.offset| 0) (not (= ~methAndRunningLastTime~0 0)) (<= 0 (+ |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 2147483648)) (<= 0 |#StackHeapBarrier|) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| ~methaneLevelCritical~0) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-19 08:20:24,785 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 08:20:24,785 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 08:20:24,785 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 14, 15] total 36 [2022-11-19 08:20:24,786 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [919546908] [2022-11-19 08:20:24,786 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 08:20:24,787 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-11-19 08:20:24,787 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 08:20:24,787 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-11-19 08:20:24,789 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=555, Invalid=4001, Unknown=0, NotChecked=0, Total=4556 [2022-11-19 08:20:24,789 INFO L87 Difference]: Start difference. First operand 568 states and 670 transitions. Second operand has 36 states, 33 states have (on average 3.9696969696969697) internal successors, (131), 28 states have internal predecessors, (131), 16 states have call successors, (31), 14 states have call predecessors, (31), 13 states have return successors, (29), 13 states have call predecessors, (29), 16 states have call successors, (29) [2022-11-19 08:20:28,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 08:20:28,634 INFO L93 Difference]: Finished difference Result 1909 states and 2308 transitions. [2022-11-19 08:20:28,635 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2022-11-19 08:20:28,635 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 33 states have (on average 3.9696969696969697) internal successors, (131), 28 states have internal predecessors, (131), 16 states have call successors, (31), 14 states have call predecessors, (31), 13 states have return successors, (29), 13 states have call predecessors, (29), 16 states have call successors, (29) Word has length 99 [2022-11-19 08:20:28,637 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 08:20:28,647 INFO L225 Difference]: With dead ends: 1909 [2022-11-19 08:20:28,647 INFO L226 Difference]: Without dead ends: 1416 [2022-11-19 08:20:28,652 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 354 GetRequests, 241 SyntacticMatches, 11 SemanticMatches, 102 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4625 ImplicationChecksByTransitivity, 9.0s TimeCoverageRelationStatistics Valid=1406, Invalid=9306, Unknown=0, NotChecked=0, Total=10712 [2022-11-19 08:20:28,654 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 1100 mSDsluCounter, 697 mSDsCounter, 0 mSdLazyCounter, 1299 mSolverCounterSat, 604 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1101 SdHoareTripleChecker+Valid, 787 SdHoareTripleChecker+Invalid, 1903 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 604 IncrementalHoareTripleChecker+Valid, 1299 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-11-19 08:20:28,654 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1101 Valid, 787 Invalid, 1903 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [604 Valid, 1299 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2022-11-19 08:20:28,656 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1416 states. [2022-11-19 08:20:28,891 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1416 to 1254. [2022-11-19 08:20:28,893 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1254 states, 896 states have (on average 1.1841517857142858) internal successors, (1061), 938 states have internal predecessors, (1061), 183 states have call successors, (183), 160 states have call predecessors, (183), 174 states have return successors, (248), 173 states have call predecessors, (248), 183 states have call successors, (248) [2022-11-19 08:20:28,900 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1254 states to 1254 states and 1492 transitions. [2022-11-19 08:20:28,901 INFO L78 Accepts]: Start accepts. Automaton has 1254 states and 1492 transitions. Word has length 99 [2022-11-19 08:20:28,901 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 08:20:28,902 INFO L495 AbstractCegarLoop]: Abstraction has 1254 states and 1492 transitions. [2022-11-19 08:20:28,902 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 33 states have (on average 3.9696969696969697) internal successors, (131), 28 states have internal predecessors, (131), 16 states have call successors, (31), 14 states have call predecessors, (31), 13 states have return successors, (29), 13 states have call predecessors, (29), 16 states have call successors, (29) [2022-11-19 08:20:28,902 INFO L276 IsEmpty]: Start isEmpty. Operand 1254 states and 1492 transitions. [2022-11-19 08:20:28,909 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 154 [2022-11-19 08:20:28,909 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 08:20:28,909 INFO L195 NwaCegarLoop]: trace histogram [7, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:20:28,923 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-19 08:20:29,117 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-19 08:20:29,117 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 08:20:29,117 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 08:20:29,117 INFO L85 PathProgramCache]: Analyzing trace with hash -1708342977, now seen corresponding path program 1 times [2022-11-19 08:20:29,118 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 08:20:29,118 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2141475565] [2022-11-19 08:20:29,118 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:20:29,118 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 08:20:29,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:20:30,407 INFO L134 CoverageAnalysis]: Checked inductivity of 251 backedges. 91 proven. 88 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2022-11-19 08:20:30,408 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 08:20:30,408 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2141475565] [2022-11-19 08:20:30,408 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2141475565] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 08:20:30,408 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1656682123] [2022-11-19 08:20:30,408 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 08:20:30,408 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 08:20:30,409 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 08:20:30,410 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 08:20:30,412 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-19 08:20:30,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 08:20:30,594 INFO L263 TraceCheckSpWp]: Trace formula consists of 594 conjuncts, 39 conjunts are in the unsatisfiable core [2022-11-19 08:20:30,601 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 08:20:31,472 INFO L134 CoverageAnalysis]: Checked inductivity of 251 backedges. 144 proven. 74 refuted. 0 times theorem prover too weak. 33 trivial. 0 not checked. [2022-11-19 08:20:31,472 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 08:20:32,834 INFO L134 CoverageAnalysis]: Checked inductivity of 251 backedges. 115 proven. 65 refuted. 0 times theorem prover too weak. 71 trivial. 0 not checked. [2022-11-19 08:20:32,835 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1656682123] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 08:20:32,835 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [460377677] [2022-11-19 08:20:32,838 INFO L159 IcfgInterpreter]: Started Sifa with 48 locations of interest [2022-11-19 08:20:32,838 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 08:20:32,839 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 08:20:32,839 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 08:20:32,839 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 08:20:36,452 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 125 for LOIs [2022-11-19 08:20:36,478 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 30 for LOIs [2022-11-19 08:20:36,843 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 59 for LOIs [2022-11-19 08:20:37,352 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 49 for LOIs [2022-11-19 08:20:37,366 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 43 for LOIs [2022-11-19 08:20:37,376 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 35 for LOIs [2022-11-19 08:20:37,379 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 31 for LOIs [2022-11-19 08:20:37,383 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 08:20:47,231 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18581#(and (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| 0)) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|) (= ~head~0.offset 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~1#1|) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= 0 ~methAndRunningLastTime~0) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)) (<= 0 |old(~methAndRunningLastTime~0)|) (<= 0 ~methaneLevelCritical~0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 2147483647) (= ~head~0.base 0) (= |#NULL.offset| 0) (<= ~methaneLevelCritical~0 2147483647) (not (= ~methAndRunningLastTime~0 0)) (<= 0 (+ |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 2147483648)) (<= 0 |#StackHeapBarrier|) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| ~methaneLevelCritical~0) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-19 08:20:47,231 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 08:20:47,232 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 08:20:47,232 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 18, 17] total 45 [2022-11-19 08:20:47,232 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [835603701] [2022-11-19 08:20:47,232 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 08:20:47,233 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 45 states [2022-11-19 08:20:47,234 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 08:20:47,234 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 45 interpolants. [2022-11-19 08:20:47,236 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=751, Invalid=5891, Unknown=0, NotChecked=0, Total=6642 [2022-11-19 08:20:47,237 INFO L87 Difference]: Start difference. First operand 1254 states and 1492 transitions. Second operand has 45 states, 42 states have (on average 4.809523809523809) internal successors, (202), 41 states have internal predecessors, (202), 27 states have call successors, (45), 12 states have call predecessors, (45), 17 states have return successors, (46), 21 states have call predecessors, (46), 27 states have call successors, (46) [2022-11-19 08:20:48,957 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 08:20:48,957 INFO L93 Difference]: Finished difference Result 1794 states and 2166 transitions. [2022-11-19 08:20:48,958 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-11-19 08:20:48,958 INFO L78 Accepts]: Start accepts. Automaton has has 45 states, 42 states have (on average 4.809523809523809) internal successors, (202), 41 states have internal predecessors, (202), 27 states have call successors, (45), 12 states have call predecessors, (45), 17 states have return successors, (46), 21 states have call predecessors, (46), 27 states have call successors, (46) Word has length 153 [2022-11-19 08:20:48,959 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 08:20:48,959 INFO L225 Difference]: With dead ends: 1794 [2022-11-19 08:20:48,960 INFO L226 Difference]: Without dead ends: 0 [2022-11-19 08:20:48,967 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 500 GetRequests, 398 SyntacticMatches, 6 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4597 ImplicationChecksByTransitivity, 11.6s TimeCoverageRelationStatistics Valid=1234, Invalid=8272, Unknown=0, NotChecked=0, Total=9506 [2022-11-19 08:20:48,968 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 397 mSDsluCounter, 471 mSDsCounter, 0 mSdLazyCounter, 698 mSolverCounterSat, 227 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 398 SdHoareTripleChecker+Valid, 519 SdHoareTripleChecker+Invalid, 925 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 227 IncrementalHoareTripleChecker+Valid, 698 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-19 08:20:48,968 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [398 Valid, 519 Invalid, 925 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [227 Valid, 698 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-19 08:20:48,969 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-19 08:20:48,969 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-19 08:20:48,969 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 08:20:48,969 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-19 08:20:48,970 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 153 [2022-11-19 08:20:48,970 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 08:20:48,970 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-19 08:20:48,971 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 45 states, 42 states have (on average 4.809523809523809) internal successors, (202), 41 states have internal predecessors, (202), 27 states have call successors, (45), 12 states have call predecessors, (45), 17 states have return successors, (46), 21 states have call predecessors, (46), 27 states have call successors, (46) [2022-11-19 08:20:48,971 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-19 08:20:48,971 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-19 08:20:48,974 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-19 08:20:48,989 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-19 08:20:49,183 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-19 08:20:49,186 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-19 08:21:21,680 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 183 190) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1))) (not (= 1 ~systemActive~0)) (= |old(~pumpRunning~0)| 0)) [2022-11-19 08:21:21,680 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 183 190) no Hoare annotation was computed. [2022-11-19 08:21:21,681 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 98 104) no Hoare annotation was computed. [2022-11-19 08:21:21,681 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 98 104) the Hoare annotation is: true [2022-11-19 08:21:21,681 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 938 949) the Hoare annotation is: (let ((.cse0 (= ~methaneLevelCritical~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (and (not (= |old(~methaneLevelCritical~0)| 0)) (not (= |old(~methaneLevelCritical~0)| 1)))) (.cse3 (= ~methaneLevelCritical~0 1)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~pumpRunning~0 0)) (not (< 0 ~waterLevel~0)) .cse0 .cse1 .cse2 .cse3 (not (<= ~waterLevel~0 1)) .cse4) (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0)) .cse3 .cse4))) [2022-11-19 08:21:21,682 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 938 949) no Hoare annotation was computed. [2022-11-19 08:21:21,682 INFO L902 garLoopResultBuilder]: At program point L417(line 417) the Hoare annotation is: true [2022-11-19 08:21:21,682 INFO L899 garLoopResultBuilder]: For program point L417-1(line 417) no Hoare annotation was computed. [2022-11-19 08:21:21,682 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 411 440) no Hoare annotation was computed. [2022-11-19 08:21:21,682 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 411 440) the Hoare annotation is: true [2022-11-19 08:21:21,683 INFO L902 garLoopResultBuilder]: At program point L436(lines 411 440) the Hoare annotation is: true [2022-11-19 08:21:21,683 INFO L899 garLoopResultBuilder]: For program point L432(line 432) no Hoare annotation was computed. [2022-11-19 08:21:21,683 INFO L899 garLoopResultBuilder]: For program point L425(lines 425 429) no Hoare annotation was computed. [2022-11-19 08:21:21,683 INFO L902 garLoopResultBuilder]: At program point L425-1(lines 425 429) the Hoare annotation is: true [2022-11-19 08:21:21,683 INFO L902 garLoopResultBuilder]: At program point L421-2(lines 421 435) the Hoare annotation is: true [2022-11-19 08:21:21,684 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 950 958) the Hoare annotation is: true [2022-11-19 08:21:21,684 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 950 958) no Hoare annotation was computed. [2022-11-19 08:21:21,684 INFO L899 garLoopResultBuilder]: For program point L386-1(line 386) no Hoare annotation was computed. [2022-11-19 08:21:21,684 INFO L895 garLoopResultBuilder]: At program point L151(line 151) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse4 (let ((.cse6 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and (not (< 0 ~waterLevel~0)) .cse6) (and (= ~pumpRunning~0 0) .cse6)))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse4 (<= |old(~waterLevel~0)| ~waterLevel~0)) (not (= |old(~waterLevel~0)| 2))) (or .cse5 .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 (and .cse3 .cse4 (= ~waterLevel~0 1))) (or .cse5 (not (= 0 ~systemActive~0))))) [2022-11-19 08:21:21,685 INFO L895 garLoopResultBuilder]: At program point L151-1(lines 132 156) the Hoare annotation is: (let ((.cse22 (= ~methaneLevelCritical~0 1)) (.cse26 (= ~methaneLevelCritical~0 0))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse25 (not .cse26)) (.cse24 (not .cse22))) (let ((.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse18 (and .cse25 .cse24)) (.cse20 (= ~waterLevel~0 1)) (.cse19 (= ~pumpRunning~0 0)) (.cse0 (and (<= ~methAndRunningLastTime~0 0) (<= 0 ~methAndRunningLastTime~0))) (.cse1 (not (<= 0 ~head~0.base))) (.cse3 (not (<= 0 |#NULL.offset|))) (.cse4 (not (<= ~cleanupTimeShifts~0 4))) (.cse17 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= ~head~0.base 0))) (.cse7 (not (= 1 ~systemActive~0))) (.cse8 (not (<= ~head~0.offset 0))) (.cse21 (and (or .cse2 .cse26) (or .cse25 (not (= |old(~pumpRunning~0)| 1))))) (.cse9 (not (<= 4 ~cleanupTimeShifts~0))) (.cse10 (not (<= ~methaneLevelCritical~0 0))) (.cse11 (not (<= |#NULL.offset| 0))) (.cse12 (not (<= 0 ~methaneLevelCritical~0))) (.cse13 (not (<= 0 |#NULL.base|))) (.cse23 (not (= |old(~waterLevel~0)| 2))) (.cse14 (not (<= 0 |#StackHeapBarrier|))) (.cse15 (not (<= 0 ~head~0.offset))) (.cse16 (not (<= |#NULL.base| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= |old(~methAndRunningLastTime~0)| 0)) .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 (not (<= 0 |old(~methAndRunningLastTime~0)|))) (or .cse2 .cse17 .cse6 .cse18 .cse7 (and .cse19 .cse20)) (or .cse17 .cse18 .cse7 .cse21 .cse22 .cse23 .cse20) (or .cse17 .cse18 .cse7 (and .cse2 (= |timeShift_processEnvironment_~tmp~1#1| 1) .cse19 .cse20) .cse23 (and (= ~methAndRunningLastTime~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse24) (or (and .cse19 .cse25) (and .cse26 (= ~pumpRunning~0 1))))) (or .cse0 .cse1 .cse3 .cse4 .cse17 .cse5 .cse7 .cse8 .cse21 .cse9 .cse10 .cse11 .cse12 .cse13 .cse23 .cse14 .cse15 .cse16) (or .cse2 (not (= 0 ~systemActive~0))))))) [2022-11-19 08:21:21,685 INFO L899 garLoopResultBuilder]: For program point L85-1(lines 85 91) no Hoare annotation was computed. [2022-11-19 08:21:21,686 INFO L899 garLoopResultBuilder]: For program point L78-1(lines 77 96) no Hoare annotation was computed. [2022-11-19 08:21:21,686 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 148) no Hoare annotation was computed. [2022-11-19 08:21:21,686 INFO L895 garLoopResultBuilder]: At program point L136(lines 136 153) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 2)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 (or (and .cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (and (not .cse4) (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) (or .cse5 (and .cse4 .cse3 (= ~waterLevel~0 1)) .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2) (or .cse5 (not (= 0 ~systemActive~0))))) [2022-11-19 08:21:21,687 INFO L899 garLoopResultBuilder]: For program point L392(lines 392 402) no Hoare annotation was computed. [2022-11-19 08:21:21,688 INFO L895 garLoopResultBuilder]: At program point L388(lines 388 405) the Hoare annotation is: (let ((.cse30 (= ~methaneLevelCritical~0 0)) (.cse22 (= ~methaneLevelCritical~0 1))) (let ((.cse24 (= ~pumpRunning~0 0)) (.cse21 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| ~methaneLevelCritical~0)) (.cse25 (= 1 ~systemActive~0)) (.cse29 (not .cse22)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse28 (not .cse30))) (let ((.cse20 (= ~waterLevel~0 1)) (.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse0 (and (<= ~methAndRunningLastTime~0 0) (<= 0 ~methAndRunningLastTime~0))) (.cse1 (not (<= 0 ~head~0.base))) (.cse3 (not (<= 0 |#NULL.offset|))) (.cse4 (not (<= ~cleanupTimeShifts~0 4))) (.cse5 (not (<= ~head~0.base 0))) (.cse8 (not (<= ~head~0.offset 0))) (.cse19 (and (or .cse2 .cse30) (or .cse28 (not (= |old(~pumpRunning~0)| 1))))) (.cse9 (not (<= 4 ~cleanupTimeShifts~0))) (.cse10 (not (<= ~methaneLevelCritical~0 0))) (.cse11 (not (<= |#NULL.offset| 0))) (.cse12 (not (<= 0 ~methaneLevelCritical~0))) (.cse13 (not (<= 0 |#NULL.base|))) (.cse23 (not (= |old(~waterLevel~0)| 2))) (.cse14 (not (<= 0 |#StackHeapBarrier|))) (.cse15 (not (<= 0 ~head~0.offset))) (.cse16 (not (<= |#NULL.base| 0))) (.cse17 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse18 (and .cse28 .cse29)) (.cse7 (not .cse25)) (.cse26 (and (= ~methAndRunningLastTime~0 0) (= 2 ~waterLevel~0) (or .cse30 .cse22) .cse25 (= |old(~waterLevel~0)| ~waterLevel~0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse29) (or (and .cse24 .cse28) (and .cse30 (= ~pumpRunning~0 1))) .cse21))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= |old(~methAndRunningLastTime~0)| 0)) .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 (not (<= 0 |old(~methAndRunningLastTime~0)|))) (or .cse17 .cse18 .cse7 .cse19 (and .cse20 .cse21) .cse22 .cse23) (or .cse2 (and .cse24 .cse25 .cse20) .cse17 .cse6 .cse18 .cse7) (or .cse2 .cse24 (not (= 0 ~systemActive~0))) (or .cse17 .cse18 .cse7 (and (= |timeShift_processEnvironment_~tmp~1#1| 1) .cse24 .cse25 .cse20) .cse26 .cse23) (let ((.cse27 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) .cse2 (not (= (select .cse27 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) .cse17 (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) .cse6 .cse7 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse28 (not (= (select .cse27 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (and (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| 0) (<= 0 |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1|)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) (or .cse2 .cse17 .cse6 .cse7 .cse29 .cse21) (or .cse0 .cse1 .cse3 .cse4 .cse17 .cse5 .cse7 .cse8 .cse19 .cse9 .cse10 .cse11 .cse12 .cse13 .cse23 .cse14 .cse15 .cse16) (or .cse2 .cse17 .cse18 .cse7 (< |old(~waterLevel~0)| 2) .cse26 (not (<= |old(~waterLevel~0)| 2))))))) [2022-11-19 08:21:21,690 INFO L895 garLoopResultBuilder]: At program point L388-1(lines 380 408) the Hoare annotation is: (let ((.cse12 (= ~methaneLevelCritical~0 1))) (let ((.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse15 (not .cse12))) (let ((.cse8 (= ~waterLevel~0 1)) (.cse11 (and .cse7 .cse15)) (.cse1 (= ~pumpRunning~0 0)) (.cse10 (not (= |old(~waterLevel~0)| 2))) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (= |old(~waterLevel~0)| 1))) (.cse6 (not (= 1 ~systemActive~0))) (.cse14 (or (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0) (= ~pumpRunning~0 |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|))) (.cse9 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| ~methaneLevelCritical~0))) (and (or .cse0 (not (= 0 ~systemActive~0)) (and .cse1 .cse2)) (let ((.cse3 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) .cse0 (not (= (select .cse3 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) .cse4 (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) .cse5 .cse6 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse7 (not (= (select .cse3 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (and (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| 0) (<= 0 |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1|)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) (or .cse4 .cse6 (and .cse8 .cse9) .cse7 (not (= |old(~pumpRunning~0)| 1)) .cse10) (or .cse0 (and .cse1 .cse2 .cse8) .cse4 .cse5 .cse11 .cse6) (let ((.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse0 (= |timeShift_processEnvironment_~tmp~1#1| 1) .cse1 .cse2 .cse8) .cse4 .cse11 .cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2 .cse12 .cse13 .cse14 .cse9) .cse10 (and .cse2 .cse15 .cse13 .cse9 (= ~pumpRunning~0 1)))) (or .cse0 .cse4 .cse5 .cse6 .cse15 (and .cse14 .cse9)))))) [2022-11-19 08:21:21,690 INFO L895 garLoopResultBuilder]: At program point L54(line 54) the Hoare annotation is: (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse3 (not (= 1 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3) (or .cse1 .cse2 .cse3 (not (= |old(~waterLevel~0)| 2))) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-11-19 08:21:21,691 INFO L899 garLoopResultBuilder]: For program point L393(lines 393 399) no Hoare annotation was computed. [2022-11-19 08:21:21,691 INFO L895 garLoopResultBuilder]: At program point L146(line 146) the Hoare annotation is: (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse3 (not (= 1 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3) (or .cse1 .cse2 .cse3 (not (= |old(~waterLevel~0)| 2))) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-11-19 08:21:21,691 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 74 97) the Hoare annotation is: (let ((.cse2 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse6 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse2) (or .cse0 (and .cse1 .cse4 (= ~waterLevel~0 1)) .cse3 (not (= |old(~waterLevel~0)| 1)) .cse5 .cse6) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse3 .cse5 .cse6 (not (= |old(~waterLevel~0)| 2))))) [2022-11-19 08:21:21,692 INFO L895 garLoopResultBuilder]: At program point L142(line 142) the Hoare annotation is: (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3) (or (and (<= ~methAndRunningLastTime~0 0) (<= 0 ~methAndRunningLastTime~0)) (not (<= 0 ~head~0.base)) (not (<= 0 |#NULL.offset|)) (not (<= ~cleanupTimeShifts~0 4)) .cse1 (not (<= ~head~0.base 0)) .cse3 (not (<= ~head~0.offset 0)) (not (<= 4 ~cleanupTimeShifts~0)) (not (= |old(~pumpRunning~0)| 1)) (not (<= ~methaneLevelCritical~0 0)) (not (<= |#NULL.offset| 0)) (not (<= 0 ~methaneLevelCritical~0)) (not (<= 0 |#NULL.base|)) .cse4 (not (<= 0 |#StackHeapBarrier|)) (not (<= 0 ~head~0.offset)) (not (<= |#NULL.base| 0))) (or .cse1 .cse2 .cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (= |timeShift_processEnvironment_~tmp~1#1| 1) (= ~waterLevel~0 1)) .cse4) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-11-19 08:21:21,692 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 74 97) no Hoare annotation was computed. [2022-11-19 08:21:21,693 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-11-19 08:21:21,693 INFO L895 garLoopResultBuilder]: At program point L386(line 386) the Hoare annotation is: (let ((.cse24 (= ~methaneLevelCritical~0 1)) (.cse28 (= ~methaneLevelCritical~0 0))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse27 (not .cse28)) (.cse26 (not .cse24))) (let ((.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse18 (not (= 0 ~systemActive~0))) (.cse20 (and .cse27 .cse26)) (.cse21 (= ~waterLevel~0 1)) (.cse22 (= ~methAndRunningLastTime~0 0)) (.cse17 (= ~pumpRunning~0 0)) (.cse0 (and (<= ~methAndRunningLastTime~0 0) (<= 0 ~methAndRunningLastTime~0))) (.cse1 (not (<= 0 ~head~0.base))) (.cse3 (not (<= 0 |#NULL.offset|))) (.cse4 (not (<= ~cleanupTimeShifts~0 4))) (.cse19 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= ~head~0.base 0))) (.cse7 (not (= 1 ~systemActive~0))) (.cse8 (not (<= ~head~0.offset 0))) (.cse23 (and (or .cse2 .cse28) (or .cse27 (not (= |old(~pumpRunning~0)| 1))))) (.cse9 (not (<= 4 ~cleanupTimeShifts~0))) (.cse10 (not (<= ~methaneLevelCritical~0 0))) (.cse11 (not (<= |#NULL.offset| 0))) (.cse12 (not (<= 0 ~methaneLevelCritical~0))) (.cse13 (not (<= 0 |#NULL.base|))) (.cse25 (not (= |old(~waterLevel~0)| 2))) (.cse14 (not (<= 0 |#StackHeapBarrier|))) (.cse15 (not (<= 0 ~head~0.offset))) (.cse16 (not (<= |#NULL.base| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= |old(~methAndRunningLastTime~0)| 0)) .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 (not (<= 0 |old(~methAndRunningLastTime~0)|))) (or .cse2 .cse17 .cse18) (or .cse2 .cse19 .cse6 .cse20 .cse7 (and .cse17 .cse21)) (or .cse2 .cse19 .cse22 .cse18) (or .cse19 .cse20 .cse7 .cse23 .cse24 .cse25 .cse21) (or .cse19 .cse20 .cse7 (and .cse2 (= |timeShift_processEnvironment_~tmp~1#1| 1) .cse17 .cse21) .cse25 (and .cse22 (= |old(~waterLevel~0)| ~waterLevel~0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse26) (or (and .cse17 .cse27) (and .cse28 (= ~pumpRunning~0 1))))) (or .cse0 .cse1 .cse3 .cse4 .cse19 .cse5 .cse7 .cse8 .cse23 .cse9 .cse10 .cse11 .cse12 .cse13 .cse25 .cse14 .cse15 .cse16))))) [2022-11-19 08:21:21,694 INFO L895 garLoopResultBuilder]: At program point L362(lines 313 363) the Hoare annotation is: false [2022-11-19 08:21:21,694 INFO L899 garLoopResultBuilder]: For program point L350(lines 350 356) no Hoare annotation was computed. [2022-11-19 08:21:21,694 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-19 08:21:21,694 INFO L895 garLoopResultBuilder]: At program point L350-2(lines 344 357) the Hoare annotation is: (let ((.cse0 (= ~methAndRunningLastTime~0 0)) (.cse1 (or (= ~methaneLevelCritical~0 0) (= ~methaneLevelCritical~0 1))) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse4 .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse4 .cse3 (= 0 ~systemActive~0)))) [2022-11-19 08:21:21,695 INFO L899 garLoopResultBuilder]: For program point L334(lines 334 340) no Hoare annotation was computed. [2022-11-19 08:21:21,695 INFO L899 garLoopResultBuilder]: For program point L334-1(lines 334 340) no Hoare annotation was computed. [2022-11-19 08:21:21,695 INFO L895 garLoopResultBuilder]: At program point L359(lines 314 361) the Hoare annotation is: (let ((.cse5 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (or .cse5 (= ~methaneLevelCritical~0 1))) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse3 (or (and .cse4 (not .cse5)) (and .cse5 (= ~pumpRunning~0 1)))) (and .cse4 .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse4 .cse0 .cse3 (= 0 ~systemActive~0))))) [2022-11-19 08:21:21,696 INFO L895 garLoopResultBuilder]: At program point L326(line 326) the Hoare annotation is: (let ((.cse5 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (or .cse5 (= ~methaneLevelCritical~0 1))) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse3 (or (and .cse4 (not .cse5)) (and .cse5 (= ~pumpRunning~0 1)))) (and .cse4 .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse4 .cse0 .cse3 (= 0 ~systemActive~0))))) [2022-11-19 08:21:21,696 INFO L899 garLoopResultBuilder]: For program point L289(lines 289 295) no Hoare annotation was computed. [2022-11-19 08:21:21,696 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-19 08:21:21,696 INFO L895 garLoopResultBuilder]: At program point L289-1(lines 289 295) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (not (= 0 ~systemActive~0))) (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1))) [2022-11-19 08:21:21,697 INFO L895 garLoopResultBuilder]: At program point L496(lines 496 503) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (and (= (select |#length| 15) 25) (= 9 (select |#length| 5)) (= (select |#length| 9) 21) (= 30 (select |#length| 7)) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (= |ULTIMATE.start_valid_product_~retValue_acc~6#1| 1) (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= (select |#valid| 9) 1) (= (select |#length| 12) 25) (= (select |#valid| 11) 1) (= ~methaneLevelCritical~0 0) (= 30 (select |#length| 4)) (= |ULTIMATE.start_valid_product_~retValue_acc~6#1| |ULTIMATE.start_valid_product_#res#1|) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= 2 (select |#length| 1)) (= (select |#length| 8) 9) (= (select |#valid| 3) 1) (= (select |#valid| 7) 1) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_main_~tmp~7#1|) (= 30 (select |#length| 13)) (= 1 ~systemActive~0) (= 30 (select |#length| 10)) (= (select |#valid| 12) 1) (= (select |#valid| 4) 1) (= (select |#valid| 1) 1) (= (select |#length| 6) 21) (= (select |#valid| 14) 1) (= 9 (select |#length| 14)) (= (select |#valid| 0) 0) (= ~head~0.base 0) (= (select |#valid| 2) 1) (= |#NULL.offset| 0) (= 9 (select |#length| 11)) (= ~waterLevel~0 1) (= (select .cse0 0) 48) (= (select |#valid| 6) 1) (= (select .cse0 1) 0) (= (select |#valid| 10) 1) (= (select |#valid| 8) 1) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))) [2022-11-19 08:21:21,697 INFO L902 garLoopResultBuilder]: At program point L496-2(lines 496 503) the Hoare annotation is: true [2022-11-19 08:21:21,697 INFO L899 garLoopResultBuilder]: For program point L315(lines 314 361) no Hoare annotation was computed. [2022-11-19 08:21:21,698 INFO L899 garLoopResultBuilder]: For program point L344(lines 344 357) no Hoare annotation was computed. [2022-11-19 08:21:21,698 INFO L895 garLoopResultBuilder]: At program point L336(line 336) the Hoare annotation is: (let ((.cse1 (or (= ~methaneLevelCritical~0 0) (= ~methaneLevelCritical~0 1))) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse4 .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse4 .cse0 .cse3 (= 0 ~systemActive~0)))) [2022-11-19 08:21:21,698 INFO L902 garLoopResultBuilder]: At program point L365(lines 304 369) the Hoare annotation is: true [2022-11-19 08:21:21,698 INFO L899 garLoopResultBuilder]: For program point L324(lines 324 330) no Hoare annotation was computed. [2022-11-19 08:21:21,699 INFO L899 garLoopResultBuilder]: For program point L324-1(lines 324 330) no Hoare annotation was computed. [2022-11-19 08:21:21,699 INFO L895 garLoopResultBuilder]: At program point L291(line 291) the Hoare annotation is: (and (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-19 08:21:21,699 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 106 130) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse4) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-11-19 08:21:21,700 INFO L895 garLoopResultBuilder]: At program point L120(line 120) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0)))) (let ((.cse1 (and .cse6 (not (= ~methaneLevelCritical~0 1)))) (.cse4 (not (= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse3) (or .cse4 .cse0 .cse1 .cse2 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)) .cse3) (let ((.cse5 (select |#memory_int| 1))) (or .cse4 (not (= (select |#length| 12) 25)) .cse0 (not (= (select .cse5 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) .cse2 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse6 (not (= (select .cse5 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) .cse3 (not (= (select |#valid| 9) 1)) (and (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~12#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~2#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~12#1|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))))))) [2022-11-19 08:21:21,701 INFO L899 garLoopResultBuilder]: For program point L114(lines 114 122) no Hoare annotation was computed. [2022-11-19 08:21:21,701 INFO L895 garLoopResultBuilder]: At program point L110(lines 110 127) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse4) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-11-19 08:21:21,701 INFO L895 garLoopResultBuilder]: At program point L125(line 125) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (not (= ~methaneLevelCritical~0 0)) (not (= ~methaneLevelCritical~0 1)))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse3))) [2022-11-19 08:21:21,702 INFO L899 garLoopResultBuilder]: For program point L125-1(lines 106 130) no Hoare annotation was computed. [2022-11-19 08:21:21,702 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 106 130) no Hoare annotation was computed. [2022-11-19 08:21:21,703 INFO L895 garLoopResultBuilder]: At program point L196(line 196) the Hoare annotation is: (let ((.cse5 (not (= ~methaneLevelCritical~0 0)))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse5 (not (= ~methaneLevelCritical~0 1)))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (not (<= ~waterLevel~0 2))) (.cse7 (< ~waterLevel~0 2)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (let ((.cse4 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) .cse0 (not (= (select .cse4 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) .cse2 (not (= (select |#length| 15) 25)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~2#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~12#1|)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse5 (not (= (select .cse4 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) .cse6 (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) .cse7 (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) .cse3 (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) (or .cse0 .cse1 .cse2 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 1)) .cse6 .cse7 .cse3)))) [2022-11-19 08:21:21,705 INFO L895 garLoopResultBuilder]: At program point L196-1(line 196) the Hoare annotation is: (let ((.cse7 (not (= ~methaneLevelCritical~0 0)))) (let ((.cse1 (and .cse7 (not (= ~methaneLevelCritical~0 1)))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= ~waterLevel~0 2))) (.cse5 (< ~waterLevel~0 2)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#t~ret7#1| ~methaneLevelCritical~0)) .cse5 .cse3) (let ((.cse6 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) .cse0 (not (= (select .cse6 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) .cse2 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse7 (not (= (select .cse6 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) .cse4 (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) .cse5 (not (= (select |#valid| 13) 1)) (and (<= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~2#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1|) (<= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1|) (<= 0 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~12#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1|) (<= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) .cse3 (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))))))) [2022-11-19 08:21:21,705 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 926 937) no Hoare annotation was computed. [2022-11-19 08:21:21,705 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 926 937) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0))) (let ((.cse2 (not .cse1))) (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse3 (and .cse2 (not (= ~methaneLevelCritical~0 1)))) (.cse4 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or (and (or .cse0 .cse1) (or .cse2 (not (= ~pumpRunning~0 1)))) .cse3 .cse4 (not (= |old(~waterLevel~0)| 2)) (= |old(~waterLevel~0)| ~waterLevel~0) .cse5) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4 (= ~waterLevel~0 1) .cse5))))) [2022-11-19 08:21:21,710 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 08:21:21,713 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-19 08:21:21,767 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 08:21:21 BoogieIcfgContainer [2022-11-19 08:21:21,768 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-19 08:21:21,769 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-19 08:21:21,769 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-19 08:21:21,769 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-19 08:21:21,770 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 08:19:09" (3/4) ... [2022-11-19 08:21:21,774 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-19 08:21:21,782 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-19 08:21:21,782 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-19 08:21:21,782 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-19 08:21:21,783 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-19 08:21:21,783 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-19 08:21:21,783 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-19 08:21:21,784 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 08:21:21,784 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-19 08:21:21,796 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2022-11-19 08:21:21,797 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 14 nodes and edges [2022-11-19 08:21:21,797 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-19 08:21:21,798 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-19 08:21:21,799 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-19 08:21:21,834 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && retValue_acc == 1) && pumpRunning == 0) && methAndRunningLastTime == 0) && \valid[9] == 1) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && retValue_acc == \result) && 31 == unknown-#length-unknown[2]) && head == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && \result == tmp) && 30 == unknown-#length-unknown[13]) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[1][0] == 48) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 [2022-11-19 08:21:21,836 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) || !(\old(methAndRunningLastTime) == 0)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) [2022-11-19 08:21:21,838 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(methAndRunningLastTime) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && ((pumpRunning == 0 && \old(waterLevel) == waterLevel) || (!(pumpRunning == 0) && \old(waterLevel) == waterLevel + 1)))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-19 08:21:21,838 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((methAndRunningLastTime <= 0 && 0 <= methAndRunningLastTime) || !(0 <= head)) || !(\old(pumpRunning) == 0)) || !(0 <= #NULL)) || !(cleanupTimeShifts <= 4)) || !(head <= 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(head <= 0)) || !(4 <= cleanupTimeShifts)) || !(\old(methAndRunningLastTime) <= 0)) || !(methaneLevelCritical <= 0)) || !(#NULL <= 0)) || !(0 <= methaneLevelCritical)) || !(0 <= #NULL)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= head)) || !(#NULL <= 0)) || !(0 <= \old(methAndRunningLastTime))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && ((((((!(\old(methAndRunningLastTime) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || ((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) && (!(methaneLevelCritical == 0) || !(\old(pumpRunning) == 1)))) || methaneLevelCritical == 1) || !(\old(waterLevel) == 2)) || waterLevel == 1)) && (((((!(\old(methAndRunningLastTime) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || (((!(\old(pumpRunning) == 0) && tmp == 1) && pumpRunning == 0) && waterLevel == 1)) || !(\old(waterLevel) == 2)) || (((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && (pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 1))) && ((pumpRunning == 0 && !(methaneLevelCritical == 0)) || (methaneLevelCritical == 0 && pumpRunning == 1))))) && ((((((((((((((((((methAndRunningLastTime <= 0 && 0 <= methAndRunningLastTime) || !(0 <= head)) || !(0 <= #NULL)) || !(cleanupTimeShifts <= 4)) || !(\old(methAndRunningLastTime) == 0)) || !(head <= 0)) || !(1 == systemActive)) || !(head <= 0)) || ((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) && (!(methaneLevelCritical == 0) || !(\old(pumpRunning) == 1)))) || !(4 <= cleanupTimeShifts)) || !(methaneLevelCritical <= 0)) || !(#NULL <= 0)) || !(0 <= methaneLevelCritical)) || !(0 <= #NULL)) || !(\old(waterLevel) == 2)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= head)) || !(#NULL <= 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-19 08:21:21,839 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(waterLevel <= 2)) || waterLevel < 2) || !(methAndRunningLastTime == 0)) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) [2022-11-19 08:21:21,840 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((methAndRunningLastTime <= 0 && 0 <= methAndRunningLastTime) || !(0 <= head)) || !(\old(pumpRunning) == 0)) || !(0 <= #NULL)) || !(cleanupTimeShifts <= 4)) || !(head <= 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(head <= 0)) || !(4 <= cleanupTimeShifts)) || !(\old(methAndRunningLastTime) <= 0)) || !(methaneLevelCritical <= 0)) || !(#NULL <= 0)) || !(0 <= methaneLevelCritical)) || !(0 <= #NULL)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= head)) || !(#NULL <= 0)) || !(0 <= \old(methAndRunningLastTime))) && ((((((!(\old(methAndRunningLastTime) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || ((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) && (!(methaneLevelCritical == 0) || !(\old(pumpRunning) == 1)))) || (waterLevel == 1 && tmp == methaneLevelCritical)) || methaneLevelCritical == 1) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive))) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && (((((!(\old(methAndRunningLastTime) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || (((tmp == 1 && pumpRunning == 0) && 1 == systemActive) && waterLevel == 1)) || (((((((methAndRunningLastTime == 0 && 2 == waterLevel) && (methaneLevelCritical == 0 || methaneLevelCritical == 1)) && 1 == systemActive) && \old(waterLevel) == waterLevel) && (pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 1))) && ((pumpRunning == 0 && !(methaneLevelCritical == 0)) || (methaneLevelCritical == 0 && pumpRunning == 1))) && tmp == methaneLevelCritical)) || !(\old(waterLevel) == 2))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || (tmp <= 0 && 0 <= tmp)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || tmp == methaneLevelCritical)) && ((((((((((((((((((methAndRunningLastTime <= 0 && 0 <= methAndRunningLastTime) || !(0 <= head)) || !(0 <= #NULL)) || !(cleanupTimeShifts <= 4)) || !(\old(methAndRunningLastTime) == 0)) || !(head <= 0)) || !(1 == systemActive)) || !(head <= 0)) || ((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) && (!(methaneLevelCritical == 0) || !(\old(pumpRunning) == 1)))) || !(4 <= cleanupTimeShifts)) || !(methaneLevelCritical <= 0)) || !(#NULL <= 0)) || !(0 <= methaneLevelCritical)) || !(0 <= #NULL)) || !(\old(waterLevel) == 2)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= head)) || !(#NULL <= 0))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || \old(waterLevel) < 2) || (((((((methAndRunningLastTime == 0 && 2 == waterLevel) && (methaneLevelCritical == 0 || methaneLevelCritical == 1)) && 1 == systemActive) && \old(waterLevel) == waterLevel) && (pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 1))) && ((pumpRunning == 0 && !(methaneLevelCritical == 0)) || (methaneLevelCritical == 0 && pumpRunning == 1))) && tmp == methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2022-11-19 08:21:21,841 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || (pumpRunning == 0 && methAndRunningLastTime == 0)) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || (tmp <= 0 && 0 <= tmp)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (waterLevel == 1 && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive))) && ((((((((((!(\old(pumpRunning) == 0) && tmp == 1) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel == 1) || !(\old(methAndRunningLastTime) == 0)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 1) && \old(waterLevel) == waterLevel) && (tmp___0 == 0 || pumpRunning == tmp___0)) && tmp == methaneLevelCritical)) || !(\old(waterLevel) == 2)) || ((((methAndRunningLastTime == 0 && !(methaneLevelCritical == 1)) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || ((tmp___0 == 0 || pumpRunning == tmp___0) && tmp == methaneLevelCritical)) [2022-11-19 08:21:21,841 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && ((((((!(\old(pumpRunning) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(waterLevel <= 2)) || ((pumpRunning == 0 && tmp == 1) && aux-isMethaneLevelCritical()-aux == methaneLevelCritical)) || waterLevel < 2) || !(methAndRunningLastTime == 0))) && (((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(waterLevel <= 2)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || waterLevel < 2) || !(\valid[13] == 1)) || ((((((((\result <= 1 && retValue_acc == tmp___0) && \result <= 0) && 1 <= \result) && \result == tmp) && 0 <= \result) && \result == retValue_acc) && 1 <= tmp___0) && tmp___0 <= 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(methAndRunningLastTime == 0)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) [2022-11-19 08:21:21,843 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) && (((!(\old(methAndRunningLastTime) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-19 08:21:21,913 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/witness.graphml [2022-11-19 08:21:21,914 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-19 08:21:21,914 INFO L158 Benchmark]: Toolchain (without parser) took 134006.18ms. Allocated memory was 102.8MB in the beginning and 629.1MB in the end (delta: 526.4MB). Free memory was 61.2MB in the beginning and 409.4MB in the end (delta: -348.2MB). Peak memory consumption was 176.2MB. Max. memory is 16.1GB. [2022-11-19 08:21:21,914 INFO L158 Benchmark]: CDTParser took 0.43ms. Allocated memory is still 102.8MB. Free memory is still 78.3MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-19 08:21:21,915 INFO L158 Benchmark]: CACSL2BoogieTranslator took 597.48ms. Allocated memory is still 102.8MB. Free memory was 61.1MB in the beginning and 70.0MB in the end (delta: -9.0MB). Peak memory consumption was 6.4MB. Max. memory is 16.1GB. [2022-11-19 08:21:21,915 INFO L158 Benchmark]: Boogie Procedure Inliner took 51.58ms. Allocated memory is still 102.8MB. Free memory was 70.0MB in the beginning and 67.6MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-19 08:21:21,916 INFO L158 Benchmark]: Boogie Preprocessor took 32.68ms. Allocated memory is still 102.8MB. Free memory was 67.6MB in the beginning and 66.2MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-19 08:21:21,916 INFO L158 Benchmark]: RCFGBuilder took 769.01ms. Allocated memory is still 102.8MB. Free memory was 65.9MB in the beginning and 39.5MB in the end (delta: 26.5MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. [2022-11-19 08:21:21,917 INFO L158 Benchmark]: TraceAbstraction took 132399.37ms. Allocated memory was 102.8MB in the beginning and 629.1MB in the end (delta: 526.4MB). Free memory was 38.9MB in the beginning and 414.6MB in the end (delta: -375.8MB). Peak memory consumption was 356.5MB. Max. memory is 16.1GB. [2022-11-19 08:21:21,917 INFO L158 Benchmark]: Witness Printer took 145.14ms. Allocated memory is still 629.1MB. Free memory was 414.6MB in the beginning and 409.4MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-19 08:21:21,919 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.43ms. Allocated memory is still 102.8MB. Free memory is still 78.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 597.48ms. Allocated memory is still 102.8MB. Free memory was 61.1MB in the beginning and 70.0MB in the end (delta: -9.0MB). Peak memory consumption was 6.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 51.58ms. Allocated memory is still 102.8MB. Free memory was 70.0MB in the beginning and 67.6MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 32.68ms. Allocated memory is still 102.8MB. Free memory was 67.6MB in the beginning and 66.2MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 769.01ms. Allocated memory is still 102.8MB. Free memory was 65.9MB in the beginning and 39.5MB in the end (delta: 26.5MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. * TraceAbstraction took 132399.37ms. Allocated memory was 102.8MB in the beginning and 629.1MB in the end (delta: 526.4MB). Free memory was 38.9MB in the beginning and 414.6MB in the end (delta: -375.8MB). Peak memory consumption was 356.5MB. Max. memory is 16.1GB. * Witness Printer took 145.14ms. Allocated memory is still 629.1MB. Free memory was 414.6MB in the beginning and 409.4MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 66 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 132.3s, OverallIterations: 12, TraceHistogramMax: 7, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 25.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 32.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2851 SdHoareTripleChecker+Valid, 7.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2825 mSDsluCounter, 3610 SdHoareTripleChecker+Invalid, 6.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2785 mSDsCounter, 1519 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 5385 IncrementalHoareTripleChecker+Invalid, 6904 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1519 mSolverCounterUnsat, 825 mSDtfsCounter, 5385 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1474 GetRequests, 1052 SyntacticMatches, 25 SemanticMatches, 397 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14938 ImplicationChecksByTransitivity, 58.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1254occurred in iteration=11, InterpolantAutomatonStates: 181, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.9s AutomataMinimizationTime, 12 MinimizatonAttempts, 649 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 37 LocationsWithAnnotation, 2224 PreInvPairs, 2467 NumberOfFragments, 4242 HoareAnnotationTreeSize, 2224 FomulaSimplifications, 35006 FormulaSimplificationTreeSizeReduction, 6.1s HoareSimplificationTime, 37 FomulaSimplificationsInter, 149380 FormulaSimplificationTreeSizeReductionInter, 26.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 11.1s InterpolantComputationTime, 1146 NumberOfCodeBlocks, 1146 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 1514 ConstructedInterpolants, 0 QuantifiedInterpolants, 5878 SizeOfPredicates, 56 NumberOfNonLiveVariables, 1949 ConjunctsInSsa, 156 ConjunctsInUnsatCore, 21 InterpolantComputations, 8 PerfectInterpolantSequences, 955/1282 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 6.0s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 5, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 45, DAG_INTERPRETER_EARLY_EXITS: 6, TOOLS_POST_APPLICATIONS: 54, TOOLS_POST_TIME: 1.5s, TOOLS_POST_CALL_APPLICATIONS: 29, TOOLS_POST_CALL_TIME: 2.9s, TOOLS_POST_RETURN_APPLICATIONS: 24, TOOLS_POST_RETURN_TIME: 1.0s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 105, TOOLS_QUANTIFIERELIM_TIME: 5.3s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.3s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 131, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 19, DOMAIN_JOIN_TIME: 0.4s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 0, DOMAIN_WIDEN_TIME: 0.0s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 1, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 45, DOMAIN_ISBOTTOM_TIME: 0.1s, LOOP_SUMMARIZER_APPLICATIONS: 1, LOOP_SUMMARIZER_CACHE_MISSES: 1, LOOP_SUMMARIZER_OVERALL_TIME: 1.4s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 1.4s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 1, CALL_SUMMARIZER_APPLICATIONS: 24, CALL_SUMMARIZER_CACHE_MISSES: 5, CALL_SUMMARIZER_OVERALL_TIME: 0.2s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.2s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 758, DAG_COMPRESSION_RETAINED_NODES: 141, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 132]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((methAndRunningLastTime <= 0 && 0 <= methAndRunningLastTime) || !(0 <= head)) || !(\old(pumpRunning) == 0)) || !(0 <= #NULL)) || !(cleanupTimeShifts <= 4)) || !(head <= 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(head <= 0)) || !(4 <= cleanupTimeShifts)) || !(\old(methAndRunningLastTime) <= 0)) || !(methaneLevelCritical <= 0)) || !(#NULL <= 0)) || !(0 <= methaneLevelCritical)) || !(0 <= #NULL)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= head)) || !(#NULL <= 0)) || !(0 <= \old(methAndRunningLastTime))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && ((((((!(\old(methAndRunningLastTime) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || ((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) && (!(methaneLevelCritical == 0) || !(\old(pumpRunning) == 1)))) || methaneLevelCritical == 1) || !(\old(waterLevel) == 2)) || waterLevel == 1)) && (((((!(\old(methAndRunningLastTime) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || (((!(\old(pumpRunning) == 0) && tmp == 1) && pumpRunning == 0) && waterLevel == 1)) || !(\old(waterLevel) == 2)) || (((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && (pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 1))) && ((pumpRunning == 0 && !(methaneLevelCritical == 0)) || (methaneLevelCritical == 0 && pumpRunning == 1))))) && ((((((((((((((((((methAndRunningLastTime <= 0 && 0 <= methAndRunningLastTime) || !(0 <= head)) || !(0 <= #NULL)) || !(cleanupTimeShifts <= 4)) || !(\old(methAndRunningLastTime) == 0)) || !(head <= 0)) || !(1 == systemActive)) || !(head <= 0)) || ((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) && (!(methaneLevelCritical == 0) || !(\old(pumpRunning) == 1)))) || !(4 <= cleanupTimeShifts)) || !(methaneLevelCritical <= 0)) || !(#NULL <= 0)) || !(0 <= methaneLevelCritical)) || !(0 <= #NULL)) || !(\old(waterLevel) == 2)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= head)) || !(#NULL <= 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 289]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && splverifierCounter == 0) && !(0 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) && (((!(\old(methAndRunningLastTime) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 304]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || (pumpRunning == 0 && methAndRunningLastTime == 0)) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || (tmp <= 0 && 0 <= tmp)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (waterLevel == 1 && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive))) && ((((((((((!(\old(pumpRunning) == 0) && tmp == 1) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel == 1) || !(\old(methAndRunningLastTime) == 0)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 1) && \old(waterLevel) == waterLevel) && (tmp___0 == 0 || pumpRunning == tmp___0)) && tmp == methaneLevelCritical)) || !(\old(waterLevel) == 2)) || ((((methAndRunningLastTime == 0 && !(methaneLevelCritical == 1)) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || ((tmp___0 == 0 || pumpRunning == tmp___0) && tmp == methaneLevelCritical)) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((((!(\old(methAndRunningLastTime) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && ((pumpRunning == 0 && \old(waterLevel) == waterLevel) || (!(pumpRunning == 0) && \old(waterLevel) == waterLevel + 1)))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 421]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 74]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) || !(\old(methAndRunningLastTime) == 0)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) - InvariantResult [Line: 496]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 110]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(waterLevel <= 2)) || waterLevel < 2) || !(methAndRunningLastTime == 0)) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 313]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 314]: Loop Invariant Derived loop invariant: ((((((methAndRunningLastTime == 0 && 2 == waterLevel) && (methaneLevelCritical == 0 || methaneLevelCritical == 1)) && 1 == systemActive) && splverifierCounter == 0) && ((pumpRunning == 0 && !(methaneLevelCritical == 0)) || (methaneLevelCritical == 0 && pumpRunning == 1))) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && (methaneLevelCritical == 0 || methaneLevelCritical == 1)) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 388]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((methAndRunningLastTime <= 0 && 0 <= methAndRunningLastTime) || !(0 <= head)) || !(\old(pumpRunning) == 0)) || !(0 <= #NULL)) || !(cleanupTimeShifts <= 4)) || !(head <= 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(head <= 0)) || !(4 <= cleanupTimeShifts)) || !(\old(methAndRunningLastTime) <= 0)) || !(methaneLevelCritical <= 0)) || !(#NULL <= 0)) || !(0 <= methaneLevelCritical)) || !(0 <= #NULL)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= head)) || !(#NULL <= 0)) || !(0 <= \old(methAndRunningLastTime))) && ((((((!(\old(methAndRunningLastTime) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || ((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) && (!(methaneLevelCritical == 0) || !(\old(pumpRunning) == 1)))) || (waterLevel == 1 && tmp == methaneLevelCritical)) || methaneLevelCritical == 1) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive))) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && (((((!(\old(methAndRunningLastTime) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || (((tmp == 1 && pumpRunning == 0) && 1 == systemActive) && waterLevel == 1)) || (((((((methAndRunningLastTime == 0 && 2 == waterLevel) && (methaneLevelCritical == 0 || methaneLevelCritical == 1)) && 1 == systemActive) && \old(waterLevel) == waterLevel) && (pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 1))) && ((pumpRunning == 0 && !(methaneLevelCritical == 0)) || (methaneLevelCritical == 0 && pumpRunning == 1))) && tmp == methaneLevelCritical)) || !(\old(waterLevel) == 2))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || (tmp <= 0 && 0 <= tmp)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || tmp == methaneLevelCritical)) && ((((((((((((((((((methAndRunningLastTime <= 0 && 0 <= methAndRunningLastTime) || !(0 <= head)) || !(0 <= #NULL)) || !(cleanupTimeShifts <= 4)) || !(\old(methAndRunningLastTime) == 0)) || !(head <= 0)) || !(1 == systemActive)) || !(head <= 0)) || ((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) && (!(methaneLevelCritical == 0) || !(\old(pumpRunning) == 1)))) || !(4 <= cleanupTimeShifts)) || !(methaneLevelCritical <= 0)) || !(#NULL <= 0)) || !(0 <= methaneLevelCritical)) || !(0 <= #NULL)) || !(\old(waterLevel) == 2)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= head)) || !(#NULL <= 0))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || \old(waterLevel) < 2) || (((((((methAndRunningLastTime == 0 && 2 == waterLevel) && (methaneLevelCritical == 0 || methaneLevelCritical == 1)) && 1 == systemActive) && \old(waterLevel) == waterLevel) && (pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 1))) && ((pumpRunning == 0 && !(methaneLevelCritical == 0)) || (methaneLevelCritical == 0 && pumpRunning == 1))) && tmp == methaneLevelCritical)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 496]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && retValue_acc == 1) && pumpRunning == 0) && methAndRunningLastTime == 0) && \valid[9] == 1) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && retValue_acc == \result) && 31 == unknown-#length-unknown[2]) && head == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && \result == tmp) && 30 == unknown-#length-unknown[13]) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[1][0] == 48) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 - InvariantResult [Line: 196]: Loop Invariant Derived loop invariant: (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && ((((((!(\old(pumpRunning) == 0) || (!(methaneLevelCritical == 0) && !(methaneLevelCritical == 1))) || !(1 == systemActive)) || !(waterLevel <= 2)) || ((pumpRunning == 0 && tmp == 1) && aux-isMethaneLevelCritical()-aux == methaneLevelCritical)) || waterLevel < 2) || !(methAndRunningLastTime == 0))) && (((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(waterLevel <= 2)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || waterLevel < 2) || !(\valid[13] == 1)) || ((((((((\result <= 1 && retValue_acc == tmp___0) && \result <= 0) && 1 <= \result) && \result == tmp) && 0 <= \result) && \result == retValue_acc) && 1 <= tmp___0) && tmp___0 <= 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(methAndRunningLastTime == 0)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) RESULT: Ultimate proved your program to be correct! [2022-11-19 08:21:21,986 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_26c5842d-e1cc-4a0a-871b-c7e57dc3e991/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE