./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6b4ec56b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1f55fffdfb523946c08e4798dfd7a981dcf70594f408e958cce4b1b6e97bd924 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-6b4ec56 [2022-11-20 20:16:41,511 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-20 20:16:41,514 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-20 20:16:41,533 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-20 20:16:41,534 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-20 20:16:41,535 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-20 20:16:41,536 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-20 20:16:41,538 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-20 20:16:41,540 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-20 20:16:41,541 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-20 20:16:41,542 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-20 20:16:41,544 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-20 20:16:41,544 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-20 20:16:41,546 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-20 20:16:41,547 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-20 20:16:41,549 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-20 20:16:41,550 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-20 20:16:41,551 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-20 20:16:41,553 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-20 20:16:41,555 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-20 20:16:41,557 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-20 20:16:41,559 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-20 20:16:41,560 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-20 20:16:41,561 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-20 20:16:41,565 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-20 20:16:41,566 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-20 20:16:41,566 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-20 20:16:41,567 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-20 20:16:41,568 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-20 20:16:41,569 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-20 20:16:41,569 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-20 20:16:41,570 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-20 20:16:41,571 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-20 20:16:41,572 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-20 20:16:41,573 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-20 20:16:41,574 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-20 20:16:41,574 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-20 20:16:41,575 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-20 20:16:41,575 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-20 20:16:41,576 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-20 20:16:41,577 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-20 20:16:41,578 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-20 20:16:41,601 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-20 20:16:41,601 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-20 20:16:41,602 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-20 20:16:41,602 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-20 20:16:41,603 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-20 20:16:41,603 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-20 20:16:41,603 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-20 20:16:41,603 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-20 20:16:41,604 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-20 20:16:41,604 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-20 20:16:41,604 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-20 20:16:41,604 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-20 20:16:41,605 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-20 20:16:41,605 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-20 20:16:41,605 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-20 20:16:41,606 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-20 20:16:41,606 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-20 20:16:41,606 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-20 20:16:41,607 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-20 20:16:41,607 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-20 20:16:41,607 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-20 20:16:41,608 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-20 20:16:41,608 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-20 20:16:41,608 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-20 20:16:41,608 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-20 20:16:41,609 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-20 20:16:41,609 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-20 20:16:41,609 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-20 20:16:41,609 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-20 20:16:41,610 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-20 20:16:41,610 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-20 20:16:41,610 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-20 20:16:41,610 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 20:16:41,611 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-20 20:16:41,611 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-20 20:16:41,611 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-20 20:16:41,612 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-20 20:16:41,612 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-20 20:16:41,612 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-20 20:16:41,612 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-20 20:16:41,613 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-20 20:16:41,613 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1f55fffdfb523946c08e4798dfd7a981dcf70594f408e958cce4b1b6e97bd924 [2022-11-20 20:16:41,929 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-20 20:16:41,950 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-20 20:16:41,952 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-20 20:16:41,953 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-20 20:16:41,954 INFO L275 PluginConnector]: CDTParser initialized [2022-11-20 20:16:41,955 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/../../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c [2022-11-20 20:16:45,059 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-20 20:16:45,345 INFO L351 CDTParser]: Found 1 translation units. [2022-11-20 20:16:45,346 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c [2022-11-20 20:16:45,361 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/data/2d8ed4787/2216ce0527f24cda938b67cb75891736/FLAG44827096f [2022-11-20 20:16:45,384 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/data/2d8ed4787/2216ce0527f24cda938b67cb75891736 [2022-11-20 20:16:45,390 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-20 20:16:45,392 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-20 20:16:45,398 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-20 20:16:45,398 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-20 20:16:45,402 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-20 20:16:45,403 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 08:16:45" (1/1) ... [2022-11-20 20:16:45,404 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7b9c2d75 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:16:45, skipping insertion in model container [2022-11-20 20:16:45,406 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 08:16:45" (1/1) ... [2022-11-20 20:16:45,415 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-20 20:16:45,480 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-20 20:16:45,702 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c[1605,1618] [2022-11-20 20:16:45,911 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 20:16:45,923 INFO L203 MainTranslator]: Completed pre-run [2022-11-20 20:16:45,936 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c[1605,1618] [2022-11-20 20:16:45,978 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 20:16:45,996 INFO L208 MainTranslator]: Completed translation [2022-11-20 20:16:45,996 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:16:45 WrapperNode [2022-11-20 20:16:45,997 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-20 20:16:45,998 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-20 20:16:45,998 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-20 20:16:45,998 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-20 20:16:46,006 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:16:45" (1/1) ... [2022-11-20 20:16:46,020 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:16:45" (1/1) ... [2022-11-20 20:16:46,046 INFO L138 Inliner]: procedures = 57, calls = 103, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 221 [2022-11-20 20:16:46,047 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-20 20:16:46,048 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-20 20:16:46,048 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-20 20:16:46,048 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-20 20:16:46,058 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:16:45" (1/1) ... [2022-11-20 20:16:46,058 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:16:45" (1/1) ... [2022-11-20 20:16:46,060 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:16:45" (1/1) ... [2022-11-20 20:16:46,061 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:16:45" (1/1) ... [2022-11-20 20:16:46,067 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:16:45" (1/1) ... [2022-11-20 20:16:46,089 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:16:45" (1/1) ... [2022-11-20 20:16:46,090 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:16:45" (1/1) ... [2022-11-20 20:16:46,092 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:16:45" (1/1) ... [2022-11-20 20:16:46,094 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-20 20:16:46,096 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-20 20:16:46,096 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-20 20:16:46,096 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-20 20:16:46,097 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:16:45" (1/1) ... [2022-11-20 20:16:46,104 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 20:16:46,115 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:16:46,137 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-20 20:16:46,159 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-20 20:16:46,183 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-20 20:16:46,183 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-20 20:16:46,183 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-20 20:16:46,184 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-20 20:16:46,184 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-20 20:16:46,184 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-20 20:16:46,184 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-20 20:16:46,184 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-20 20:16:46,185 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-20 20:16:46,185 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 20:16:46,185 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 20:16:46,185 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-20 20:16:46,185 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-20 20:16:46,186 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-20 20:16:46,186 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-20 20:16:46,186 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-20 20:16:46,186 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-20 20:16:46,186 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-20 20:16:46,187 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-20 20:16:46,187 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-20 20:16:46,187 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-20 20:16:46,187 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-20 20:16:46,304 INFO L235 CfgBuilder]: Building ICFG [2022-11-20 20:16:46,306 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-20 20:16:46,661 INFO L276 CfgBuilder]: Performing block encoding [2022-11-20 20:16:46,810 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-20 20:16:46,811 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-20 20:16:46,813 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 08:16:46 BoogieIcfgContainer [2022-11-20 20:16:46,814 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-20 20:16:46,816 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-20 20:16:46,816 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-20 20:16:46,819 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-20 20:16:46,820 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 08:16:45" (1/3) ... [2022-11-20 20:16:46,821 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5a4ac01f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 08:16:46, skipping insertion in model container [2022-11-20 20:16:46,821 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:16:45" (2/3) ... [2022-11-20 20:16:46,821 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5a4ac01f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 08:16:46, skipping insertion in model container [2022-11-20 20:16:46,822 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 08:16:46" (3/3) ... [2022-11-20 20:16:46,823 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product53.cil.c [2022-11-20 20:16:46,843 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-20 20:16:46,844 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-20 20:16:46,897 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-20 20:16:46,904 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@702a3fbd, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-20 20:16:46,904 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-20 20:16:46,909 INFO L276 IsEmpty]: Start isEmpty. Operand has 69 states, 42 states have (on average 1.4285714285714286) internal successors, (60), 52 states have internal predecessors, (60), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-20 20:16:46,920 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-20 20:16:46,920 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:16:46,921 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:16:46,922 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:16:46,932 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:16:46,932 INFO L85 PathProgramCache]: Analyzing trace with hash -1362620112, now seen corresponding path program 1 times [2022-11-20 20:16:46,942 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:16:46,943 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [48417941] [2022-11-20 20:16:46,943 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:16:46,944 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:16:47,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:16:47,163 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 20:16:47,164 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:16:47,165 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [48417941] [2022-11-20 20:16:47,165 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [48417941] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:16:47,166 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 20:16:47,166 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-20 20:16:47,168 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [759758306] [2022-11-20 20:16:47,169 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:16:47,175 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-20 20:16:47,176 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:16:47,233 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-20 20:16:47,234 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 20:16:47,237 INFO L87 Difference]: Start difference. First operand has 69 states, 42 states have (on average 1.4285714285714286) internal successors, (60), 52 states have internal predecessors, (60), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 20:16:47,369 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:16:47,370 INFO L93 Difference]: Finished difference Result 136 states and 185 transitions. [2022-11-20 20:16:47,371 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-20 20:16:47,372 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-11-20 20:16:47,373 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:16:47,386 INFO L225 Difference]: With dead ends: 136 [2022-11-20 20:16:47,386 INFO L226 Difference]: Without dead ends: 64 [2022-11-20 20:16:47,391 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 20:16:47,396 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 71 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 20:16:47,398 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 71 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 20:16:47,417 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2022-11-20 20:16:47,451 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 64. [2022-11-20 20:16:47,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 39 states have (on average 1.3333333333333333) internal successors, (52), 48 states have internal predecessors, (52), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-20 20:16:47,460 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 83 transitions. [2022-11-20 20:16:47,462 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 83 transitions. Word has length 17 [2022-11-20 20:16:47,462 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:16:47,463 INFO L495 AbstractCegarLoop]: Abstraction has 64 states and 83 transitions. [2022-11-20 20:16:47,464 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 20:16:47,464 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 83 transitions. [2022-11-20 20:16:47,471 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-20 20:16:47,471 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:16:47,471 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:16:47,472 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-20 20:16:47,473 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:16:47,475 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:16:47,476 INFO L85 PathProgramCache]: Analyzing trace with hash 1971384565, now seen corresponding path program 1 times [2022-11-20 20:16:47,476 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:16:47,476 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1280648269] [2022-11-20 20:16:47,476 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:16:47,477 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:16:47,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:16:47,653 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 20:16:47,653 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:16:47,654 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1280648269] [2022-11-20 20:16:47,654 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1280648269] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:16:47,655 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 20:16:47,655 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 20:16:47,655 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1138884049] [2022-11-20 20:16:47,656 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:16:47,659 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 20:16:47,662 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:16:47,663 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 20:16:47,663 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 20:16:47,663 INFO L87 Difference]: Start difference. First operand 64 states and 83 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 20:16:47,746 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:16:47,746 INFO L93 Difference]: Finished difference Result 105 states and 137 transitions. [2022-11-20 20:16:47,747 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 20:16:47,747 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-11-20 20:16:47,747 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:16:47,748 INFO L225 Difference]: With dead ends: 105 [2022-11-20 20:16:47,748 INFO L226 Difference]: Without dead ends: 56 [2022-11-20 20:16:47,749 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 20:16:47,750 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 7 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 20:16:47,751 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 105 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 20:16:47,752 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2022-11-20 20:16:47,758 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 56. [2022-11-20 20:16:47,763 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 34 states have (on average 1.3529411764705883) internal successors, (46), 43 states have internal predecessors, (46), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-20 20:16:47,764 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 72 transitions. [2022-11-20 20:16:47,764 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 72 transitions. Word has length 18 [2022-11-20 20:16:47,764 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:16:47,764 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 72 transitions. [2022-11-20 20:16:47,765 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 20:16:47,765 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 72 transitions. [2022-11-20 20:16:47,766 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-20 20:16:47,766 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:16:47,766 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:16:47,766 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-20 20:16:47,767 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:16:47,767 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:16:47,767 INFO L85 PathProgramCache]: Analyzing trace with hash -932960636, now seen corresponding path program 1 times [2022-11-20 20:16:47,767 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:16:47,768 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1174827535] [2022-11-20 20:16:47,768 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:16:47,768 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:16:47,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:16:47,939 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 20:16:47,939 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:16:47,940 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1174827535] [2022-11-20 20:16:47,940 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1174827535] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:16:47,940 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 20:16:47,940 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-20 20:16:47,940 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [889272764] [2022-11-20 20:16:47,941 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:16:47,952 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-20 20:16:47,953 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:16:47,953 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 20:16:47,954 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 20:16:47,954 INFO L87 Difference]: Start difference. First operand 56 states and 72 transitions. Second operand has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 20:16:48,088 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:16:48,089 INFO L93 Difference]: Finished difference Result 110 states and 143 transitions. [2022-11-20 20:16:48,089 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-20 20:16:48,090 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2022-11-20 20:16:48,090 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:16:48,091 INFO L225 Difference]: With dead ends: 110 [2022-11-20 20:16:48,091 INFO L226 Difference]: Without dead ends: 56 [2022-11-20 20:16:48,092 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-20 20:16:48,093 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 68 mSDsluCounter, 23 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 75 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 20:16:48,094 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 75 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 20:16:48,095 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2022-11-20 20:16:48,111 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 56. [2022-11-20 20:16:48,111 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 43 states have internal predecessors, (45), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-20 20:16:48,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 71 transitions. [2022-11-20 20:16:48,112 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 71 transitions. Word has length 20 [2022-11-20 20:16:48,113 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:16:48,116 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 71 transitions. [2022-11-20 20:16:48,116 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 20:16:48,116 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 71 transitions. [2022-11-20 20:16:48,117 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-20 20:16:48,117 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:16:48,118 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:16:48,118 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-20 20:16:48,118 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:16:48,119 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:16:48,119 INFO L85 PathProgramCache]: Analyzing trace with hash 1469745672, now seen corresponding path program 1 times [2022-11-20 20:16:48,119 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:16:48,119 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [140178856] [2022-11-20 20:16:48,120 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:16:48,120 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:16:48,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:16:48,252 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-20 20:16:48,253 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:16:48,253 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [140178856] [2022-11-20 20:16:48,253 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [140178856] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:16:48,253 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 20:16:48,254 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 20:16:48,254 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2032613082] [2022-11-20 20:16:48,254 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:16:48,254 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 20:16:48,255 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:16:48,255 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 20:16:48,255 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 20:16:48,255 INFO L87 Difference]: Start difference. First operand 56 states and 71 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-20 20:16:48,356 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:16:48,356 INFO L93 Difference]: Finished difference Result 149 states and 194 transitions. [2022-11-20 20:16:48,356 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 20:16:48,357 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 30 [2022-11-20 20:16:48,357 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:16:48,358 INFO L225 Difference]: With dead ends: 149 [2022-11-20 20:16:48,358 INFO L226 Difference]: Without dead ends: 95 [2022-11-20 20:16:48,364 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 20:16:48,365 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 43 mSDsluCounter, 46 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 43 SdHoareTripleChecker+Valid, 121 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 20:16:48,366 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [43 Valid, 121 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 20:16:48,367 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95 states. [2022-11-20 20:16:48,383 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95 to 93. [2022-11-20 20:16:48,384 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 60 states have (on average 1.2666666666666666) internal successors, (76), 68 states have internal predecessors, (76), 17 states have call successors, (17), 15 states have call predecessors, (17), 15 states have return successors, (23), 15 states have call predecessors, (23), 17 states have call successors, (23) [2022-11-20 20:16:48,387 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 116 transitions. [2022-11-20 20:16:48,388 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 116 transitions. Word has length 30 [2022-11-20 20:16:48,392 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:16:48,392 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 116 transitions. [2022-11-20 20:16:48,392 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-20 20:16:48,392 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 116 transitions. [2022-11-20 20:16:48,394 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-20 20:16:48,395 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:16:48,395 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:16:48,395 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-20 20:16:48,395 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:16:48,396 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:16:48,396 INFO L85 PathProgramCache]: Analyzing trace with hash -526885269, now seen corresponding path program 1 times [2022-11-20 20:16:48,396 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:16:48,396 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1616902854] [2022-11-20 20:16:48,396 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:16:48,396 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:16:48,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:16:48,583 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 20:16:48,583 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:16:48,583 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1616902854] [2022-11-20 20:16:48,584 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1616902854] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:16:48,586 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 20:16:48,586 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-20 20:16:48,587 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [386095255] [2022-11-20 20:16:48,587 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:16:48,587 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 20:16:48,587 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:16:48,588 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 20:16:48,588 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-20 20:16:48,588 INFO L87 Difference]: Start difference. First operand 93 states and 116 transitions. Second operand has 6 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-20 20:16:48,832 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:16:48,832 INFO L93 Difference]: Finished difference Result 271 states and 345 transitions. [2022-11-20 20:16:48,833 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-20 20:16:48,833 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 33 [2022-11-20 20:16:48,833 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:16:48,835 INFO L225 Difference]: With dead ends: 271 [2022-11-20 20:16:48,836 INFO L226 Difference]: Without dead ends: 180 [2022-11-20 20:16:48,837 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-20 20:16:48,838 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 48 mSDsluCounter, 225 mSDsCounter, 0 mSdLazyCounter, 111 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 292 SdHoareTripleChecker+Invalid, 112 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 111 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 20:16:48,839 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 292 Invalid, 112 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 20:16:48,840 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2022-11-20 20:16:48,869 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 172. [2022-11-20 20:16:48,870 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 172 states, 111 states have (on average 1.2342342342342343) internal successors, (137), 124 states have internal predecessors, (137), 32 states have call successors, (32), 28 states have call predecessors, (32), 28 states have return successors, (44), 28 states have call predecessors, (44), 32 states have call successors, (44) [2022-11-20 20:16:48,871 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 213 transitions. [2022-11-20 20:16:48,872 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 213 transitions. Word has length 33 [2022-11-20 20:16:48,872 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:16:48,872 INFO L495 AbstractCegarLoop]: Abstraction has 172 states and 213 transitions. [2022-11-20 20:16:48,872 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-20 20:16:48,873 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 213 transitions. [2022-11-20 20:16:48,873 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-20 20:16:48,874 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:16:48,874 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:16:48,874 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-20 20:16:48,874 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:16:48,875 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:16:48,875 INFO L85 PathProgramCache]: Analyzing trace with hash 1521525104, now seen corresponding path program 1 times [2022-11-20 20:16:48,875 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:16:48,875 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [231237413] [2022-11-20 20:16:48,875 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:16:48,876 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:16:48,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:16:48,988 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 20:16:48,988 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:16:48,988 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [231237413] [2022-11-20 20:16:48,989 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [231237413] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:16:48,989 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 20:16:48,989 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 20:16:48,989 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1354427308] [2022-11-20 20:16:48,989 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:16:48,991 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 20:16:48,992 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:16:48,993 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 20:16:48,993 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 20:16:48,993 INFO L87 Difference]: Start difference. First operand 172 states and 213 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 20:16:49,079 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:16:49,080 INFO L93 Difference]: Finished difference Result 263 states and 335 transitions. [2022-11-20 20:16:49,081 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 20:16:49,081 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 36 [2022-11-20 20:16:49,082 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:16:49,092 INFO L225 Difference]: With dead ends: 263 [2022-11-20 20:16:49,092 INFO L226 Difference]: Without dead ends: 261 [2022-11-20 20:16:49,093 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 20:16:49,097 INFO L413 NwaCegarLoop]: 78 mSDtfsCounter, 47 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 34 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 131 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 34 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 20:16:49,098 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 131 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 34 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 20:16:49,099 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 261 states. [2022-11-20 20:16:49,147 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 261 to 261. [2022-11-20 20:16:49,148 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 261 states, 168 states have (on average 1.2380952380952381) internal successors, (208), 188 states have internal predecessors, (208), 49 states have call successors, (49), 43 states have call predecessors, (49), 43 states have return successors, (75), 43 states have call predecessors, (75), 49 states have call successors, (75) [2022-11-20 20:16:49,150 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 261 states to 261 states and 332 transitions. [2022-11-20 20:16:49,151 INFO L78 Accepts]: Start accepts. Automaton has 261 states and 332 transitions. Word has length 36 [2022-11-20 20:16:49,151 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:16:49,151 INFO L495 AbstractCegarLoop]: Abstraction has 261 states and 332 transitions. [2022-11-20 20:16:49,151 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 20:16:49,152 INFO L276 IsEmpty]: Start isEmpty. Operand 261 states and 332 transitions. [2022-11-20 20:16:49,154 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-11-20 20:16:49,154 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:16:49,155 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:16:49,155 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-20 20:16:49,155 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:16:49,155 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:16:49,156 INFO L85 PathProgramCache]: Analyzing trace with hash 1301475980, now seen corresponding path program 1 times [2022-11-20 20:16:49,156 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:16:49,156 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [728803691] [2022-11-20 20:16:49,156 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:16:49,156 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:16:49,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:16:49,250 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-20 20:16:49,250 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:16:49,250 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [728803691] [2022-11-20 20:16:49,250 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [728803691] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:16:49,251 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 20:16:49,251 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-20 20:16:49,251 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1413976218] [2022-11-20 20:16:49,251 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:16:49,252 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-20 20:16:49,252 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:16:49,252 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 20:16:49,252 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 20:16:49,253 INFO L87 Difference]: Start difference. First operand 261 states and 332 transitions. Second operand has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-11-20 20:16:49,355 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:16:49,355 INFO L93 Difference]: Finished difference Result 425 states and 547 transitions. [2022-11-20 20:16:49,357 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 20:16:49,358 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 65 [2022-11-20 20:16:49,360 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:16:49,363 INFO L225 Difference]: With dead ends: 425 [2022-11-20 20:16:49,363 INFO L226 Difference]: Without dead ends: 245 [2022-11-20 20:16:49,368 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-20 20:16:49,374 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 45 mSDsluCounter, 117 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 20:16:49,374 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [45 Valid, 190 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 20:16:49,375 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 245 states. [2022-11-20 20:16:49,412 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 245 to 233. [2022-11-20 20:16:49,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 233 states, 148 states have (on average 1.2297297297297298) internal successors, (182), 167 states have internal predecessors, (182), 45 states have call successors, (45), 39 states have call predecessors, (45), 39 states have return successors, (65), 38 states have call predecessors, (65), 45 states have call successors, (65) [2022-11-20 20:16:49,415 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 233 states to 233 states and 292 transitions. [2022-11-20 20:16:49,416 INFO L78 Accepts]: Start accepts. Automaton has 233 states and 292 transitions. Word has length 65 [2022-11-20 20:16:49,416 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:16:49,416 INFO L495 AbstractCegarLoop]: Abstraction has 233 states and 292 transitions. [2022-11-20 20:16:49,417 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-11-20 20:16:49,417 INFO L276 IsEmpty]: Start isEmpty. Operand 233 states and 292 transitions. [2022-11-20 20:16:49,420 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-11-20 20:16:49,420 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:16:49,420 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:16:49,420 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-20 20:16:49,421 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:16:49,421 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:16:49,421 INFO L85 PathProgramCache]: Analyzing trace with hash 2099388726, now seen corresponding path program 1 times [2022-11-20 20:16:49,422 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:16:49,422 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1219895447] [2022-11-20 20:16:49,422 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:16:49,422 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:16:49,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:16:49,721 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 11 proven. 6 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-20 20:16:49,722 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:16:49,722 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1219895447] [2022-11-20 20:16:49,722 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1219895447] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:16:49,722 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1067435466] [2022-11-20 20:16:49,722 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:16:49,722 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:16:49,723 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:16:49,726 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:16:49,734 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-20 20:16:49,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:16:49,841 INFO L263 TraceCheckSpWp]: Trace formula consists of 332 conjuncts, 6 conjunts are in the unsatisfiable core [2022-11-20 20:16:49,848 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:16:49,989 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 24 proven. 4 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-20 20:16:49,989 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:16:50,222 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 20 proven. 4 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-20 20:16:50,223 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1067435466] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 20:16:50,223 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1719656935] [2022-11-20 20:16:50,242 INFO L159 IcfgInterpreter]: Started Sifa with 43 locations of interest [2022-11-20 20:16:50,243 INFO L166 IcfgInterpreter]: Building call graph [2022-11-20 20:16:50,246 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-20 20:16:50,252 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-20 20:16:50,252 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-20 20:16:52,767 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 32 for LOIs [2022-11-20 20:16:53,044 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 54 for LOIs [2022-11-20 20:16:53,197 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 28 for LOIs [2022-11-20 20:16:53,226 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 51 for LOIs [2022-11-20 20:16:53,240 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 45 for LOIs [2022-11-20 20:16:53,250 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-20 20:16:59,579 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4238#(and (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|) (<= 0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~4#1|) (= ~head~0.offset 0) (<= 2 ~waterLevel~0) (= 1 ~systemActive~0) (<= 0 ~methAndRunningLastTime~0) (<= 2 |old(~waterLevel~0)|) (<= 0 |old(~methAndRunningLastTime~0)|) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| ~methaneLevelCritical~0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 2147483647) (<= 0 ~methaneLevelCritical~0) (= ~head~0.base 0) (= |#NULL.offset| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~4#1|) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0)) (not (= ~methAndRunningLastTime~0 0)) (<= 0 |#StackHeapBarrier|) (= ~pumpRunning~0 1) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-20 20:16:59,579 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-20 20:16:59,580 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:16:59,580 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 5, 5] total 14 [2022-11-20 20:16:59,580 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [23138145] [2022-11-20 20:16:59,580 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:16:59,581 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-20 20:16:59,581 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:16:59,581 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-20 20:16:59,582 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=197, Invalid=1695, Unknown=0, NotChecked=0, Total=1892 [2022-11-20 20:16:59,582 INFO L87 Difference]: Start difference. First operand 233 states and 292 transitions. Second operand has 14 states, 12 states have (on average 6.833333333333333) internal successors, (82), 12 states have internal predecessors, (82), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 6 states have call successors, (19) [2022-11-20 20:17:01,362 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:17:01,363 INFO L93 Difference]: Finished difference Result 625 states and 782 transitions. [2022-11-20 20:17:01,364 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-11-20 20:17:01,365 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 12 states have (on average 6.833333333333333) internal successors, (82), 12 states have internal predecessors, (82), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 6 states have call successors, (19) Word has length 73 [2022-11-20 20:17:01,365 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:17:01,367 INFO L225 Difference]: With dead ends: 625 [2022-11-20 20:17:01,368 INFO L226 Difference]: Without dead ends: 394 [2022-11-20 20:17:01,370 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 269 GetRequests, 189 SyntacticMatches, 11 SemanticMatches, 69 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1620 ImplicationChecksByTransitivity, 7.1s TimeCoverageRelationStatistics Valid=466, Invalid=4504, Unknown=0, NotChecked=0, Total=4970 [2022-11-20 20:17:01,371 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 576 mSDsluCounter, 182 mSDsCounter, 0 mSdLazyCounter, 1299 mSolverCounterSat, 329 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 582 SdHoareTripleChecker+Valid, 210 SdHoareTripleChecker+Invalid, 1628 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 329 IncrementalHoareTripleChecker+Valid, 1299 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-20 20:17:01,371 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [582 Valid, 210 Invalid, 1628 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [329 Valid, 1299 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-20 20:17:01,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 394 states. [2022-11-20 20:17:01,427 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 394 to 372. [2022-11-20 20:17:01,428 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 372 states, 240 states have (on average 1.1583333333333334) internal successors, (278), 266 states have internal predecessors, (278), 64 states have call successors, (64), 52 states have call predecessors, (64), 67 states have return successors, (83), 68 states have call predecessors, (83), 64 states have call successors, (83) [2022-11-20 20:17:01,431 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 372 states to 372 states and 425 transitions. [2022-11-20 20:17:01,432 INFO L78 Accepts]: Start accepts. Automaton has 372 states and 425 transitions. Word has length 73 [2022-11-20 20:17:01,433 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:17:01,434 INFO L495 AbstractCegarLoop]: Abstraction has 372 states and 425 transitions. [2022-11-20 20:17:01,434 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 12 states have (on average 6.833333333333333) internal successors, (82), 12 states have internal predecessors, (82), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 6 states have call successors, (19) [2022-11-20 20:17:01,434 INFO L276 IsEmpty]: Start isEmpty. Operand 372 states and 425 transitions. [2022-11-20 20:17:01,437 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2022-11-20 20:17:01,438 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:17:01,438 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:17:01,451 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-20 20:17:01,644 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2022-11-20 20:17:01,645 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:17:01,645 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:17:01,645 INFO L85 PathProgramCache]: Analyzing trace with hash -1377653795, now seen corresponding path program 1 times [2022-11-20 20:17:01,645 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:17:01,645 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [508537650] [2022-11-20 20:17:01,646 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:17:01,646 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:17:01,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:17:01,927 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 9 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-20 20:17:01,927 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:17:01,928 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [508537650] [2022-11-20 20:17:01,928 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [508537650] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:17:01,928 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [653979189] [2022-11-20 20:17:01,928 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:17:01,928 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:17:01,928 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:17:01,929 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:17:01,937 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-20 20:17:02,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:17:02,054 INFO L263 TraceCheckSpWp]: Trace formula consists of 343 conjuncts, 23 conjunts are in the unsatisfiable core [2022-11-20 20:17:02,057 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:17:02,131 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-20 20:17:02,131 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-20 20:17:02,131 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [653979189] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:17:02,131 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-20 20:17:02,131 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [11] total 14 [2022-11-20 20:17:02,132 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1959055097] [2022-11-20 20:17:02,132 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:17:02,132 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-20 20:17:02,133 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:17:02,133 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-20 20:17:02,133 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2022-11-20 20:17:02,133 INFO L87 Difference]: Start difference. First operand 372 states and 425 transitions. Second operand has 9 states, 7 states have (on average 6.714285714285714) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (10), 2 states have call predecessors, (10), 4 states have return successors, (10), 4 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-20 20:17:02,482 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:17:02,482 INFO L93 Difference]: Finished difference Result 827 states and 957 transitions. [2022-11-20 20:17:02,482 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-20 20:17:02,483 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 6.714285714285714) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (10), 2 states have call predecessors, (10), 4 states have return successors, (10), 4 states have call predecessors, (10), 2 states have call successors, (10) Word has length 79 [2022-11-20 20:17:02,483 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:17:02,483 INFO L225 Difference]: With dead ends: 827 [2022-11-20 20:17:02,484 INFO L226 Difference]: Without dead ends: 0 [2022-11-20 20:17:02,485 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 102 GetRequests, 83 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=72, Invalid=348, Unknown=0, NotChecked=0, Total=420 [2022-11-20 20:17:02,486 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 51 mSDsluCounter, 298 mSDsCounter, 0 mSdLazyCounter, 330 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 367 SdHoareTripleChecker+Invalid, 337 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 330 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 20:17:02,486 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 367 Invalid, 337 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 330 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 20:17:02,487 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-20 20:17:02,487 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-20 20:17:02,487 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 20:17:02,487 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-20 20:17:02,488 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 79 [2022-11-20 20:17:02,488 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:17:02,488 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-20 20:17:02,488 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 6.714285714285714) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (10), 2 states have call predecessors, (10), 4 states have return successors, (10), 4 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-20 20:17:02,488 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-20 20:17:02,488 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-20 20:17:02,491 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-20 20:17:02,503 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-20 20:17:02,698 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:17:02,700 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-20 20:17:06,392 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 624 631) the Hoare annotation is: (or (not (<= 1 |old(~pumpRunning~0)|)) (= 0 ~systemActive~0) (<= |old(~pumpRunning~0)| ~pumpRunning~0)) [2022-11-20 20:17:06,393 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 624 631) no Hoare annotation was computed. [2022-11-20 20:17:06,393 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 531 537) no Hoare annotation was computed. [2022-11-20 20:17:06,394 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 531 537) the Hoare annotation is: true [2022-11-20 20:17:06,396 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 893 904) the Hoare annotation is: (let ((.cse0 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 (not (<= 1 ~pumpRunning~0)) .cse1))) [2022-11-20 20:17:06,396 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 893 904) no Hoare annotation was computed. [2022-11-20 20:17:06,397 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 905 913) the Hoare annotation is: true [2022-11-20 20:17:06,397 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 905 913) no Hoare annotation was computed. [2022-11-20 20:17:06,397 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 767 796) no Hoare annotation was computed. [2022-11-20 20:17:06,397 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 767 796) the Hoare annotation is: true [2022-11-20 20:17:06,397 INFO L902 garLoopResultBuilder]: At program point L792(lines 767 796) the Hoare annotation is: true [2022-11-20 20:17:06,404 INFO L899 garLoopResultBuilder]: For program point L788(line 788) no Hoare annotation was computed. [2022-11-20 20:17:06,404 INFO L899 garLoopResultBuilder]: For program point L781(lines 781 785) no Hoare annotation was computed. [2022-11-20 20:17:06,404 INFO L902 garLoopResultBuilder]: At program point L781-1(lines 781 785) the Hoare annotation is: true [2022-11-20 20:17:06,405 INFO L902 garLoopResultBuilder]: At program point L777-2(lines 777 791) the Hoare annotation is: true [2022-11-20 20:17:06,405 INFO L902 garLoopResultBuilder]: At program point L773(line 773) the Hoare annotation is: true [2022-11-20 20:17:06,407 INFO L899 garLoopResultBuilder]: For program point L773-1(line 773) no Hoare annotation was computed. [2022-11-20 20:17:06,409 INFO L895 garLoopResultBuilder]: At program point L605(line 605) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2) (or .cse1 (and (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0) (<= |old(~pumpRunning~0)| ~pumpRunning~0)) .cse2) (or (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2022-11-20 20:17:06,409 INFO L895 garLoopResultBuilder]: At program point L601(line 601) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0) (or (not (<= 1 |old(~pumpRunning~0)|)) (and (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0) (not (= |timeShift_processEnvironment_~tmp~6#1| 0)) (<= |old(~pumpRunning~0)| ~pumpRunning~0)) .cse0))) [2022-11-20 20:17:06,410 INFO L895 garLoopResultBuilder]: At program point L742(line 742) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse4 (= ~methaneLevelCritical~0 0)) (.cse8 (= ~pumpRunning~0 0)) (.cse2 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse9 (not .cse3))) (let ((.cse1 (and .cse8 .cse2 .cse9)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not .cse4))) (and (or .cse0 .cse1 (and .cse2 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) .cse3) (or .cse4 .cse0 .cse1 .cse3) (or .cse5 (and (<= 1 ~pumpRunning~0) .cse6) .cse7 (and .cse8 .cse9) .cse3) (or .cse5 .cse7 .cse6 .cse10 .cse3) (or .cse7 .cse6 .cse0 .cse10 .cse3))))) [2022-11-20 20:17:06,411 INFO L899 garLoopResultBuilder]: For program point L742-1(line 742) no Hoare annotation was computed. [2022-11-20 20:17:06,411 INFO L895 garLoopResultBuilder]: At program point L610(line 610) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0))) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0))) [2022-11-20 20:17:06,411 INFO L895 garLoopResultBuilder]: At program point L610-1(lines 591 615) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse4 (= ~methaneLevelCritical~0 0)) (.cse8 (= ~pumpRunning~0 0)) (.cse2 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse9 (not .cse3))) (let ((.cse1 (and .cse8 .cse2 .cse9)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not .cse4))) (and (or .cse0 .cse1 (and .cse2 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) .cse3) (or .cse4 .cse0 .cse1 .cse3) (or .cse5 (and (<= 1 ~pumpRunning~0) .cse6) .cse7 (and .cse8 .cse9) .cse3) (or .cse5 .cse7 .cse6 .cse10 .cse3) (or .cse7 .cse6 .cse0 .cse10 .cse3))))) [2022-11-20 20:17:06,412 INFO L899 garLoopResultBuilder]: For program point L511-1(lines 510 529) no Hoare annotation was computed. [2022-11-20 20:17:06,412 INFO L899 garLoopResultBuilder]: For program point L599(lines 599 607) no Hoare annotation was computed. [2022-11-20 20:17:06,412 INFO L895 garLoopResultBuilder]: At program point L54(line 54) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0))) [2022-11-20 20:17:06,413 INFO L899 garLoopResultBuilder]: For program point L595(lines 595 612) no Hoare annotation was computed. [2022-11-20 20:17:06,413 INFO L899 garLoopResultBuilder]: For program point L748(lines 748 758) no Hoare annotation was computed. [2022-11-20 20:17:06,413 INFO L895 garLoopResultBuilder]: At program point L744(lines 744 761) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse0 (= ~methaneLevelCritical~0 0)) (.cse7 (= ~pumpRunning~0 0)) (.cse9 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse8 (not .cse3))) (let ((.cse2 (and .cse7 .cse9 .cse8)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0)) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not .cse0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 (and (<= 1 ~pumpRunning~0) .cse5) .cse6 (and .cse7 .cse8) .cse3) (or (and .cse9 .cse10 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) .cse1 .cse2 .cse3) (or .cse4 .cse6 (and .cse5 .cse10) .cse11 .cse3) (or .cse6 .cse1 .cse11 .cse10 .cse3) (or .cse6 .cse5 .cse1 .cse11 .cse3))))) [2022-11-20 20:17:06,413 INFO L895 garLoopResultBuilder]: At program point L744-1(lines 736 764) the Hoare annotation is: (let ((.cse5 (= ~methaneLevelCritical~0 0))) (let ((.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (not .cse5)) (.cse7 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0)) (.cse2 (= 0 ~systemActive~0))) (and (or (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 (and .cse3 .cse4)) (let ((.cse6 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0))) (or (and .cse4 .cse5 .cse6 .cse7 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) .cse8 (and .cse3 .cse4 .cse6) .cse2)) (or .cse0 .cse1 (and .cse4 .cse7) .cse9 .cse2) (or .cse1 .cse8 .cse9 .cse7 .cse2)))) [2022-11-20 20:17:06,414 INFO L895 garLoopResultBuilder]: At program point L637(line 637) the Hoare annotation is: (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) (or .cse2 (= ~methAndRunningLastTime~0 0) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse1))) [2022-11-20 20:17:06,414 INFO L895 garLoopResultBuilder]: At program point L637-1(line 637) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse2 (and (= |timeShift_isMethaneAlarm_#t~ret34#1| ~methaneLevelCritical~0) (<= |old(~pumpRunning~0)| ~pumpRunning~0)) .cse1) (or .cse0 (= ~methAndRunningLastTime~0 0) .cse2 (not (= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-20 20:17:06,414 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 507 530) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and (= ~pumpRunning~0 0) .cse2)) (or .cse3 .cse1 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) (or .cse0 .cse2 .cse3 .cse1))) [2022-11-20 20:17:06,415 INFO L899 garLoopResultBuilder]: For program point L749(lines 749 755) no Hoare annotation was computed. [2022-11-20 20:17:06,416 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 507 530) no Hoare annotation was computed. [2022-11-20 20:17:06,416 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-11-20 20:17:06,416 INFO L899 garLoopResultBuilder]: For program point L518-1(lines 518 524) no Hoare annotation was computed. [2022-11-20 20:17:06,416 INFO L899 garLoopResultBuilder]: For program point L93(lines 93 99) no Hoare annotation was computed. [2022-11-20 20:17:06,416 INFO L899 garLoopResultBuilder]: For program point L93-1(lines 93 99) no Hoare annotation was computed. [2022-11-20 20:17:06,417 INFO L902 garLoopResultBuilder]: At program point L122(lines 63 126) the Hoare annotation is: true [2022-11-20 20:17:06,417 INFO L895 garLoopResultBuilder]: At program point L85(line 85) the Hoare annotation is: (let ((.cse6 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse7 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1))) (.cse3 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse3 .cse4 .cse5) (and .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse7 .cse3 .cse4 .cse5))) [2022-11-20 20:17:06,417 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-20 20:17:06,418 INFO L895 garLoopResultBuilder]: At program point L119(lines 72 120) the Hoare annotation is: false [2022-11-20 20:17:06,418 INFO L899 garLoopResultBuilder]: For program point L74(lines 73 118) no Hoare annotation was computed. [2022-11-20 20:17:06,418 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-20 20:17:06,418 INFO L895 garLoopResultBuilder]: At program point L95(line 95) the Hoare annotation is: (let ((.cse6 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse7 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1))) (.cse3 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse3 .cse4 .cse5) (and .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse7 .cse3 .cse4 .cse5))) [2022-11-20 20:17:06,419 INFO L895 garLoopResultBuilder]: At program point L116(lines 73 118) the Hoare annotation is: (let ((.cse6 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse7 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1))) (.cse3 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse3 .cse4 .cse5) (and .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse7 .cse3 .cse4 .cse5))) [2022-11-20 20:17:06,420 INFO L899 garLoopResultBuilder]: For program point L83(lines 83 89) no Hoare annotation was computed. [2022-11-20 20:17:06,420 INFO L899 garLoopResultBuilder]: For program point L83-1(lines 83 89) no Hoare annotation was computed. [2022-11-20 20:17:06,420 INFO L895 garLoopResultBuilder]: At program point L852(lines 852 859) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0) (= |ULTIMATE.start_main_~tmp~10#1| 1)) [2022-11-20 20:17:06,420 INFO L902 garLoopResultBuilder]: At program point L852-2(lines 852 859) the Hoare annotation is: true [2022-11-20 20:17:06,421 INFO L895 garLoopResultBuilder]: At program point L109-2(lines 103 114) the Hoare annotation is: (let ((.cse6 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse7 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1))) (.cse3 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse3 .cse4 .cse5) (and .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse7 .cse3 .cse4 .cse5))) [2022-11-20 20:17:06,421 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 539 563) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse0 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 20:17:06,421 INFO L895 garLoopResultBuilder]: At program point L543(lines 543 560) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse0 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 20:17:06,421 INFO L895 garLoopResultBuilder]: At program point L558(line 558) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse0 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 20:17:06,422 INFO L899 garLoopResultBuilder]: For program point L558-1(lines 539 563) no Hoare annotation was computed. [2022-11-20 20:17:06,422 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 539 563) no Hoare annotation was computed. [2022-11-20 20:17:06,423 INFO L895 garLoopResultBuilder]: At program point L553(line 553) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse0) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 20:17:06,424 INFO L895 garLoopResultBuilder]: At program point L547(lines 547 555) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse0) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 20:17:06,424 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 881 892) no Hoare annotation was computed. [2022-11-20 20:17:06,424 INFO L902 garLoopResultBuilder]: At program point waterRiseENTRY(lines 881 892) the Hoare annotation is: true [2022-11-20 20:17:06,425 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 565 589) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse0 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 20:17:06,425 INFO L895 garLoopResultBuilder]: At program point L579(line 579) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse0 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 20:17:06,425 INFO L895 garLoopResultBuilder]: At program point L575(line 575) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse0 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 20:17:06,427 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 565 589) no Hoare annotation was computed. [2022-11-20 20:17:06,427 INFO L899 garLoopResultBuilder]: For program point L573(lines 573 581) no Hoare annotation was computed. [2022-11-20 20:17:06,427 INFO L895 garLoopResultBuilder]: At program point L569(lines 569 586) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse0 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 20:17:06,427 INFO L895 garLoopResultBuilder]: At program point L584(line 584) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse0) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 20:17:06,428 INFO L899 garLoopResultBuilder]: For program point L584-1(lines 565 589) no Hoare annotation was computed. [2022-11-20 20:17:06,431 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:17:06,434 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-20 20:17:06,468 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 08:17:06 BoogieIcfgContainer [2022-11-20 20:17:06,484 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-20 20:17:06,484 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-20 20:17:06,484 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-20 20:17:06,485 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-20 20:17:06,485 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 08:16:46" (3/4) ... [2022-11-20 20:17:06,488 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-20 20:17:06,494 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-20 20:17:06,494 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-20 20:17:06,494 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-20 20:17:06,495 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-20 20:17:06,495 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-20 20:17:06,495 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-20 20:17:06,495 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 20:17:06,495 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-20 20:17:06,496 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-11-20 20:17:06,513 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2022-11-20 20:17:06,513 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 14 nodes and edges [2022-11-20 20:17:06,514 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-20 20:17:06,515 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 20:17:06,515 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 20:17:06,542 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == systemActive) && splverifierCounter == 0) && !(0 == systemActive)) || ((((1 <= pumpRunning && (!(\old(methaneLevelCritical) == 0) || methaneLevelCritical == 1)) && tmp == systemActive) && splverifierCounter == 0) && !(0 == systemActive))) || ((((1 <= pumpRunning && methaneLevelCritical == 0) && tmp == systemActive) && splverifierCounter == 0) && !(0 == systemActive))) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && (!(\old(methaneLevelCritical) == 0) || methaneLevelCritical == 1)) && tmp == systemActive) && splverifierCounter == 0) && !(0 == systemActive)) [2022-11-20 20:17:06,543 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || (pumpRunning == 0 && methAndRunningLastTime == 0)) && ((!(1 <= \old(pumpRunning)) || 0 == systemActive) || \old(pumpRunning) <= pumpRunning)) && (((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || 0 == systemActive) [2022-11-20 20:17:06,545 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && !(0 == systemActive))) || (tmp == methaneLevelCritical && \old(pumpRunning) <= pumpRunning)) || 0 == systemActive) && (((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && methAndRunningLastTime == 0)) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && !(0 == systemActive))) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-20 20:17:06,545 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || \old(pumpRunning) <= pumpRunning) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-11-20 20:17:06,545 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && !(0 == systemActive))) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && methAndRunningLastTime == 0)) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && !(0 == systemActive))) || 0 == systemActive)) && (((((tmp == methaneLevelCritical && tmp == 0) && \old(pumpRunning) <= pumpRunning) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || tmp == 0) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-20 20:17:06,546 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) && ((!(1 <= \old(pumpRunning)) || (aux-isMethaneLevelCritical()-aux == methaneLevelCritical && \old(pumpRunning) <= pumpRunning)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-20 20:17:06,546 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || \old(pumpRunning) <= pumpRunning) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-11-20 20:17:06,546 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || (pumpRunning == 0 && methAndRunningLastTime == 0)) && (((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && tmp == 0) && \old(pumpRunning) <= pumpRunning) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || tmp == 0) || 0 == systemActive) [2022-11-20 20:17:06,547 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) && (!(1 <= \old(pumpRunning)) || 0 == systemActive) [2022-11-20 20:17:06,548 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-11-20 20:17:06,573 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/witness.graphml [2022-11-20 20:17:06,574 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-20 20:17:06,574 INFO L158 Benchmark]: Toolchain (without parser) took 21182.04ms. Allocated memory was 138.4MB in the beginning and 297.8MB in the end (delta: 159.4MB). Free memory was 94.8MB in the beginning and 175.9MB in the end (delta: -81.1MB). Peak memory consumption was 80.3MB. Max. memory is 16.1GB. [2022-11-20 20:17:06,575 INFO L158 Benchmark]: CDTParser took 0.25ms. Allocated memory is still 138.4MB. Free memory is still 111.6MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-20 20:17:06,575 INFO L158 Benchmark]: CACSL2BoogieTranslator took 599.25ms. Allocated memory is still 138.4MB. Free memory was 94.8MB in the beginning and 75.4MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-20 20:17:06,575 INFO L158 Benchmark]: Boogie Procedure Inliner took 49.07ms. Allocated memory is still 138.4MB. Free memory was 75.4MB in the beginning and 73.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-20 20:17:06,576 INFO L158 Benchmark]: Boogie Preprocessor took 46.80ms. Allocated memory is still 138.4MB. Free memory was 73.3MB in the beginning and 71.7MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-20 20:17:06,576 INFO L158 Benchmark]: RCFGBuilder took 718.07ms. Allocated memory was 138.4MB in the beginning and 205.5MB in the end (delta: 67.1MB). Free memory was 71.7MB in the beginning and 174.4MB in the end (delta: -102.7MB). Peak memory consumption was 34.6MB. Max. memory is 16.1GB. [2022-11-20 20:17:06,577 INFO L158 Benchmark]: TraceAbstraction took 19667.83ms. Allocated memory was 205.5MB in the beginning and 297.8MB in the end (delta: 92.3MB). Free memory was 173.4MB in the beginning and 182.2MB in the end (delta: -8.8MB). Peak memory consumption was 175.1MB. Max. memory is 16.1GB. [2022-11-20 20:17:06,577 INFO L158 Benchmark]: Witness Printer took 89.54ms. Allocated memory is still 297.8MB. Free memory was 182.2MB in the beginning and 175.9MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-20 20:17:06,579 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.25ms. Allocated memory is still 138.4MB. Free memory is still 111.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 599.25ms. Allocated memory is still 138.4MB. Free memory was 94.8MB in the beginning and 75.4MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 49.07ms. Allocated memory is still 138.4MB. Free memory was 75.4MB in the beginning and 73.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 46.80ms. Allocated memory is still 138.4MB. Free memory was 73.3MB in the beginning and 71.7MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 718.07ms. Allocated memory was 138.4MB in the beginning and 205.5MB in the end (delta: 67.1MB). Free memory was 71.7MB in the beginning and 174.4MB in the end (delta: -102.7MB). Peak memory consumption was 34.6MB. Max. memory is 16.1GB. * TraceAbstraction took 19667.83ms. Allocated memory was 205.5MB in the beginning and 297.8MB in the end (delta: 92.3MB). Free memory was 173.4MB in the beginning and 182.2MB in the end (delta: -8.8MB). Peak memory consumption was 175.1MB. Max. memory is 16.1GB. * Witness Printer took 89.54ms. Allocated memory is still 297.8MB. Free memory was 182.2MB in the beginning and 175.9MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 69 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 19.6s, OverallIterations: 9, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.7s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 902 SdHoareTripleChecker+Valid, 1.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 885 mSDsluCounter, 1562 SdHoareTripleChecker+Invalid, 1.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 992 mSDsCounter, 360 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1965 IncrementalHoareTripleChecker+Invalid, 2325 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 360 mSolverCounterUnsat, 570 mSDtfsCounter, 1965 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 404 GetRequests, 289 SyntacticMatches, 11 SemanticMatches, 104 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1662 ImplicationChecksByTransitivity, 7.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=372occurred in iteration=8, InterpolantAutomatonStates: 74, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 9 MinimizatonAttempts, 44 StatesRemovedByMinimization, 4 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 40 LocationsWithAnnotation, 932 PreInvPairs, 1057 NumberOfFragments, 1432 HoareAnnotationTreeSize, 932 FomulaSimplifications, 207 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 40 FomulaSimplificationsInter, 7286 FormulaSimplificationTreeSizeReductionInter, 3.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.8s InterpolantComputationTime, 523 NumberOfCodeBlocks, 523 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 584 ConstructedInterpolants, 0 QuantifiedInterpolants, 1088 SizeOfPredicates, 8 NumberOfNonLiveVariables, 675 ConjunctsInSsa, 29 ConjunctsInUnsatCore, 12 InterpolantComputations, 8 PerfectInterpolantSequences, 169/192 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 637]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) && ((!(1 <= \old(pumpRunning)) || (aux-isMethaneLevelCritical()-aux == methaneLevelCritical && \old(pumpRunning) <= pumpRunning)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) && (!(1 <= \old(pumpRunning)) || 0 == systemActive) - InvariantResult [Line: 852]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 777]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 767]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 507]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || (pumpRunning == 0 && methAndRunningLastTime == 0)) && ((!(1 <= \old(pumpRunning)) || 0 == systemActive) || \old(pumpRunning) <= pumpRunning)) && (((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || 0 == systemActive) - InvariantResult [Line: 547]: Loop Invariant Derived loop invariant: ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 591]: Loop Invariant Derived loop invariant: ((((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && !(0 == systemActive))) || (tmp == methaneLevelCritical && \old(pumpRunning) <= pumpRunning)) || 0 == systemActive) && (((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && methAndRunningLastTime == 0)) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && !(0 == systemActive))) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 569]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || \old(pumpRunning) <= pumpRunning) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 736]: Loop Invariant Derived loop invariant: ((((((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || (pumpRunning == 0 && methAndRunningLastTime == 0)) && (((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && tmp == 0) && \old(pumpRunning) <= pumpRunning) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || tmp == 0) || 0 == systemActive) - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == systemActive) && splverifierCounter == 0) && !(0 == systemActive)) || ((((1 <= pumpRunning && (!(\old(methaneLevelCritical) == 0) || methaneLevelCritical == 1)) && tmp == systemActive) && splverifierCounter == 0) && !(0 == systemActive))) || ((((1 <= pumpRunning && methaneLevelCritical == 0) && tmp == systemActive) && splverifierCounter == 0) && !(0 == systemActive))) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && (!(\old(methaneLevelCritical) == 0) || methaneLevelCritical == 1)) && tmp == systemActive) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 852]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == systemActive) && tmp == 1 - InvariantResult [Line: 543]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || \old(pumpRunning) <= pumpRunning) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 744]: Loop Invariant Derived loop invariant: (((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && !(0 == systemActive))) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && methAndRunningLastTime == 0)) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && !(0 == systemActive))) || 0 == systemActive)) && (((((tmp == methaneLevelCritical && tmp == 0) && \old(pumpRunning) <= pumpRunning) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || tmp == 0) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 63]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-11-20 20:17:06,612 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_585e30e8-b05a-4d36-a03e-8ae22530fac9/bin/utaipan-6cKwYrpEi9/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE