./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product61.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 4e7fbc69 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product61.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 12ff1c3352fe657a44d5503b0c0550124efd9c84e66a259e2d68c9ba31095791 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-4e7fbc6 [2022-11-23 14:07:57,077 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-23 14:07:57,080 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-23 14:07:57,118 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-23 14:07:57,119 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-23 14:07:57,120 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-23 14:07:57,121 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-23 14:07:57,123 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-23 14:07:57,125 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-23 14:07:57,126 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-23 14:07:57,136 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-23 14:07:57,141 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-23 14:07:57,141 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-23 14:07:57,142 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-23 14:07:57,144 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-23 14:07:57,145 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-23 14:07:57,146 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-23 14:07:57,147 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-23 14:07:57,148 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-23 14:07:57,150 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-23 14:07:57,156 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-23 14:07:57,165 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-23 14:07:57,168 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-23 14:07:57,169 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-23 14:07:57,175 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-23 14:07:57,176 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-23 14:07:57,176 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-23 14:07:57,177 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-23 14:07:57,177 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-23 14:07:57,178 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-23 14:07:57,179 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-23 14:07:57,179 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-23 14:07:57,180 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-23 14:07:57,181 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-23 14:07:57,182 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-23 14:07:57,182 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-23 14:07:57,186 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-23 14:07:57,187 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-23 14:07:57,187 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-23 14:07:57,191 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-23 14:07:57,192 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-23 14:07:57,193 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-23 14:07:57,241 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-23 14:07:57,241 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-23 14:07:57,242 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-23 14:07:57,242 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-23 14:07:57,243 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-23 14:07:57,243 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-23 14:07:57,244 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-23 14:07:57,244 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-23 14:07:57,244 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-23 14:07:57,244 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-23 14:07:57,245 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-23 14:07:57,246 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-23 14:07:57,246 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-23 14:07:57,246 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-23 14:07:57,246 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-23 14:07:57,247 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-23 14:07:57,247 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-23 14:07:57,247 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-23 14:07:57,248 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-23 14:07:57,248 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-23 14:07:57,248 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-23 14:07:57,248 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-23 14:07:57,249 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-23 14:07:57,249 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-23 14:07:57,249 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-23 14:07:57,249 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-23 14:07:57,249 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-23 14:07:57,250 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-23 14:07:57,250 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-23 14:07:57,250 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-23 14:07:57,250 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-23 14:07:57,251 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-23 14:07:57,251 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 14:07:57,251 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-23 14:07:57,251 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-23 14:07:57,252 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-23 14:07:57,252 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-23 14:07:57,252 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-23 14:07:57,252 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-23 14:07:57,252 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-23 14:07:57,253 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-23 14:07:57,253 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 12ff1c3352fe657a44d5503b0c0550124efd9c84e66a259e2d68c9ba31095791 [2022-11-23 14:07:57,564 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-23 14:07:57,599 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-23 14:07:57,602 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-23 14:07:57,603 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-23 14:07:57,607 INFO L275 PluginConnector]: CDTParser initialized [2022-11-23 14:07:57,608 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/../../sv-benchmarks/c/product-lines/minepump_spec5_product61.cil.c [2022-11-23 14:08:00,700 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-23 14:08:00,939 INFO L351 CDTParser]: Found 1 translation units. [2022-11-23 14:08:00,940 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/sv-benchmarks/c/product-lines/minepump_spec5_product61.cil.c [2022-11-23 14:08:00,956 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/data/9dc021995/3e615a7816944478b10d1acf36884787/FLAG3d88883c5 [2022-11-23 14:08:00,978 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/data/9dc021995/3e615a7816944478b10d1acf36884787 [2022-11-23 14:08:00,983 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-23 14:08:00,985 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-23 14:08:00,987 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-23 14:08:00,987 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-23 14:08:00,991 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-23 14:08:00,993 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:08:00" (1/1) ... [2022-11-23 14:08:00,994 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@640f513d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:08:00, skipping insertion in model container [2022-11-23 14:08:00,995 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:08:00" (1/1) ... [2022-11-23 14:08:01,002 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-23 14:08:01,067 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-23 14:08:01,449 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/sv-benchmarks/c/product-lines/minepump_spec5_product61.cil.c[18376,18389] [2022-11-23 14:08:01,470 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 14:08:01,486 INFO L203 MainTranslator]: Completed pre-run [2022-11-23 14:08:01,591 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/sv-benchmarks/c/product-lines/minepump_spec5_product61.cil.c[18376,18389] [2022-11-23 14:08:01,595 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 14:08:01,619 INFO L208 MainTranslator]: Completed translation [2022-11-23 14:08:01,619 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:08:01 WrapperNode [2022-11-23 14:08:01,620 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-23 14:08:01,621 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-23 14:08:01,621 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-23 14:08:01,621 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-23 14:08:01,630 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:08:01" (1/1) ... [2022-11-23 14:08:01,646 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:08:01" (1/1) ... [2022-11-23 14:08:01,679 INFO L138 Inliner]: procedures = 59, calls = 107, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 238 [2022-11-23 14:08:01,680 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-23 14:08:01,681 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-23 14:08:01,682 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-23 14:08:01,682 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-23 14:08:01,693 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:08:01" (1/1) ... [2022-11-23 14:08:01,693 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:08:01" (1/1) ... [2022-11-23 14:08:01,696 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:08:01" (1/1) ... [2022-11-23 14:08:01,696 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:08:01" (1/1) ... [2022-11-23 14:08:01,702 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:08:01" (1/1) ... [2022-11-23 14:08:01,708 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:08:01" (1/1) ... [2022-11-23 14:08:01,710 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:08:01" (1/1) ... [2022-11-23 14:08:01,711 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:08:01" (1/1) ... [2022-11-23 14:08:01,714 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-23 14:08:01,715 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-23 14:08:01,715 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-23 14:08:01,715 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-23 14:08:01,716 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:08:01" (1/1) ... [2022-11-23 14:08:01,726 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 14:08:01,739 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 14:08:01,753 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-23 14:08:01,780 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-23 14:08:01,819 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-23 14:08:01,819 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-23 14:08:01,820 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-23 14:08:01,820 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-23 14:08:01,820 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-23 14:08:01,820 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-23 14:08:01,820 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-23 14:08:01,821 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 14:08:01,821 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 14:08:01,821 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-23 14:08:01,821 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-23 14:08:01,821 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-23 14:08:01,822 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-23 14:08:01,822 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-11-23 14:08:01,822 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-11-23 14:08:01,822 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-23 14:08:01,822 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-23 14:08:01,823 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-23 14:08:01,823 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-23 14:08:01,823 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-23 14:08:01,823 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-23 14:08:01,823 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-23 14:08:01,823 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-23 14:08:01,824 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-23 14:08:01,940 INFO L235 CfgBuilder]: Building ICFG [2022-11-23 14:08:01,943 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-23 14:08:02,416 INFO L276 CfgBuilder]: Performing block encoding [2022-11-23 14:08:02,560 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-23 14:08:02,561 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-23 14:08:02,564 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:08:02 BoogieIcfgContainer [2022-11-23 14:08:02,564 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-23 14:08:02,568 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-23 14:08:02,569 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-23 14:08:02,572 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-23 14:08:02,573 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 02:08:00" (1/3) ... [2022-11-23 14:08:02,575 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1299c90d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 02:08:02, skipping insertion in model container [2022-11-23 14:08:02,575 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:08:01" (2/3) ... [2022-11-23 14:08:02,576 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1299c90d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 02:08:02, skipping insertion in model container [2022-11-23 14:08:02,576 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:08:02" (3/3) ... [2022-11-23 14:08:02,578 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product61.cil.c [2022-11-23 14:08:02,599 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-23 14:08:02,599 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-23 14:08:02,674 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-23 14:08:02,682 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6c065822, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-23 14:08:02,682 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-23 14:08:02,687 INFO L276 IsEmpty]: Start isEmpty. Operand has 75 states, 45 states have (on average 1.4) internal successors, (63), 55 states have internal predecessors, (63), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-11-23 14:08:02,700 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-23 14:08:02,700 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:08:02,701 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:08:02,702 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:08:02,711 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:08:02,711 INFO L85 PathProgramCache]: Analyzing trace with hash -1173584673, now seen corresponding path program 1 times [2022-11-23 14:08:02,722 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:08:02,723 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [68714332] [2022-11-23 14:08:02,723 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:08:02,724 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:08:02,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:08:02,973 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-23 14:08:02,973 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:08:02,974 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [68714332] [2022-11-23 14:08:02,974 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [68714332] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:08:02,975 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:08:02,975 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-23 14:08:02,977 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [607669204] [2022-11-23 14:08:02,978 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:08:02,983 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-23 14:08:02,983 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:08:03,021 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-23 14:08:03,022 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-23 14:08:03,024 INFO L87 Difference]: Start difference. First operand has 75 states, 45 states have (on average 1.4) internal successors, (63), 55 states have internal predecessors, (63), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-23 14:08:03,096 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:08:03,097 INFO L93 Difference]: Finished difference Result 148 states and 199 transitions. [2022-11-23 14:08:03,098 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-23 14:08:03,100 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 21 [2022-11-23 14:08:03,100 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:08:03,110 INFO L225 Difference]: With dead ends: 148 [2022-11-23 14:08:03,110 INFO L226 Difference]: Without dead ends: 70 [2022-11-23 14:08:03,114 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-23 14:08:03,118 INFO L413 NwaCegarLoop]: 78 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 78 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 14:08:03,119 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 78 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 14:08:03,137 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-11-23 14:08:03,161 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2022-11-23 14:08:03,163 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 42 states have (on average 1.3095238095238095) internal successors, (55), 51 states have internal predecessors, (55), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2022-11-23 14:08:03,165 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 90 transitions. [2022-11-23 14:08:03,167 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 90 transitions. Word has length 21 [2022-11-23 14:08:03,168 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:08:03,168 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 90 transitions. [2022-11-23 14:08:03,169 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-23 14:08:03,169 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 90 transitions. [2022-11-23 14:08:03,172 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-23 14:08:03,172 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:08:03,172 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:08:03,173 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-23 14:08:03,173 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:08:03,174 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:08:03,174 INFO L85 PathProgramCache]: Analyzing trace with hash 2132212611, now seen corresponding path program 1 times [2022-11-23 14:08:03,174 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:08:03,175 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [475768926] [2022-11-23 14:08:03,175 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:08:03,175 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:08:03,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:08:03,486 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-23 14:08:03,486 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:08:03,486 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [475768926] [2022-11-23 14:08:03,487 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [475768926] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:08:03,487 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:08:03,487 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-23 14:08:03,487 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [618243667] [2022-11-23 14:08:03,488 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:08:03,489 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-23 14:08:03,489 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:08:03,490 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-23 14:08:03,490 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-23 14:08:03,490 INFO L87 Difference]: Start difference. First operand 70 states and 90 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-23 14:08:03,635 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:08:03,636 INFO L93 Difference]: Finished difference Result 138 states and 181 transitions. [2022-11-23 14:08:03,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-23 14:08:03,637 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 24 [2022-11-23 14:08:03,637 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:08:03,646 INFO L225 Difference]: With dead ends: 138 [2022-11-23 14:08:03,646 INFO L226 Difference]: Without dead ends: 70 [2022-11-23 14:08:03,647 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-23 14:08:03,649 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 84 mSDsluCounter, 30 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 99 SdHoareTripleChecker+Invalid, 72 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 14:08:03,649 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 99 Invalid, 72 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 14:08:03,650 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-11-23 14:08:03,686 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2022-11-23 14:08:03,688 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 42 states have (on average 1.2857142857142858) internal successors, (54), 51 states have internal predecessors, (54), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2022-11-23 14:08:03,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 89 transitions. [2022-11-23 14:08:03,692 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 89 transitions. Word has length 24 [2022-11-23 14:08:03,696 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:08:03,696 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 89 transitions. [2022-11-23 14:08:03,696 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-23 14:08:03,696 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 89 transitions. [2022-11-23 14:08:03,697 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-23 14:08:03,697 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:08:03,698 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:08:03,698 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-23 14:08:03,698 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:08:03,699 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:08:03,699 INFO L85 PathProgramCache]: Analyzing trace with hash -1135271315, now seen corresponding path program 1 times [2022-11-23 14:08:03,699 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:08:03,699 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1681028429] [2022-11-23 14:08:03,699 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:08:03,700 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:08:03,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:08:03,768 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-23 14:08:03,769 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:08:03,769 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1681028429] [2022-11-23 14:08:03,769 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1681028429] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:08:03,770 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:08:03,770 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 14:08:03,770 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1821571843] [2022-11-23 14:08:03,770 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:08:03,771 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 14:08:03,771 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:08:03,771 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 14:08:03,772 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:08:03,772 INFO L87 Difference]: Start difference. First operand 70 states and 89 transitions. Second operand has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-23 14:08:03,818 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:08:03,818 INFO L93 Difference]: Finished difference Result 117 states and 149 transitions. [2022-11-23 14:08:03,819 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 14:08:03,819 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 32 [2022-11-23 14:08:03,819 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:08:03,820 INFO L225 Difference]: With dead ends: 117 [2022-11-23 14:08:03,821 INFO L226 Difference]: Without dead ends: 62 [2022-11-23 14:08:03,822 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:08:03,823 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 7 mSDsluCounter, 54 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 117 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 14:08:03,824 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 117 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 14:08:03,825 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-11-23 14:08:03,833 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 62. [2022-11-23 14:08:03,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62 states, 37 states have (on average 1.2972972972972974) internal successors, (48), 46 states have internal predecessors, (48), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-23 14:08:03,835 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62 states to 62 states and 78 transitions. [2022-11-23 14:08:03,835 INFO L78 Accepts]: Start accepts. Automaton has 62 states and 78 transitions. Word has length 32 [2022-11-23 14:08:03,835 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:08:03,836 INFO L495 AbstractCegarLoop]: Abstraction has 62 states and 78 transitions. [2022-11-23 14:08:03,836 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-23 14:08:03,836 INFO L276 IsEmpty]: Start isEmpty. Operand 62 states and 78 transitions. [2022-11-23 14:08:03,837 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-23 14:08:03,838 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:08:03,838 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:08:03,838 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-23 14:08:03,838 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:08:03,839 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:08:03,839 INFO L85 PathProgramCache]: Analyzing trace with hash 51749388, now seen corresponding path program 1 times [2022-11-23 14:08:03,839 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:08:03,840 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [148401164] [2022-11-23 14:08:03,840 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:08:03,840 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:08:03,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:08:03,958 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-23 14:08:03,958 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:08:03,958 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [148401164] [2022-11-23 14:08:03,959 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [148401164] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:08:03,959 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:08:03,959 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 14:08:03,959 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [837009451] [2022-11-23 14:08:03,960 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:08:03,960 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 14:08:03,960 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:08:03,961 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 14:08:03,961 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:08:03,961 INFO L87 Difference]: Start difference. First operand 62 states and 78 transitions. Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 14:08:04,041 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:08:04,041 INFO L93 Difference]: Finished difference Result 165 states and 212 transitions. [2022-11-23 14:08:04,042 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 14:08:04,042 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 34 [2022-11-23 14:08:04,042 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:08:04,044 INFO L225 Difference]: With dead ends: 165 [2022-11-23 14:08:04,044 INFO L226 Difference]: Without dead ends: 105 [2022-11-23 14:08:04,045 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:08:04,046 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 48 mSDsluCounter, 50 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 123 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 14:08:04,047 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 123 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 14:08:04,048 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 105 states. [2022-11-23 14:08:04,062 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 105 to 103. [2022-11-23 14:08:04,062 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 103 states, 65 states have (on average 1.2461538461538462) internal successors, (81), 73 states have internal predecessors, (81), 20 states have call successors, (20), 17 states have call predecessors, (20), 17 states have return successors, (26), 18 states have call predecessors, (26), 20 states have call successors, (26) [2022-11-23 14:08:04,064 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 127 transitions. [2022-11-23 14:08:04,064 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 127 transitions. Word has length 34 [2022-11-23 14:08:04,064 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:08:04,065 INFO L495 AbstractCegarLoop]: Abstraction has 103 states and 127 transitions. [2022-11-23 14:08:04,065 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 14:08:04,065 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 127 transitions. [2022-11-23 14:08:04,066 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-23 14:08:04,066 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:08:04,067 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:08:04,067 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-23 14:08:04,067 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:08:04,068 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:08:04,068 INFO L85 PathProgramCache]: Analyzing trace with hash 57208679, now seen corresponding path program 1 times [2022-11-23 14:08:04,068 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:08:04,068 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1520680674] [2022-11-23 14:08:04,068 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:08:04,069 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:08:04,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:08:04,250 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 14:08:04,250 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:08:04,250 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1520680674] [2022-11-23 14:08:04,251 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1520680674] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:08:04,251 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:08:04,251 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-23 14:08:04,251 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1002531978] [2022-11-23 14:08:04,252 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:08:04,252 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-23 14:08:04,252 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:08:04,253 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-23 14:08:04,253 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-23 14:08:04,254 INFO L87 Difference]: Start difference. First operand 103 states and 127 transitions. Second operand has 7 states, 6 states have (on average 4.833333333333333) internal successors, (29), 6 states have internal predecessors, (29), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-23 14:08:04,617 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:08:04,618 INFO L93 Difference]: Finished difference Result 236 states and 293 transitions. [2022-11-23 14:08:04,618 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-23 14:08:04,619 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 4.833333333333333) internal successors, (29), 6 states have internal predecessors, (29), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) Word has length 40 [2022-11-23 14:08:04,619 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:08:04,621 INFO L225 Difference]: With dead ends: 236 [2022-11-23 14:08:04,621 INFO L226 Difference]: Without dead ends: 135 [2022-11-23 14:08:04,622 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-11-23 14:08:04,624 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 77 mSDsluCounter, 209 mSDsCounter, 0 mSdLazyCounter, 274 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 269 SdHoareTripleChecker+Invalid, 315 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 274 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-23 14:08:04,624 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 269 Invalid, 315 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 274 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-23 14:08:04,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 135 states. [2022-11-23 14:08:04,678 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 135 to 125. [2022-11-23 14:08:04,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125 states, 80 states have (on average 1.225) internal successors, (98), 88 states have internal predecessors, (98), 22 states have call successors, (22), 17 states have call predecessors, (22), 22 states have return successors, (33), 24 states have call predecessors, (33), 22 states have call successors, (33) [2022-11-23 14:08:04,680 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125 states to 125 states and 153 transitions. [2022-11-23 14:08:04,680 INFO L78 Accepts]: Start accepts. Automaton has 125 states and 153 transitions. Word has length 40 [2022-11-23 14:08:04,681 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:08:04,681 INFO L495 AbstractCegarLoop]: Abstraction has 125 states and 153 transitions. [2022-11-23 14:08:04,681 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 4.833333333333333) internal successors, (29), 6 states have internal predecessors, (29), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-23 14:08:04,681 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 153 transitions. [2022-11-23 14:08:04,682 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-23 14:08:04,682 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:08:04,683 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:08:04,688 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-23 14:08:04,688 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:08:04,688 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:08:04,688 INFO L85 PathProgramCache]: Analyzing trace with hash 129570517, now seen corresponding path program 1 times [2022-11-23 14:08:04,689 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:08:04,689 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1404411013] [2022-11-23 14:08:04,689 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:08:04,690 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:08:04,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:08:05,113 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-23 14:08:05,113 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:08:05,114 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1404411013] [2022-11-23 14:08:05,114 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1404411013] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:08:05,114 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:08:05,114 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-23 14:08:05,114 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1434022989] [2022-11-23 14:08:05,115 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:08:05,115 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-23 14:08:05,117 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:08:05,119 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-23 14:08:05,119 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-23 14:08:05,121 INFO L87 Difference]: Start difference. First operand 125 states and 153 transitions. Second operand has 7 states, 7 states have (on average 4.142857142857143) internal successors, (29), 7 states have internal predecessors, (29), 5 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) [2022-11-23 14:08:05,374 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:08:05,374 INFO L93 Difference]: Finished difference Result 322 states and 394 transitions. [2022-11-23 14:08:05,375 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-23 14:08:05,375 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 4.142857142857143) internal successors, (29), 7 states have internal predecessors, (29), 5 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) Word has length 41 [2022-11-23 14:08:05,376 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:08:05,377 INFO L225 Difference]: With dead ends: 322 [2022-11-23 14:08:05,377 INFO L226 Difference]: Without dead ends: 199 [2022-11-23 14:08:05,380 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2022-11-23 14:08:05,387 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 116 mSDsluCounter, 184 mSDsCounter, 0 mSdLazyCounter, 174 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 118 SdHoareTripleChecker+Valid, 281 SdHoareTripleChecker+Invalid, 207 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 174 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 14:08:05,388 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [118 Valid, 281 Invalid, 207 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 174 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 14:08:05,392 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 199 states. [2022-11-23 14:08:05,446 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 199 to 195. [2022-11-23 14:08:05,448 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 195 states, 123 states have (on average 1.1951219512195121) internal successors, (147), 136 states have internal predecessors, (147), 37 states have call successors, (37), 31 states have call predecessors, (37), 34 states have return successors, (52), 36 states have call predecessors, (52), 37 states have call successors, (52) [2022-11-23 14:08:05,452 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 195 states to 195 states and 236 transitions. [2022-11-23 14:08:05,453 INFO L78 Accepts]: Start accepts. Automaton has 195 states and 236 transitions. Word has length 41 [2022-11-23 14:08:05,454 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:08:05,454 INFO L495 AbstractCegarLoop]: Abstraction has 195 states and 236 transitions. [2022-11-23 14:08:05,455 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 4.142857142857143) internal successors, (29), 7 states have internal predecessors, (29), 5 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) [2022-11-23 14:08:05,455 INFO L276 IsEmpty]: Start isEmpty. Operand 195 states and 236 transitions. [2022-11-23 14:08:05,456 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-23 14:08:05,457 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:08:05,457 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:08:05,457 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-23 14:08:05,457 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:08:05,457 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:08:05,458 INFO L85 PathProgramCache]: Analyzing trace with hash 291675182, now seen corresponding path program 1 times [2022-11-23 14:08:05,458 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:08:05,458 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1919397757] [2022-11-23 14:08:05,458 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:08:05,458 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:08:05,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:08:05,834 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-23 14:08:05,834 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:08:05,835 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1919397757] [2022-11-23 14:08:05,835 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1919397757] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:08:05,835 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:08:05,835 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-23 14:08:05,835 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [445881774] [2022-11-23 14:08:05,835 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:08:05,836 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-23 14:08:05,836 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:08:05,836 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-23 14:08:05,837 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-11-23 14:08:05,837 INFO L87 Difference]: Start difference. First operand 195 states and 236 transitions. Second operand has 8 states, 7 states have (on average 4.285714285714286) internal successors, (30), 7 states have internal predecessors, (30), 5 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) [2022-11-23 14:08:06,427 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:08:06,427 INFO L93 Difference]: Finished difference Result 467 states and 580 transitions. [2022-11-23 14:08:06,428 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-23 14:08:06,428 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 4.285714285714286) internal successors, (30), 7 states have internal predecessors, (30), 5 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) Word has length 44 [2022-11-23 14:08:06,429 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:08:06,431 INFO L225 Difference]: With dead ends: 467 [2022-11-23 14:08:06,431 INFO L226 Difference]: Without dead ends: 327 [2022-11-23 14:08:06,432 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2022-11-23 14:08:06,439 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 262 mSDsluCounter, 153 mSDsCounter, 0 mSdLazyCounter, 328 mSolverCounterSat, 122 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 271 SdHoareTripleChecker+Valid, 224 SdHoareTripleChecker+Invalid, 450 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 122 IncrementalHoareTripleChecker+Valid, 328 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-23 14:08:06,440 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [271 Valid, 224 Invalid, 450 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [122 Valid, 328 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-23 14:08:06,442 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 327 states. [2022-11-23 14:08:06,520 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 327 to 285. [2022-11-23 14:08:06,521 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 285 states, 184 states have (on average 1.201086956521739) internal successors, (221), 202 states have internal predecessors, (221), 52 states have call successors, (52), 39 states have call predecessors, (52), 48 states have return successors, (75), 55 states have call predecessors, (75), 52 states have call successors, (75) [2022-11-23 14:08:06,523 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 285 states to 285 states and 348 transitions. [2022-11-23 14:08:06,523 INFO L78 Accepts]: Start accepts. Automaton has 285 states and 348 transitions. Word has length 44 [2022-11-23 14:08:06,524 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:08:06,524 INFO L495 AbstractCegarLoop]: Abstraction has 285 states and 348 transitions. [2022-11-23 14:08:06,524 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 4.285714285714286) internal successors, (30), 7 states have internal predecessors, (30), 5 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) [2022-11-23 14:08:06,524 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 348 transitions. [2022-11-23 14:08:06,526 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2022-11-23 14:08:06,527 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:08:06,527 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:08:06,527 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-23 14:08:06,528 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:08:06,528 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:08:06,528 INFO L85 PathProgramCache]: Analyzing trace with hash -1370984714, now seen corresponding path program 1 times [2022-11-23 14:08:06,528 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:08:06,529 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1977936576] [2022-11-23 14:08:06,529 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:08:06,529 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:08:06,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:08:07,128 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 23 proven. 7 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-23 14:08:07,128 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:08:07,128 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1977936576] [2022-11-23 14:08:07,128 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1977936576] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 14:08:07,128 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [196598099] [2022-11-23 14:08:07,129 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:08:07,129 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:08:07,129 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 14:08:07,139 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 14:08:07,144 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-23 14:08:07,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:08:07,301 INFO L263 TraceCheckSpWp]: Trace formula consists of 358 conjuncts, 22 conjunts are in the unsatisfiable core [2022-11-23 14:08:07,308 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:08:07,524 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 35 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 14:08:07,524 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 14:08:07,782 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 15 proven. 1 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-11-23 14:08:07,782 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [196598099] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 14:08:07,782 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [763581877] [2022-11-23 14:08:07,803 INFO L159 IcfgInterpreter]: Started Sifa with 45 locations of interest [2022-11-23 14:08:07,803 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 14:08:07,807 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 14:08:07,813 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 14:08:07,813 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 14:08:12,850 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 140 for LOIs [2022-11-23 14:08:12,884 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 32 for LOIs [2022-11-23 14:08:13,384 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 45 for LOIs [2022-11-23 14:08:13,394 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 26 for LOIs [2022-11-23 14:08:13,473 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 27 for LOIs [2022-11-23 14:08:13,618 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 28 for LOIs [2022-11-23 14:08:13,621 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 14:08:22,587 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4453#(and (= ~methaneLevelCritical~0 0) (= |timeShift_getWaterLevel_~retValue_acc~5#1| |timeShift_getWaterLevel_#res#1|) (= ~head~0.offset 0) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| |timeShift_getWaterLevel_#res#1|) (= 1 ~systemActive~0) (= |old(~pumpRunning~0)| 0) (= |timeShift_getWaterLevel_~retValue_acc~5#1| ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0) (= ~head~0.base 0) (= |#NULL.offset| 0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| 2)) (<= |timeShift_getWaterLevel_~retValue_acc~5#1| 2147483647) (= ~switchedOnBeforeTS~0 0) (<= 0 |#StackHeapBarrier|) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1|) (= ~pumpRunning~0 1) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0) (<= 2 |timeShift_getWaterLevel_~retValue_acc~5#1|) (= |old(~switchedOnBeforeTS~0)| 0))' at error location [2022-11-23 14:08:22,588 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 14:08:22,588 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 14:08:22,588 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 6, 6] total 21 [2022-11-23 14:08:22,588 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [920672529] [2022-11-23 14:08:22,589 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 14:08:22,589 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2022-11-23 14:08:22,589 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:08:22,590 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2022-11-23 14:08:22,591 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=284, Invalid=2472, Unknown=0, NotChecked=0, Total=2756 [2022-11-23 14:08:22,591 INFO L87 Difference]: Start difference. First operand 285 states and 348 transitions. Second operand has 21 states, 18 states have (on average 5.222222222222222) internal successors, (94), 18 states have internal predecessors, (94), 7 states have call successors, (21), 5 states have call predecessors, (21), 7 states have return successors, (23), 10 states have call predecessors, (23), 7 states have call successors, (23) [2022-11-23 14:08:27,770 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:08:27,770 INFO L93 Difference]: Finished difference Result 1319 states and 1869 transitions. [2022-11-23 14:08:27,775 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 94 states. [2022-11-23 14:08:27,776 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 18 states have (on average 5.222222222222222) internal successors, (94), 18 states have internal predecessors, (94), 7 states have call successors, (21), 5 states have call predecessors, (21), 7 states have return successors, (23), 10 states have call predecessors, (23), 7 states have call successors, (23) Word has length 78 [2022-11-23 14:08:27,776 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:08:27,783 INFO L225 Difference]: With dead ends: 1319 [2022-11-23 14:08:27,783 INFO L226 Difference]: Without dead ends: 1036 [2022-11-23 14:08:27,790 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 376 GetRequests, 225 SyntacticMatches, 11 SemanticMatches, 140 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7604 ImplicationChecksByTransitivity, 11.5s TimeCoverageRelationStatistics Valid=1575, Invalid=18447, Unknown=0, NotChecked=0, Total=20022 [2022-11-23 14:08:27,791 INFO L413 NwaCegarLoop]: 140 mSDtfsCounter, 1089 mSDsluCounter, 1223 mSDsCounter, 0 mSdLazyCounter, 3405 mSolverCounterSat, 1145 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1100 SdHoareTripleChecker+Valid, 1363 SdHoareTripleChecker+Invalid, 4550 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1145 IncrementalHoareTripleChecker+Valid, 3405 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.6s IncrementalHoareTripleChecker+Time [2022-11-23 14:08:27,791 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1100 Valid, 1363 Invalid, 4550 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1145 Valid, 3405 Invalid, 0 Unknown, 0 Unchecked, 2.6s Time] [2022-11-23 14:08:27,793 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1036 states. [2022-11-23 14:08:27,890 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1036 to 720. [2022-11-23 14:08:27,892 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 720 states, 469 states have (on average 1.1961620469083156) internal successors, (561), 503 states have internal predecessors, (561), 128 states have call successors, (128), 107 states have call predecessors, (128), 122 states have return successors, (224), 128 states have call predecessors, (224), 128 states have call successors, (224) [2022-11-23 14:08:27,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 720 states to 720 states and 913 transitions. [2022-11-23 14:08:27,897 INFO L78 Accepts]: Start accepts. Automaton has 720 states and 913 transitions. Word has length 78 [2022-11-23 14:08:27,898 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:08:27,898 INFO L495 AbstractCegarLoop]: Abstraction has 720 states and 913 transitions. [2022-11-23 14:08:27,898 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 18 states have (on average 5.222222222222222) internal successors, (94), 18 states have internal predecessors, (94), 7 states have call successors, (21), 5 states have call predecessors, (21), 7 states have return successors, (23), 10 states have call predecessors, (23), 7 states have call successors, (23) [2022-11-23 14:08:27,898 INFO L276 IsEmpty]: Start isEmpty. Operand 720 states and 913 transitions. [2022-11-23 14:08:27,900 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2022-11-23 14:08:27,900 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:08:27,901 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:08:27,908 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-11-23 14:08:28,107 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:08:28,108 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:08:28,108 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:08:28,108 INFO L85 PathProgramCache]: Analyzing trace with hash -926061739, now seen corresponding path program 1 times [2022-11-23 14:08:28,109 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:08:28,109 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [316412953] [2022-11-23 14:08:28,109 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:08:28,109 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:08:28,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:08:28,261 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-11-23 14:08:28,261 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:08:28,261 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [316412953] [2022-11-23 14:08:28,261 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [316412953] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 14:08:28,261 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1343220226] [2022-11-23 14:08:28,261 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:08:28,261 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:08:28,262 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 14:08:28,264 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 14:08:28,274 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-23 14:08:28,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:08:28,376 INFO L263 TraceCheckSpWp]: Trace formula consists of 365 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-23 14:08:28,379 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:08:28,435 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 20 proven. 1 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-23 14:08:28,435 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 14:08:28,566 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-11-23 14:08:28,566 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1343220226] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 14:08:28,566 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [235219888] [2022-11-23 14:08:28,573 INFO L159 IcfgInterpreter]: Started Sifa with 54 locations of interest [2022-11-23 14:08:28,573 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 14:08:28,573 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 14:08:28,573 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 14:08:28,574 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 14:08:31,131 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 43 for LOIs [2022-11-23 14:08:31,139 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 29 for LOIs [2022-11-23 14:08:31,698 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 53 for LOIs [2022-11-23 14:08:31,709 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 34 for LOIs [2022-11-23 14:08:31,868 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 69 for LOIs [2022-11-23 14:08:32,389 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 60 for LOIs [2022-11-23 14:08:32,404 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 40 for LOIs [2022-11-23 14:08:32,407 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 14:08:39,289 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8282#(and (= ~methaneLevelCritical~0 0) (= |timeShift_getWaterLevel_~retValue_acc~5#1| |timeShift_getWaterLevel_#res#1|) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (= ~head~0.offset 0) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1| 2147483647) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1| 0)) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| |timeShift_getWaterLevel_#res#1|) (<= |old(~pumpRunning~0)| 2147483647) (= 1 ~systemActive~0) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1| 2147483648)) (= |timeShift_getWaterLevel_~retValue_acc~5#1| ~waterLevel~0) (<= 0 ~head~0.base) (<= 0 (+ 2147483648 |timeShift_getWaterLevel_#res#1|)) (<= ~head~0.base 0) (= |#NULL.offset| 0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| 2)) (<= |timeShift_getWaterLevel_~retValue_acc~5#1| 2147483647) (= ~switchedOnBeforeTS~0 0) (<= 0 |#StackHeapBarrier|) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-23 14:08:39,289 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 14:08:39,289 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 14:08:39,289 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 9 [2022-11-23 14:08:39,289 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1185466885] [2022-11-23 14:08:39,289 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 14:08:39,290 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-23 14:08:39,290 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:08:39,290 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-23 14:08:39,291 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=265, Invalid=2087, Unknown=0, NotChecked=0, Total=2352 [2022-11-23 14:08:39,292 INFO L87 Difference]: Start difference. First operand 720 states and 913 transitions. Second operand has 9 states, 7 states have (on average 8.428571428571429) internal successors, (59), 7 states have internal predecessors, (59), 2 states have call successors, (16), 2 states have call predecessors, (16), 4 states have return successors, (18), 4 states have call predecessors, (18), 2 states have call successors, (18) [2022-11-23 14:08:39,934 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:08:39,935 INFO L93 Difference]: Finished difference Result 1427 states and 1848 transitions. [2022-11-23 14:08:39,935 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-23 14:08:39,935 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 8.428571428571429) internal successors, (59), 7 states have internal predecessors, (59), 2 states have call successors, (16), 2 states have call predecessors, (16), 4 states have return successors, (18), 4 states have call predecessors, (18), 2 states have call successors, (18) Word has length 82 [2022-11-23 14:08:39,937 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:08:39,941 INFO L225 Difference]: With dead ends: 1427 [2022-11-23 14:08:39,942 INFO L226 Difference]: Without dead ends: 881 [2022-11-23 14:08:39,945 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 265 GetRequests, 198 SyntacticMatches, 9 SemanticMatches, 58 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1471 ImplicationChecksByTransitivity, 7.1s TimeCoverageRelationStatistics Valid=353, Invalid=3187, Unknown=0, NotChecked=0, Total=3540 [2022-11-23 14:08:39,948 INFO L413 NwaCegarLoop]: 127 mSDtfsCounter, 132 mSDsluCounter, 320 mSDsCounter, 0 mSdLazyCounter, 435 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 447 SdHoareTripleChecker+Invalid, 509 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 435 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-23 14:08:39,949 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [134 Valid, 447 Invalid, 509 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 435 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-23 14:08:39,950 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 881 states. [2022-11-23 14:08:40,048 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 881 to 782. [2022-11-23 14:08:40,049 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 782 states, 507 states have (on average 1.1538461538461537) internal successors, (585), 547 states have internal predecessors, (585), 142 states have call successors, (142), 121 states have call predecessors, (142), 132 states have return successors, (230), 137 states have call predecessors, (230), 142 states have call successors, (230) [2022-11-23 14:08:40,053 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 782 states to 782 states and 957 transitions. [2022-11-23 14:08:40,053 INFO L78 Accepts]: Start accepts. Automaton has 782 states and 957 transitions. Word has length 82 [2022-11-23 14:08:40,054 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:08:40,054 INFO L495 AbstractCegarLoop]: Abstraction has 782 states and 957 transitions. [2022-11-23 14:08:40,054 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 8.428571428571429) internal successors, (59), 7 states have internal predecessors, (59), 2 states have call successors, (16), 2 states have call predecessors, (16), 4 states have return successors, (18), 4 states have call predecessors, (18), 2 states have call successors, (18) [2022-11-23 14:08:40,054 INFO L276 IsEmpty]: Start isEmpty. Operand 782 states and 957 transitions. [2022-11-23 14:08:40,057 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2022-11-23 14:08:40,057 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:08:40,058 INFO L195 NwaCegarLoop]: trace histogram [5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:08:40,064 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-23 14:08:40,263 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2022-11-23 14:08:40,263 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:08:40,263 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:08:40,264 INFO L85 PathProgramCache]: Analyzing trace with hash 1922767639, now seen corresponding path program 1 times [2022-11-23 14:08:40,264 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:08:40,264 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [628289060] [2022-11-23 14:08:40,264 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:08:40,264 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:08:40,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:08:40,656 INFO L134 CoverageAnalysis]: Checked inductivity of 89 backedges. 34 proven. 26 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-11-23 14:08:40,656 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:08:40,656 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [628289060] [2022-11-23 14:08:40,656 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [628289060] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 14:08:40,656 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [941582853] [2022-11-23 14:08:40,657 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:08:40,657 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:08:40,657 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 14:08:40,658 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 14:08:40,687 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-23 14:08:40,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:08:40,789 INFO L263 TraceCheckSpWp]: Trace formula consists of 462 conjuncts, 34 conjunts are in the unsatisfiable core [2022-11-23 14:08:40,793 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:08:41,252 INFO L134 CoverageAnalysis]: Checked inductivity of 89 backedges. 31 proven. 56 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-23 14:08:41,253 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 14:08:42,237 INFO L134 CoverageAnalysis]: Checked inductivity of 89 backedges. 53 proven. 5 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2022-11-23 14:08:42,237 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [941582853] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 14:08:42,237 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [770922689] [2022-11-23 14:08:42,240 INFO L159 IcfgInterpreter]: Started Sifa with 51 locations of interest [2022-11-23 14:08:42,240 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 14:08:42,241 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 14:08:42,241 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 14:08:42,241 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 14:08:46,153 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 144 for LOIs [2022-11-23 14:08:46,182 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 55 for LOIs [2022-11-23 14:08:47,041 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 48 for LOIs [2022-11-23 14:08:47,046 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 26 for LOIs [2022-11-23 14:08:47,103 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 26 for LOIs [2022-11-23 14:08:47,216 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 57 for LOIs [2022-11-23 14:08:47,231 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 14:08:56,383 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12379#(and (= |timeShift_getWaterLevel_~retValue_acc~5#1| |timeShift_getWaterLevel_#res#1|) (= ~head~0.offset 0) (<= 1 ~systemActive~0) (<= |old(~switchedOnBeforeTS~0)| 2147483647) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1| 1) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1| 0)) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| |timeShift_getWaterLevel_#res#1|) (<= |#NULL.offset| 0) (= |old(~pumpRunning~0)| 0) (= |timeShift_getWaterLevel_~retValue_acc~5#1| ~waterLevel~0) (<= 2 |old(~waterLevel~0)|) (<= ~methaneLevelCritical~0 0) (<= 0 ~head~0.base) (<= 0 (+ |old(~switchedOnBeforeTS~0)| 2147483648)) (<= 0 ~methaneLevelCritical~0) (<= 0 ~pumpRunning~0) (<= ~head~0.base 0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| 2)) (<= 0 |#NULL.offset|) (<= |timeShift_getWaterLevel_~retValue_acc~5#1| 2147483647) (= ~switchedOnBeforeTS~0 0) (<= 0 |#StackHeapBarrier|) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1|) (<= ~systemActive~0 1) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0) (<= 2 |timeShift_getWaterLevel_~retValue_acc~5#1|))' at error location [2022-11-23 14:08:56,383 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 14:08:56,383 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 14:08:56,383 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 11] total 31 [2022-11-23 14:08:56,384 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [255125812] [2022-11-23 14:08:56,384 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 14:08:56,384 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-23 14:08:56,384 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:08:56,385 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-23 14:08:56,386 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=471, Invalid=3819, Unknown=0, NotChecked=0, Total=4290 [2022-11-23 14:08:56,386 INFO L87 Difference]: Start difference. First operand 782 states and 957 transitions. Second operand has 31 states, 29 states have (on average 6.310344827586207) internal successors, (183), 29 states have internal predecessors, (183), 17 states have call successors, (46), 7 states have call predecessors, (46), 12 states have return successors, (44), 19 states have call predecessors, (44), 16 states have call successors, (44) [2022-11-23 14:09:04,465 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:09:04,466 INFO L93 Difference]: Finished difference Result 1961 states and 2542 transitions. [2022-11-23 14:09:04,466 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 111 states. [2022-11-23 14:09:04,466 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 29 states have (on average 6.310344827586207) internal successors, (183), 29 states have internal predecessors, (183), 17 states have call successors, (46), 7 states have call predecessors, (46), 12 states have return successors, (44), 19 states have call predecessors, (44), 16 states have call successors, (44) Word has length 110 [2022-11-23 14:09:04,467 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:09:04,468 INFO L225 Difference]: With dead ends: 1961 [2022-11-23 14:09:04,468 INFO L226 Difference]: Without dead ends: 0 [2022-11-23 14:09:04,481 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 505 GetRequests, 326 SyntacticMatches, 7 SemanticMatches, 172 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11349 ImplicationChecksByTransitivity, 14.4s TimeCoverageRelationStatistics Valid=3380, Invalid=26722, Unknown=0, NotChecked=0, Total=30102 [2022-11-23 14:09:04,482 INFO L413 NwaCegarLoop]: 74 mSDtfsCounter, 1638 mSDsluCounter, 583 mSDsCounter, 0 mSdLazyCounter, 3707 mSolverCounterSat, 1666 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1638 SdHoareTripleChecker+Valid, 657 SdHoareTripleChecker+Invalid, 5373 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1666 IncrementalHoareTripleChecker+Valid, 3707 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.9s IncrementalHoareTripleChecker+Time [2022-11-23 14:09:04,483 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1638 Valid, 657 Invalid, 5373 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1666 Valid, 3707 Invalid, 0 Unknown, 0 Unchecked, 2.9s Time] [2022-11-23 14:09:04,485 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-23 14:09:04,485 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-23 14:09:04,485 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 14:09:04,485 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-23 14:09:04,486 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2022-11-23 14:09:04,486 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:09:04,486 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-23 14:09:04,486 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 29 states have (on average 6.310344827586207) internal successors, (183), 29 states have internal predecessors, (183), 17 states have call successors, (46), 7 states have call predecessors, (46), 12 states have return successors, (44), 19 states have call predecessors, (44), 16 states have call successors, (44) [2022-11-23 14:09:04,486 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-23 14:09:04,487 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-23 14:09:04,489 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-23 14:09:04,500 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-23 14:09:04,700 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-23 14:09:04,702 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-23 14:09:20,924 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 270 277) the Hoare annotation is: (or (not (= 1 ~systemActive~0)) (not (<= ~waterLevel~0 2)) (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (= ~switchedOnBeforeTS~0 0) (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|))) [2022-11-23 14:09:20,925 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 270 277) no Hoare annotation was computed. [2022-11-23 14:09:20,925 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 160 166) no Hoare annotation was computed. [2022-11-23 14:09:20,925 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 160 166) the Hoare annotation is: true [2022-11-23 14:09:20,925 INFO L895 garLoopResultBuilder]: At program point L213(line 213) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 (= ~switchedOnBeforeTS~0 0) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse2))) [2022-11-23 14:09:20,925 INFO L899 garLoopResultBuilder]: For program point L213-1(lines 194 218) no Hoare annotation was computed. [2022-11-23 14:09:20,926 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 194 218) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2 .cse3))) [2022-11-23 14:09:20,926 INFO L895 garLoopResultBuilder]: At program point L208(line 208) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2))) [2022-11-23 14:09:20,926 INFO L895 garLoopResultBuilder]: At program point L204(line 204) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2))) [2022-11-23 14:09:20,926 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 194 218) no Hoare annotation was computed. [2022-11-23 14:09:20,926 INFO L899 garLoopResultBuilder]: For program point L202(lines 202 210) no Hoare annotation was computed. [2022-11-23 14:09:20,927 INFO L895 garLoopResultBuilder]: At program point L198(lines 198 215) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2 .cse3))) [2022-11-23 14:09:20,927 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 289 297) no Hoare annotation was computed. [2022-11-23 14:09:20,927 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 289 297) the Hoare annotation is: true [2022-11-23 14:09:20,927 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 400 411) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0))) (let ((.cse5 (= |old(~methaneLevelCritical~0)| 0)) (.cse2 (not .cse4))) (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (not .cse5) .cse2))) (and (or .cse0 (not (= 2 ~waterLevel~0)) .cse1 (and (or .cse2 (not .cse3)) (or .cse4 .cse3)) (and .cse4 .cse5)) (or .cse4 .cse3 .cse0 .cse1 (not (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1))))))) [2022-11-23 14:09:20,927 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 400 411) no Hoare annotation was computed. [2022-11-23 14:09:20,928 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 941 970) no Hoare annotation was computed. [2022-11-23 14:09:20,928 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 941 970) the Hoare annotation is: true [2022-11-23 14:09:20,928 INFO L899 garLoopResultBuilder]: For program point L955(lines 955 959) no Hoare annotation was computed. [2022-11-23 14:09:20,928 INFO L902 garLoopResultBuilder]: At program point L955-1(lines 955 959) the Hoare annotation is: true [2022-11-23 14:09:20,928 INFO L902 garLoopResultBuilder]: At program point L951-2(lines 951 965) the Hoare annotation is: true [2022-11-23 14:09:20,928 INFO L902 garLoopResultBuilder]: At program point L947(line 947) the Hoare annotation is: true [2022-11-23 14:09:20,928 INFO L899 garLoopResultBuilder]: For program point L947-1(line 947) no Hoare annotation was computed. [2022-11-23 14:09:20,929 INFO L902 garLoopResultBuilder]: At program point L966(lines 941 970) the Hoare annotation is: true [2022-11-23 14:09:20,929 INFO L899 garLoopResultBuilder]: For program point L962(line 962) no Hoare annotation was computed. [2022-11-23 14:09:20,929 INFO L895 garLoopResultBuilder]: At program point L147-1(lines 147 153) the Hoare annotation is: (let ((.cse13 (< 0 |old(~waterLevel~0)|)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and (not .cse13) .cse11)) (.cse2 (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse13))) (let ((.cse12 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (= ~pumpRunning~0 0)) (.cse6 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse7 (or .cse1 .cse2))) (let ((.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse9 (and (not (= ~switchedOnBeforeTS~0 0)) .cse12 .cse10 (<= ~waterLevel~0 2) .cse6 .cse7)) (.cse0 (not (= 1 ~systemActive~0))) (.cse8 (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (and (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 1)) .cse2 .cse3) (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) .cse0 (and .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 (not (<= |old(~waterLevel~0)| 2)) (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse0 (and .cse4 .cse10 .cse11 .cse8) (and .cse4 (not .cse10) .cse5 .cse6 .cse7 .cse8) .cse3 (and (or (not .cse5) (= ~pumpRunning~0 1)) .cse11 (or .cse4 .cse5) (or .cse10 .cse5)) .cse9) (or (not (<= |old(~waterLevel~0)| 1)) .cse12 .cse0 (and .cse10 .cse11 .cse8))))))) [2022-11-23 14:09:20,929 INFO L895 garLoopResultBuilder]: At program point L234(line 234) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse5 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse2 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse4 (< 0 |old(~waterLevel~0)|)) (.cse6 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse7 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) .cse7 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) (not (<= |old(~waterLevel~0)| 1)) (and .cse1 .cse3 .cse5 (<= ~waterLevel~0 0) (or (and .cse2 .cse4) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse6) .cse0) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse7))) [2022-11-23 14:09:20,930 INFO L895 garLoopResultBuilder]: At program point L230(line 230) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= 1 ~systemActive~0))) (let ((.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse4 (not (= ~methaneLevelCritical~0 0)) (<= ~waterLevel~0 2) (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0) (let ((.cse5 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse5) (= |old(~waterLevel~0)| ~waterLevel~0)) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse5))) (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (.cse0 (not .cse4)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2))) (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2) (or .cse3 .cse0 .cse2)))) [2022-11-23 14:09:20,930 INFO L895 garLoopResultBuilder]: At program point L226(line 226) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (let ((.cse2 (and .cse3 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|) .cse4)) (.cse0 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2) (or .cse1 .cse2 (not (= |old(~waterLevel~0)| 2))) (or .cse0 .cse1 (and .cse3 (= |old(~waterLevel~0)| ~waterLevel~0) .cse4) (not (<= |old(~waterLevel~0)| 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 (not (<= |old(~waterLevel~0)| 2)))))) [2022-11-23 14:09:20,930 INFO L899 garLoopResultBuilder]: For program point L226-1(line 226) no Hoare annotation was computed. [2022-11-23 14:09:20,930 INFO L895 garLoopResultBuilder]: At program point L858(line 858) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 0))) (let ((.cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (<= |old(~waterLevel~0)| 1))) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (or (not .cse10) (= 2 ~waterLevel~0))) (.cse6 (= |old(~switchedOnBeforeTS~0)| 0))) (and (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2) (or .cse0 .cse1 (and .cse3 .cse4 .cse5) (not (<= |old(~waterLevel~0)| 0)) .cse6) (or .cse0 .cse7 .cse1 .cse2) (or .cse1 (and .cse3 .cse5) .cse8 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= ~switchedOnBeforeTS~0 0)) .cse9 .cse1 .cse8 .cse6) (or .cse7 .cse9 (and .cse10 .cse5) .cse1) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse3 .cse4 (= ~waterLevel~0 1)) .cse6)))) [2022-11-23 14:09:20,931 INFO L895 garLoopResultBuilder]: At program point L858-1(line 858) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__2_#t~ret51#1|)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (not (= 0 ~systemActive~0)))) (let ((.cse1 (and .cse3 .cse4 .cse5 .cse6)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) .cse0 (and .cse3 .cse4 .cse5 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse6) .cse2 (= |old(~switchedOnBeforeTS~0)| 0))))) [2022-11-23 14:09:20,931 INFO L895 garLoopResultBuilder]: At program point L239(line 239) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) .cse1 (and .cse2 .cse3 .cse4)) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse3 .cse4) (not (= |old(~waterLevel~0)| 2))) (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) .cse0 .cse1 (= |old(~switchedOnBeforeTS~0)| 0)))) [2022-11-23 14:09:20,931 INFO L895 garLoopResultBuilder]: At program point L239-1(lines 220 244) the Hoare annotation is: (let ((.cse13 (< 0 |old(~waterLevel~0)|)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and (not .cse13) .cse11)) (.cse2 (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse13))) (let ((.cse12 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (= ~pumpRunning~0 0)) (.cse6 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse7 (or .cse1 .cse2))) (let ((.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse9 (and (not (= ~switchedOnBeforeTS~0 0)) .cse12 .cse10 (<= ~waterLevel~0 2) .cse6 .cse7)) (.cse0 (not (= 1 ~systemActive~0))) (.cse8 (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (and (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 1)) .cse2 .cse3) (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) .cse0 (and .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 (not (<= |old(~waterLevel~0)| 2)) (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse0 (and .cse4 .cse10 .cse11 .cse8) (and .cse4 (not .cse10) .cse5 .cse6 .cse7 .cse8) .cse3 (and (or (not .cse5) (= ~pumpRunning~0 1)) .cse11 (or .cse4 .cse5) (or .cse10 .cse5)) .cse9) (or (not (<= |old(~waterLevel~0)| 1)) .cse12 .cse0 (and .cse10 .cse11 .cse8))))))) [2022-11-23 14:09:20,932 INFO L899 garLoopResultBuilder]: For program point L875(lines 875 885) no Hoare annotation was computed. [2022-11-23 14:09:20,932 INFO L899 garLoopResultBuilder]: For program point L140-2(lines 136 158) no Hoare annotation was computed. [2022-11-23 14:09:20,932 INFO L899 garLoopResultBuilder]: For program point L871(lines 871 888) no Hoare annotation was computed. [2022-11-23 14:09:20,932 INFO L895 garLoopResultBuilder]: At program point L871-1(lines 863 891) the Hoare annotation is: (let ((.cse18 (< 0 |old(~waterLevel~0)|)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse16 (= ~methaneLevelCritical~0 0)) (.cse7 (= ~pumpRunning~0 0)) (.cse8 (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1| 0)) (.cse17 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse3 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| ~waterLevel~0)) (.cse10 (and (not .cse18) .cse4)) (.cse11 (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse18))) (let ((.cse13 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse14 (= |old(~switchedOnBeforeTS~0)| 0)) (.cse15 (and (not (= ~switchedOnBeforeTS~0 0)) .cse7 .cse8 .cse17 .cse3 (or .cse10 .cse11))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (or (not .cse16) (= ~pumpRunning~0 1))) (.cse5 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (not (<= |old(~waterLevel~0)| 2))) (.cse12 (not (<= 2 |old(~waterLevel~0)|)))) (and (let ((.cse1 (= 2 ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse3 .cse4 .cse5) .cse9)) (or .cse0 .cse10 (not (= |old(~pumpRunning~0)| 1)) .cse11 .cse9 .cse12) (or .cse13 .cse0 .cse10 .cse11 (not (= |old(~waterLevel~0)| 2)) .cse14) (or .cse13 (not (<= |old(~waterLevel~0)| 1)) .cse15 .cse0 (and .cse6 .cse16 .cse17 (<= ~waterLevel~0 0) .cse3 (or .cse11 .cse4) .cse5) .cse14) (or .cse15 .cse0 (and .cse16 .cse2 .cse3 .cse4) (and .cse6 .cse16 .cse17 .cse3 (= ~waterLevel~0 1) .cse5) (and .cse6 .cse7) .cse9 .cse12))))) [2022-11-23 14:09:20,932 INFO L899 garLoopResultBuilder]: For program point L876(lines 876 882) no Hoare annotation was computed. [2022-11-23 14:09:20,933 INFO L899 garLoopResultBuilder]: For program point L228(lines 228 236) no Hoare annotation was computed. [2022-11-23 14:09:20,933 INFO L899 garLoopResultBuilder]: For program point L224(lines 224 241) no Hoare annotation was computed. [2022-11-23 14:09:20,933 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 133 159) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 0))) (let ((.cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (<= |old(~waterLevel~0)| 1))) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (or (not .cse10) (= 2 ~waterLevel~0))) (.cse6 (= |old(~switchedOnBeforeTS~0)| 0))) (and (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2) (or .cse0 .cse1 (and .cse3 .cse4 .cse5) (not (<= |old(~waterLevel~0)| 0)) .cse6) (or .cse0 .cse7 .cse1 .cse2) (or .cse1 (and .cse3 .cse5) .cse8 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= ~switchedOnBeforeTS~0 0)) .cse9 .cse1 .cse8 .cse6) (or .cse7 .cse9 (and .cse10 .cse5) .cse1) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse3 .cse4 (= ~waterLevel~0 1)) .cse6)))) [2022-11-23 14:09:20,933 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 133 159) no Hoare annotation was computed. [2022-11-23 14:09:20,934 INFO L895 garLoopResultBuilder]: At program point L873(line 873) the Hoare annotation is: (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (= ~pumpRunning~0 0)) (.cse9 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse6 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| ~waterLevel~0)) (.cse10 (let ((.cse11 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse11) .cse7) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse11)))) (.cse8 (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (let ((.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~methaneLevelCritical~0 0) .cse9 .cse6 .cse10 .cse8)) (.cse2 (and (not (= ~switchedOnBeforeTS~0 0)) .cse5 .cse9 .cse6 .cse10)) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2 .cse3 (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse4 .cse0 (not (= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) .cse4 .cse0 (and .cse5 .cse6 .cse7 .cse8)))))) [2022-11-23 14:09:20,934 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 935) no Hoare annotation was computed. [2022-11-23 14:09:20,934 INFO L899 garLoopResultBuilder]: For program point L873-1(line 873) no Hoare annotation was computed. [2022-11-23 14:09:20,934 INFO L895 garLoopResultBuilder]: At program point L935(line 935) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) (not (<= |old(~waterLevel~0)| 1)) .cse0) (or .cse0 (not (= |old(~waterLevel~0)| 2))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= |old(~waterLevel~0)| 2))))) [2022-11-23 14:09:20,934 INFO L895 garLoopResultBuilder]: At program point L110(lines 63 111) the Hoare annotation is: false [2022-11-23 14:09:20,934 INFO L899 garLoopResultBuilder]: For program point L65(lines 64 109) no Hoare annotation was computed. [2022-11-23 14:09:20,934 INFO L895 garLoopResultBuilder]: At program point L1023(lines 1023 1030) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_main_~tmp~11#1| ~systemActive~0) (= 1 ~systemActive~0) (= ~waterLevel~0 1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~methaneLevelCritical~0 0)) (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) [2022-11-23 14:09:20,934 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-23 14:09:20,935 INFO L902 garLoopResultBuilder]: At program point L1023-2(lines 1023 1030) the Hoare annotation is: true [2022-11-23 14:09:20,935 INFO L895 garLoopResultBuilder]: At program point L86(line 86) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse4 (or .cse5 (= ~methaneLevelCritical~0 0))) (.cse0 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~11#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse4) (and (= 2 ~waterLevel~0) .cse1 (= 1 ~systemActive~0) .cse2 .cse4) (and .cse5 .cse0 .cse1 .cse2 .cse3)))) [2022-11-23 14:09:20,935 INFO L895 garLoopResultBuilder]: At program point L107(lines 64 109) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0))) (let ((.cse2 (= 1 ~systemActive~0)) (.cse5 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse4 (or .cse6 (= ~methaneLevelCritical~0 0))) (.cse0 (= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_main_~tmp~11#1| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~pumpRunning~0 1)) (and .cse1 .cse2 .cse3 (= ~waterLevel~0 1) .cse5 .cse4) (and .cse6 (<= ~waterLevel~0 1) .cse1 .cse2 .cse3) (and .cse1 .cse2 .cse3 (<= ~waterLevel~0 0) .cse5 .cse4) (and .cse6 .cse0 (= |ULTIMATE.start_main_~tmp~11#1| 1) .cse1 .cse3)))) [2022-11-23 14:09:20,935 INFO L899 garLoopResultBuilder]: For program point L74(lines 74 80) no Hoare annotation was computed. [2022-11-23 14:09:20,935 INFO L899 garLoopResultBuilder]: For program point L74-1(lines 74 80) no Hoare annotation was computed. [2022-11-23 14:09:20,935 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-23 14:09:20,935 INFO L895 garLoopResultBuilder]: At program point L100-2(lines 94 105) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse0 (= |ULTIMATE.start_main_~tmp~11#1| ~systemActive~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3) (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2))) [2022-11-23 14:09:20,935 INFO L899 garLoopResultBuilder]: For program point L84(lines 84 90) no Hoare annotation was computed. [2022-11-23 14:09:20,935 INFO L899 garLoopResultBuilder]: For program point L84-1(lines 84 90) no Hoare annotation was computed. [2022-11-23 14:09:20,936 INFO L902 garLoopResultBuilder]: At program point L113(lines 54 117) the Hoare annotation is: true [2022-11-23 14:09:20,936 INFO L895 garLoopResultBuilder]: At program point L76(line 76) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0))) (let ((.cse2 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse4 (or .cse7 (= ~methaneLevelCritical~0 0))) (.cse0 (= 2 ~waterLevel~0)) (.cse5 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~11#1| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~pumpRunning~0 1)) (and .cse5 .cse1 .cse3 (= ~waterLevel~0 1) .cse6 .cse4) (and .cse7 (<= ~waterLevel~0 1) .cse1 .cse2 .cse3) (and .cse1 .cse2 .cse3 (<= ~waterLevel~0 0) .cse6 .cse4) (and .cse7 .cse0 .cse5 .cse1 .cse3)))) [2022-11-23 14:09:20,936 INFO L895 garLoopResultBuilder]: At program point L258-1(line 258) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 (= ~switchedOnBeforeTS~0 0) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and (= 2 ~waterLevel~0) (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_#t~ret11#1|)) .cse2))) [2022-11-23 14:09:20,936 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 168 192) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2 .cse3))) [2022-11-23 14:09:20,936 INFO L895 garLoopResultBuilder]: At program point L182(line 182) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (or (<= 2 ~waterLevel~0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)) (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) .cse1 .cse2) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 (= ~switchedOnBeforeTS~0 0) .cse2))) [2022-11-23 14:09:20,937 INFO L899 garLoopResultBuilder]: For program point L176(lines 176 184) no Hoare annotation was computed. [2022-11-23 14:09:20,937 INFO L895 garLoopResultBuilder]: At program point L172(lines 172 189) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2 .cse3))) [2022-11-23 14:09:20,937 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 168 192) no Hoare annotation was computed. [2022-11-23 14:09:20,937 INFO L895 garLoopResultBuilder]: At program point L187(line 187) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2))) [2022-11-23 14:09:20,937 INFO L899 garLoopResultBuilder]: For program point L187-1(lines 168 192) no Hoare annotation was computed. [2022-11-23 14:09:20,938 INFO L895 garLoopResultBuilder]: At program point L258(line 258) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse2 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (<= ~waterLevel~0 1)) .cse2) (or .cse1 (not (= ~methaneLevelCritical~0 0)) .cse3 (= ~switchedOnBeforeTS~0 0) .cse2) (or .cse0 .cse1 .cse3 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse2))) [2022-11-23 14:09:20,938 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 388 399) no Hoare annotation was computed. [2022-11-23 14:09:20,938 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 388 399) the Hoare annotation is: (let ((.cse5 (not (= ~pumpRunning~0 0)))) (let ((.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse0 (and .cse5 (not (= ~methaneLevelCritical~0 0)))) (.cse2 (not (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 (= ~waterLevel~0 1)) (or .cse0 .cse1 (not (= ~pumpRunning~0 1)) .cse3 .cse4) (or .cse5 .cse1 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse4 (not (<= |old(~waterLevel~0)| 0))) (or (not (<= |old(~waterLevel~0)| 1)) .cse5 .cse1 .cse4)))) [2022-11-23 14:09:20,938 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 278 288) the Hoare annotation is: true [2022-11-23 14:09:20,938 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 278 288) no Hoare annotation was computed. [2022-11-23 14:09:20,941 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:09:20,944 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-23 14:09:20,981 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 02:09:20 BoogieIcfgContainer [2022-11-23 14:09:20,981 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-23 14:09:20,982 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-23 14:09:20,982 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-23 14:09:20,982 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-23 14:09:20,982 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:08:02" (3/4) ... [2022-11-23 14:09:20,986 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-23 14:09:20,997 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-23 14:09:20,997 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-23 14:09:20,997 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-23 14:09:20,998 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-23 14:09:20,998 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-23 14:09:20,998 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 14:09:20,998 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-23 14:09:20,998 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-23 14:09:20,999 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-11-23 14:09:20,999 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-23 14:09:21,005 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 56 nodes and edges [2022-11-23 14:09:21,006 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 13 nodes and edges [2022-11-23 14:09:21,007 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 6 nodes and edges [2022-11-23 14:09:21,007 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-23 14:09:21,008 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-23 14:09:21,033 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && tmp == systemActive) && 1 == systemActive) && waterLevel == 1) && (pumpRunning == \old(pumpRunning) || methaneLevelCritical == 0)) && pumpRunning == switchedOnBeforeTS [2022-11-23 14:09:21,034 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || (((pumpRunning == \old(pumpRunning) && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2))) && ((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && !(0 == systemActive))) || !(\old(waterLevel) <= 2)) || \old(switchedOnBeforeTS) == 0) [2022-11-23 14:09:21,035 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || (!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel)) || !(\old(pumpRunning) == 1)) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))) || !(\old(waterLevel) == 2)) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == switchedOnBeforeTS)) || (((((!(switchedOnBeforeTS == 0) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && waterLevel <= 2) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))))) || !(\old(waterLevel) <= 2)) || \old(switchedOnBeforeTS) == 0)) && (((((!(1 == systemActive) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || (((((pumpRunning == \old(pumpRunning) && !(pumpRunning == 0)) && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) || ((((!(methaneLevelCritical == 0) || pumpRunning == 1) && \old(waterLevel) == waterLevel) && (pumpRunning == \old(pumpRunning) || methaneLevelCritical == 0)) && (pumpRunning == 0 || methaneLevelCritical == 0))) || (((((!(switchedOnBeforeTS == 0) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && waterLevel <= 2) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) [2022-11-23 14:09:21,036 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((2 == waterLevel && (!(methaneLevelCritical == 0) || pumpRunning == 1)) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || (((2 == waterLevel && tmp == waterLevel) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(1 == systemActive) || (!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel)) || !(\old(pumpRunning) == 1)) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || (!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel)) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))) || !(\old(waterLevel) == 2)) || \old(switchedOnBeforeTS) == 0)) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || (((((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && tmp___0 == 0) && tmp == methaneLevelCritical) && tmp == waterLevel) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))))) || !(1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && waterLevel <= 0) && tmp == waterLevel) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && pumpRunning == switchedOnBeforeTS)) || \old(switchedOnBeforeTS) == 0)) && (((((((((((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && tmp___0 == 0) && tmp == methaneLevelCritical) && tmp == waterLevel) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) || !(1 == systemActive)) || (((methaneLevelCritical == 0 && (!(methaneLevelCritical == 0) || pumpRunning == 1)) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || (((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && tmp == waterLevel) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-11-23 14:09:21,036 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || !(1 == systemActive)) && (!(1 == systemActive) || !(\old(waterLevel) == 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-23 14:09:21,036 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || (!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel)) || !(\old(pumpRunning) == 1)) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))) || !(\old(waterLevel) == 2)) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == switchedOnBeforeTS)) || (((((!(switchedOnBeforeTS == 0) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && waterLevel <= 2) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))))) || !(\old(waterLevel) <= 2)) || \old(switchedOnBeforeTS) == 0)) && (((((!(1 == systemActive) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || (((((pumpRunning == \old(pumpRunning) && !(pumpRunning == 0)) && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) || ((((!(methaneLevelCritical == 0) || pumpRunning == 1) && \old(waterLevel) == waterLevel) && (pumpRunning == \old(pumpRunning) || methaneLevelCritical == 0)) && (pumpRunning == 0 || methaneLevelCritical == 0))) || (((((!(switchedOnBeforeTS == 0) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && waterLevel <= 2) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) [2022-11-23 14:09:21,036 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning))) [2022-11-23 14:09:21,037 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning))) [2022-11-23 14:09:21,038 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || switchedOnBeforeTS == 0) || !(switchedOnBeforeTS == \old(pumpRunning))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || ((2 == waterLevel && pumpRunning == switchedOnBeforeTS) && methaneLevelCritical == aux-isMethaneAlarm()-aux)) || !(switchedOnBeforeTS == \old(pumpRunning))) [2022-11-23 14:09:21,061 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/witness.graphml [2022-11-23 14:09:21,061 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-23 14:09:21,062 INFO L158 Benchmark]: Toolchain (without parser) took 80077.32ms. Allocated memory was 159.4MB in the beginning and 597.7MB in the end (delta: 438.3MB). Free memory was 115.0MB in the beginning and 394.6MB in the end (delta: -279.6MB). Peak memory consumption was 159.7MB. Max. memory is 16.1GB. [2022-11-23 14:09:21,062 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 113.2MB. Free memory is still 88.6MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-23 14:09:21,063 INFO L158 Benchmark]: CACSL2BoogieTranslator took 633.08ms. Allocated memory is still 159.4MB. Free memory was 114.5MB in the beginning and 95.2MB in the end (delta: 19.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-23 14:09:21,063 INFO L158 Benchmark]: Boogie Procedure Inliner took 60.01ms. Allocated memory is still 159.4MB. Free memory was 95.2MB in the beginning and 93.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-23 14:09:21,063 INFO L158 Benchmark]: Boogie Preprocessor took 32.80ms. Allocated memory is still 159.4MB. Free memory was 93.1MB in the beginning and 91.4MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-23 14:09:21,064 INFO L158 Benchmark]: RCFGBuilder took 851.00ms. Allocated memory is still 159.4MB. Free memory was 91.4MB in the beginning and 111.3MB in the end (delta: -19.9MB). Peak memory consumption was 16.5MB. Max. memory is 16.1GB. [2022-11-23 14:09:21,064 INFO L158 Benchmark]: TraceAbstraction took 78412.61ms. Allocated memory was 159.4MB in the beginning and 597.7MB in the end (delta: 438.3MB). Free memory was 110.6MB in the beginning and 400.9MB in the end (delta: -290.3MB). Peak memory consumption was 353.0MB. Max. memory is 16.1GB. [2022-11-23 14:09:21,064 INFO L158 Benchmark]: Witness Printer took 80.01ms. Allocated memory is still 597.7MB. Free memory was 400.9MB in the beginning and 394.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-23 14:09:21,066 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 113.2MB. Free memory is still 88.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 633.08ms. Allocated memory is still 159.4MB. Free memory was 114.5MB in the beginning and 95.2MB in the end (delta: 19.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 60.01ms. Allocated memory is still 159.4MB. Free memory was 95.2MB in the beginning and 93.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 32.80ms. Allocated memory is still 159.4MB. Free memory was 93.1MB in the beginning and 91.4MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 851.00ms. Allocated memory is still 159.4MB. Free memory was 91.4MB in the beginning and 111.3MB in the end (delta: -19.9MB). Peak memory consumption was 16.5MB. Max. memory is 16.1GB. * TraceAbstraction took 78412.61ms. Allocated memory was 159.4MB in the beginning and 597.7MB in the end (delta: 438.3MB). Free memory was 110.6MB in the beginning and 400.9MB in the end (delta: -290.3MB). Peak memory consumption was 353.0MB. Max. memory is 16.1GB. * Witness Printer took 80.01ms. Allocated memory is still 597.7MB. Free memory was 400.9MB in the beginning and 394.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 935]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 75 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 78.3s, OverallIterations: 10, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 15.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 16.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3487 SdHoareTripleChecker+Valid, 6.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3453 mSDsluCounter, 3658 SdHoareTripleChecker+Invalid, 5.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2806 mSDsCounter, 3095 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 8463 IncrementalHoareTripleChecker+Invalid, 11558 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3095 mSolverCounterUnsat, 852 mSDtfsCounter, 8463 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1207 GetRequests, 773 SyntacticMatches, 27 SemanticMatches, 407 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20482 ImplicationChecksByTransitivity, 33.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=782occurred in iteration=9, InterpolantAutomatonStates: 269, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 10 MinimizatonAttempts, 473 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 2475 PreInvPairs, 3088 NumberOfFragments, 2831 HoareAnnotationTreeSize, 2475 FomulaSimplifications, 19975 FormulaSimplificationTreeSizeReduction, 2.4s HoareSimplificationTime, 43 FomulaSimplificationsInter, 87468 FormulaSimplificationTreeSizeReductionInter, 13.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 4.6s InterpolantComputationTime, 776 NumberOfCodeBlocks, 776 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1030 ConstructedInterpolants, 0 QuantifiedInterpolants, 2867 SizeOfPredicates, 29 NumberOfNonLiveVariables, 1185 ConjunctsInSsa, 69 ConjunctsInUnsatCore, 16 InterpolantComputations, 7 PerfectInterpolantSequences, 383/482 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 63]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1023]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 858]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || (((pumpRunning == \old(pumpRunning) && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2))) && ((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && !(0 == systemActive))) || !(\old(waterLevel) <= 2)) || \old(switchedOnBeforeTS) == 0) - InvariantResult [Line: 198]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning))) - InvariantResult [Line: 863]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((2 == waterLevel && (!(methaneLevelCritical == 0) || pumpRunning == 1)) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || (((2 == waterLevel && tmp == waterLevel) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(1 == systemActive) || (!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel)) || !(\old(pumpRunning) == 1)) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || (!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel)) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))) || !(\old(waterLevel) == 2)) || \old(switchedOnBeforeTS) == 0)) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || (((((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && tmp___0 == 0) && tmp == methaneLevelCritical) && tmp == waterLevel) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))))) || !(1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && waterLevel <= 0) && tmp == waterLevel) && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && pumpRunning == switchedOnBeforeTS)) || \old(switchedOnBeforeTS) == 0)) && (((((((((((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && tmp___0 == 0) && tmp == methaneLevelCritical) && tmp == waterLevel) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) || !(1 == systemActive)) || (((methaneLevelCritical == 0 && (!(methaneLevelCritical == 0) || pumpRunning == 1)) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || (((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && tmp == waterLevel) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: ((((((((2 == waterLevel && tmp == systemActive) && 1 == systemActive) && splverifierCounter == 0) && (pumpRunning == 0 || methaneLevelCritical == 0)) && pumpRunning == 1) || (((((tmp == systemActive && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS) && (pumpRunning == 0 || methaneLevelCritical == 0))) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && splverifierCounter == 0)) || (((((tmp == systemActive && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && pumpRunning == switchedOnBeforeTS) && (pumpRunning == 0 || methaneLevelCritical == 0))) || ((((pumpRunning == 0 && 2 == waterLevel) && tmp == 1) && tmp == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 278]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 941]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1023]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && tmp == systemActive) && 1 == systemActive) && waterLevel == 1) && (pumpRunning == \old(pumpRunning) || methaneLevelCritical == 0)) && pumpRunning == switchedOnBeforeTS - InvariantResult [Line: 935]: Loop Invariant Derived loop invariant: (((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || !(1 == systemActive)) && (!(1 == systemActive) || !(\old(waterLevel) == 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 147]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || (!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel)) || !(\old(pumpRunning) == 1)) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))) || !(\old(waterLevel) == 2)) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == switchedOnBeforeTS)) || (((((!(switchedOnBeforeTS == 0) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && waterLevel <= 2) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))))) || !(\old(waterLevel) <= 2)) || \old(switchedOnBeforeTS) == 0)) && (((((!(1 == systemActive) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || (((((pumpRunning == \old(pumpRunning) && !(pumpRunning == 0)) && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) || ((((!(methaneLevelCritical == 0) || pumpRunning == 1) && \old(waterLevel) == waterLevel) && (pumpRunning == \old(pumpRunning) || methaneLevelCritical == 0)) && (pumpRunning == 0 || methaneLevelCritical == 0))) || (((((!(switchedOnBeforeTS == 0) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && waterLevel <= 2) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) - InvariantResult [Line: 220]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || (!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel)) || !(\old(pumpRunning) == 1)) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))) || !(\old(waterLevel) == 2)) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == switchedOnBeforeTS)) || (((((!(switchedOnBeforeTS == 0) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && waterLevel <= 2) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))))) || !(\old(waterLevel) <= 2)) || \old(switchedOnBeforeTS) == 0)) && (((((!(1 == systemActive) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || (((((pumpRunning == \old(pumpRunning) && !(pumpRunning == 0)) && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) || ((((!(methaneLevelCritical == 0) || pumpRunning == 1) && \old(waterLevel) == waterLevel) && (pumpRunning == \old(pumpRunning) || methaneLevelCritical == 0)) && (pumpRunning == 0 || methaneLevelCritical == 0))) || (((((!(switchedOnBeforeTS == 0) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && waterLevel <= 2) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning))) - InvariantResult [Line: 951]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 258]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || switchedOnBeforeTS == 0) || !(switchedOnBeforeTS == \old(pumpRunning))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || ((2 == waterLevel && pumpRunning == switchedOnBeforeTS) && methaneLevelCritical == aux-isMethaneAlarm()-aux)) || !(switchedOnBeforeTS == \old(pumpRunning))) RESULT: Ultimate proved your program to be correct! [2022-11-23 14:09:21,107 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e13e8751-5c47-4db4-be3c-55c35692e6ed/bin/utaipan-Q6hlc19bkW/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE