./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product48.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product48.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ae2f7a85a5093ad80fd05f69a7d0bbcf9a510999a9154b6f2d8037f035f00930 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 04:43:01,352 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 04:43:01,354 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 04:43:01,372 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 04:43:01,373 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 04:43:01,374 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 04:43:01,375 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 04:43:01,376 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 04:43:01,378 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 04:43:01,379 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 04:43:01,380 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 04:43:01,381 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 04:43:01,381 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 04:43:01,382 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 04:43:01,383 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 04:43:01,384 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 04:43:01,385 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 04:43:01,386 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 04:43:01,387 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 04:43:01,389 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 04:43:01,390 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 04:43:01,392 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 04:43:01,393 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 04:43:01,393 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 04:43:01,403 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 04:43:01,404 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 04:43:01,404 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 04:43:01,405 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 04:43:01,406 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 04:43:01,407 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 04:43:01,407 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 04:43:01,408 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 04:43:01,408 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 04:43:01,409 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 04:43:01,410 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 04:43:01,411 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 04:43:01,411 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 04:43:01,411 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 04:43:01,412 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 04:43:01,413 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 04:43:01,413 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 04:43:01,414 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-12-14 04:43:01,444 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 04:43:01,445 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 04:43:01,445 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 04:43:01,445 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 04:43:01,446 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 04:43:01,446 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 04:43:01,446 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 04:43:01,446 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 04:43:01,447 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 04:43:01,447 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-12-14 04:43:01,447 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 04:43:01,447 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 04:43:01,447 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-12-14 04:43:01,448 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-12-14 04:43:01,448 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 04:43:01,448 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-12-14 04:43:01,448 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-12-14 04:43:01,448 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-12-14 04:43:01,449 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 04:43:01,449 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 04:43:01,449 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 04:43:01,449 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 04:43:01,450 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 04:43:01,450 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-12-14 04:43:01,450 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 04:43:01,450 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-12-14 04:43:01,450 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 04:43:01,451 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-14 04:43:01,451 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 04:43:01,451 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-12-14 04:43:01,451 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 04:43:01,451 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 04:43:01,451 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 04:43:01,452 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 04:43:01,452 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-12-14 04:43:01,452 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 04:43:01,452 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-12-14 04:43:01,452 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-12-14 04:43:01,452 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-14 04:43:01,453 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-12-14 04:43:01,453 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 04:43:01,453 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ae2f7a85a5093ad80fd05f69a7d0bbcf9a510999a9154b6f2d8037f035f00930 [2022-12-14 04:43:01,644 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 04:43:01,665 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 04:43:01,667 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 04:43:01,668 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 04:43:01,669 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 04:43:01,670 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/product-lines/minepump_spec1_product48.cil.c [2022-12-14 04:43:04,297 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 04:43:04,488 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 04:43:04,489 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/sv-benchmarks/c/product-lines/minepump_spec1_product48.cil.c [2022-12-14 04:43:04,499 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/data/f5a28920c/d099f69308224bfaa0cb6830df433f5c/FLAGcdb26f433 [2022-12-14 04:43:04,512 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/data/f5a28920c/d099f69308224bfaa0cb6830df433f5c [2022-12-14 04:43:04,514 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 04:43:04,515 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 04:43:04,516 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 04:43:04,516 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 04:43:04,519 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 04:43:04,520 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 04:43:04" (1/1) ... [2022-12-14 04:43:04,521 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@70d0dd0e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:43:04, skipping insertion in model container [2022-12-14 04:43:04,521 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 04:43:04" (1/1) ... [2022-12-14 04:43:04,527 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 04:43:04,559 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 04:43:04,769 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/sv-benchmarks/c/product-lines/minepump_spec1_product48.cil.c[17123,17136] [2022-12-14 04:43:04,777 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 04:43:04,788 INFO L203 MainTranslator]: Completed pre-run [2022-12-14 04:43:04,841 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/sv-benchmarks/c/product-lines/minepump_spec1_product48.cil.c[17123,17136] [2022-12-14 04:43:04,844 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 04:43:04,861 INFO L208 MainTranslator]: Completed translation [2022-12-14 04:43:04,861 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:43:04 WrapperNode [2022-12-14 04:43:04,862 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 04:43:04,863 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-14 04:43:04,863 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-14 04:43:04,863 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-14 04:43:04,870 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:43:04" (1/1) ... [2022-12-14 04:43:04,881 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:43:04" (1/1) ... [2022-12-14 04:43:04,902 INFO L138 Inliner]: procedures = 56, calls = 102, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 188 [2022-12-14 04:43:04,902 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-14 04:43:04,903 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-14 04:43:04,903 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-14 04:43:04,903 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-14 04:43:04,912 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:43:04" (1/1) ... [2022-12-14 04:43:04,913 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:43:04" (1/1) ... [2022-12-14 04:43:04,914 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:43:04" (1/1) ... [2022-12-14 04:43:04,915 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:43:04" (1/1) ... [2022-12-14 04:43:04,919 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:43:04" (1/1) ... [2022-12-14 04:43:04,923 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:43:04" (1/1) ... [2022-12-14 04:43:04,924 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:43:04" (1/1) ... [2022-12-14 04:43:04,925 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:43:04" (1/1) ... [2022-12-14 04:43:04,927 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-14 04:43:04,928 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-14 04:43:04,928 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-14 04:43:04,928 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-14 04:43:04,929 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:43:04" (1/1) ... [2022-12-14 04:43:04,935 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 04:43:04,945 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 04:43:04,956 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-14 04:43:04,958 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-14 04:43:04,985 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-14 04:43:04,986 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-12-14 04:43:04,986 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-12-14 04:43:04,986 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-12-14 04:43:04,986 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-12-14 04:43:04,986 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-12-14 04:43:04,986 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-12-14 04:43:04,986 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-12-14 04:43:04,986 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-12-14 04:43:04,986 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-12-14 04:43:04,986 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-12-14 04:43:04,986 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-12-14 04:43:04,987 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-12-14 04:43:04,987 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-12-14 04:43:04,987 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-12-14 04:43:04,987 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-12-14 04:43:04,987 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-12-14 04:43:04,987 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-14 04:43:04,987 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-12-14 04:43:04,987 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-12-14 04:43:04,987 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-14 04:43:04,987 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-14 04:43:05,045 INFO L235 CfgBuilder]: Building ICFG [2022-12-14 04:43:05,046 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-14 04:43:05,249 INFO L276 CfgBuilder]: Performing block encoding [2022-12-14 04:43:05,312 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-14 04:43:05,312 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-12-14 04:43:05,314 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 04:43:05 BoogieIcfgContainer [2022-12-14 04:43:05,315 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-14 04:43:05,316 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-14 04:43:05,317 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-14 04:43:05,319 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-14 04:43:05,319 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 04:43:04" (1/3) ... [2022-12-14 04:43:05,320 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@12f2796a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 04:43:05, skipping insertion in model container [2022-12-14 04:43:05,320 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:43:04" (2/3) ... [2022-12-14 04:43:05,320 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@12f2796a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 04:43:05, skipping insertion in model container [2022-12-14 04:43:05,320 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 04:43:05" (3/3) ... [2022-12-14 04:43:05,321 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product48.cil.c [2022-12-14 04:43:05,336 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-14 04:43:05,336 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-12-14 04:43:05,374 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-14 04:43:05,378 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7bfb098, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-12-14 04:43:05,378 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-12-14 04:43:05,382 INFO L276 IsEmpty]: Start isEmpty. Operand has 71 states, 44 states have (on average 1.4090909090909092) internal successors, (62), 53 states have internal predecessors, (62), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) [2022-12-14 04:43:05,389 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-12-14 04:43:05,389 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 04:43:05,389 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 04:43:05,390 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 04:43:05,394 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 04:43:05,394 INFO L85 PathProgramCache]: Analyzing trace with hash 298718142, now seen corresponding path program 1 times [2022-12-14 04:43:05,401 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 04:43:05,402 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1954673244] [2022-12-14 04:43:05,402 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 04:43:05,402 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 04:43:05,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 04:43:05,527 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 04:43:05,527 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 04:43:05,527 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1954673244] [2022-12-14 04:43:05,528 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1954673244] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 04:43:05,528 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 04:43:05,528 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 04:43:05,529 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [210254073] [2022-12-14 04:43:05,530 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 04:43:05,534 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-12-14 04:43:05,534 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 04:43:05,557 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-12-14 04:43:05,558 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 04:43:05,560 INFO L87 Difference]: Start difference. First operand has 71 states, 44 states have (on average 1.4090909090909092) internal successors, (62), 53 states have internal predecessors, (62), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 04:43:05,619 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 04:43:05,619 INFO L93 Difference]: Finished difference Result 140 states and 189 transitions. [2022-12-14 04:43:05,620 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-12-14 04:43:05,621 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 16 [2022-12-14 04:43:05,622 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 04:43:05,628 INFO L225 Difference]: With dead ends: 140 [2022-12-14 04:43:05,628 INFO L226 Difference]: Without dead ends: 66 [2022-12-14 04:43:05,631 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 04:43:05,634 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 73 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 04:43:05,634 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 73 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 04:43:05,648 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66 states. [2022-12-14 04:43:05,664 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66 to 66. [2022-12-14 04:43:05,665 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 41 states have (on average 1.3170731707317074) internal successors, (54), 49 states have internal predecessors, (54), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 12 states have call predecessors, (15), 15 states have call successors, (15) [2022-12-14 04:43:05,666 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 85 transitions. [2022-12-14 04:43:05,668 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 85 transitions. Word has length 16 [2022-12-14 04:43:05,668 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 04:43:05,668 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 85 transitions. [2022-12-14 04:43:05,668 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 04:43:05,668 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 85 transitions. [2022-12-14 04:43:05,670 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-12-14 04:43:05,670 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 04:43:05,670 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 04:43:05,670 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-14 04:43:05,670 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 04:43:05,671 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 04:43:05,671 INFO L85 PathProgramCache]: Analyzing trace with hash 1644517426, now seen corresponding path program 1 times [2022-12-14 04:43:05,671 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 04:43:05,671 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1843976324] [2022-12-14 04:43:05,671 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 04:43:05,672 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 04:43:05,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 04:43:05,741 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 04:43:05,741 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 04:43:05,741 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1843976324] [2022-12-14 04:43:05,741 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1843976324] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 04:43:05,741 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 04:43:05,742 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 04:43:05,742 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1179721056] [2022-12-14 04:43:05,742 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 04:43:05,743 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 04:43:05,743 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 04:43:05,744 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 04:43:05,744 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 04:43:05,744 INFO L87 Difference]: Start difference. First operand 66 states and 85 transitions. Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 04:43:05,781 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 04:43:05,781 INFO L93 Difference]: Finished difference Result 104 states and 132 transitions. [2022-12-14 04:43:05,782 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 04:43:05,782 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-12-14 04:43:05,782 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 04:43:05,783 INFO L225 Difference]: With dead ends: 104 [2022-12-14 04:43:05,783 INFO L226 Difference]: Without dead ends: 58 [2022-12-14 04:43:05,784 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 04:43:05,785 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 14 mSDsluCounter, 43 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 102 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 04:43:05,785 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 102 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 04:43:05,786 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2022-12-14 04:43:05,791 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 58. [2022-12-14 04:43:05,791 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58 states, 36 states have (on average 1.3333333333333333) internal successors, (48), 44 states have internal predecessors, (48), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-12-14 04:43:05,792 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58 states to 58 states and 74 transitions. [2022-12-14 04:43:05,792 INFO L78 Accepts]: Start accepts. Automaton has 58 states and 74 transitions. Word has length 17 [2022-12-14 04:43:05,792 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 04:43:05,792 INFO L495 AbstractCegarLoop]: Abstraction has 58 states and 74 transitions. [2022-12-14 04:43:05,792 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 04:43:05,793 INFO L276 IsEmpty]: Start isEmpty. Operand 58 states and 74 transitions. [2022-12-14 04:43:05,793 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-12-14 04:43:05,793 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 04:43:05,793 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 04:43:05,794 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-14 04:43:05,794 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 04:43:05,794 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 04:43:05,794 INFO L85 PathProgramCache]: Analyzing trace with hash -855468358, now seen corresponding path program 1 times [2022-12-14 04:43:05,794 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 04:43:05,795 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1558652804] [2022-12-14 04:43:05,795 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 04:43:05,795 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 04:43:05,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 04:43:05,848 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 04:43:05,848 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 04:43:05,848 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1558652804] [2022-12-14 04:43:05,848 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1558652804] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 04:43:05,848 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 04:43:05,848 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 04:43:05,849 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1235684510] [2022-12-14 04:43:05,849 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 04:43:05,849 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 04:43:05,849 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 04:43:05,850 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 04:43:05,850 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 04:43:05,850 INFO L87 Difference]: Start difference. First operand 58 states and 74 transitions. Second operand has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 04:43:05,908 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 04:43:05,908 INFO L93 Difference]: Finished difference Result 170 states and 219 transitions. [2022-12-14 04:43:05,909 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 04:43:05,909 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2022-12-14 04:43:05,909 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 04:43:05,910 INFO L225 Difference]: With dead ends: 170 [2022-12-14 04:43:05,910 INFO L226 Difference]: Without dead ends: 114 [2022-12-14 04:43:05,910 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 04:43:05,911 INFO L413 NwaCegarLoop]: 78 mSDtfsCounter, 68 mSDsluCounter, 57 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 135 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 04:43:05,912 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 135 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 04:43:05,912 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 114 states. [2022-12-14 04:43:05,929 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 114 to 111. [2022-12-14 04:43:05,930 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 111 states, 68 states have (on average 1.338235294117647) internal successors, (91), 83 states have internal predecessors, (91), 26 states have call successors, (26), 16 states have call predecessors, (26), 16 states have return successors, (26), 19 states have call predecessors, (26), 26 states have call successors, (26) [2022-12-14 04:43:05,931 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 111 states to 111 states and 143 transitions. [2022-12-14 04:43:05,931 INFO L78 Accepts]: Start accepts. Automaton has 111 states and 143 transitions. Word has length 20 [2022-12-14 04:43:05,932 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 04:43:05,932 INFO L495 AbstractCegarLoop]: Abstraction has 111 states and 143 transitions. [2022-12-14 04:43:05,932 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 04:43:05,932 INFO L276 IsEmpty]: Start isEmpty. Operand 111 states and 143 transitions. [2022-12-14 04:43:05,933 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-12-14 04:43:05,933 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 04:43:05,934 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 04:43:05,934 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-14 04:43:05,934 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 04:43:05,934 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 04:43:05,935 INFO L85 PathProgramCache]: Analyzing trace with hash -85336683, now seen corresponding path program 1 times [2022-12-14 04:43:05,935 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 04:43:05,935 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [310895377] [2022-12-14 04:43:05,935 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 04:43:05,935 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 04:43:05,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 04:43:06,050 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 04:43:06,050 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 04:43:06,050 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [310895377] [2022-12-14 04:43:06,051 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [310895377] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 04:43:06,051 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 04:43:06,051 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-14 04:43:06,051 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1705778521] [2022-12-14 04:43:06,051 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 04:43:06,051 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 04:43:06,052 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 04:43:06,052 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 04:43:06,052 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-14 04:43:06,053 INFO L87 Difference]: Start difference. First operand 111 states and 143 transitions. Second operand has 6 states, 5 states have (on average 4.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 04:43:06,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 04:43:06,181 INFO L93 Difference]: Finished difference Result 327 states and 426 transitions. [2022-12-14 04:43:06,181 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-12-14 04:43:06,181 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-12-14 04:43:06,182 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 04:43:06,184 INFO L225 Difference]: With dead ends: 327 [2022-12-14 04:43:06,184 INFO L226 Difference]: Without dead ends: 218 [2022-12-14 04:43:06,185 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-12-14 04:43:06,186 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 52 mSDsluCounter, 237 mSDsCounter, 0 mSdLazyCounter, 111 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 307 SdHoareTripleChecker+Invalid, 112 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 111 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 04:43:06,187 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 307 Invalid, 112 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 04:43:06,188 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 218 states. [2022-12-14 04:43:06,215 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 218 to 210. [2022-12-14 04:43:06,216 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 129 states have (on average 1.3255813953488371) internal successors, (171), 156 states have internal predecessors, (171), 50 states have call successors, (50), 30 states have call predecessors, (50), 30 states have return successors, (50), 36 states have call predecessors, (50), 50 states have call successors, (50) [2022-12-14 04:43:06,218 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 271 transitions. [2022-12-14 04:43:06,218 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 271 transitions. Word has length 23 [2022-12-14 04:43:06,219 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 04:43:06,219 INFO L495 AbstractCegarLoop]: Abstraction has 210 states and 271 transitions. [2022-12-14 04:43:06,219 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 04:43:06,219 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 271 transitions. [2022-12-14 04:43:06,221 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-12-14 04:43:06,221 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 04:43:06,221 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 04:43:06,222 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-14 04:43:06,222 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 04:43:06,222 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 04:43:06,222 INFO L85 PathProgramCache]: Analyzing trace with hash 1162424553, now seen corresponding path program 1 times [2022-12-14 04:43:06,222 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 04:43:06,223 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [818173591] [2022-12-14 04:43:06,223 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 04:43:06,223 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 04:43:06,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 04:43:06,375 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 04:43:06,375 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 04:43:06,375 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [818173591] [2022-12-14 04:43:06,375 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [818173591] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 04:43:06,375 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 04:43:06,375 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 04:43:06,376 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [618838927] [2022-12-14 04:43:06,376 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 04:43:06,376 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 04:43:06,376 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 04:43:06,377 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 04:43:06,377 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 04:43:06,377 INFO L87 Difference]: Start difference. First operand 210 states and 271 transitions. Second operand has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-12-14 04:43:06,472 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 04:43:06,472 INFO L93 Difference]: Finished difference Result 574 states and 754 transitions. [2022-12-14 04:43:06,472 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 04:43:06,472 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 26 [2022-12-14 04:43:06,473 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 04:43:06,475 INFO L225 Difference]: With dead ends: 574 [2022-12-14 04:43:06,475 INFO L226 Difference]: Without dead ends: 366 [2022-12-14 04:43:06,477 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 04:43:06,478 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 42 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 178 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 04:43:06,479 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 178 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 04:43:06,480 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 366 states. [2022-12-14 04:43:06,515 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 366 to 356. [2022-12-14 04:43:06,516 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 356 states, 231 states have (on average 1.2683982683982684) internal successors, (293), 256 states have internal predecessors, (293), 68 states have call successors, (68), 56 states have call predecessors, (68), 56 states have return successors, (84), 62 states have call predecessors, (84), 68 states have call successors, (84) [2022-12-14 04:43:06,519 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 356 states to 356 states and 445 transitions. [2022-12-14 04:43:06,519 INFO L78 Accepts]: Start accepts. Automaton has 356 states and 445 transitions. Word has length 26 [2022-12-14 04:43:06,519 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 04:43:06,520 INFO L495 AbstractCegarLoop]: Abstraction has 356 states and 445 transitions. [2022-12-14 04:43:06,520 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-12-14 04:43:06,520 INFO L276 IsEmpty]: Start isEmpty. Operand 356 states and 445 transitions. [2022-12-14 04:43:06,521 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-12-14 04:43:06,521 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 04:43:06,522 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 04:43:06,522 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-14 04:43:06,522 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 04:43:06,522 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 04:43:06,522 INFO L85 PathProgramCache]: Analyzing trace with hash 1303341668, now seen corresponding path program 1 times [2022-12-14 04:43:06,523 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 04:43:06,523 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2063435581] [2022-12-14 04:43:06,523 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 04:43:06,523 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 04:43:06,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 04:43:06,693 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-12-14 04:43:06,693 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 04:43:06,693 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2063435581] [2022-12-14 04:43:06,693 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2063435581] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 04:43:06,693 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 04:43:06,693 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-14 04:43:06,693 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [393118989] [2022-12-14 04:43:06,693 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 04:43:06,694 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-12-14 04:43:06,694 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 04:43:06,694 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-14 04:43:06,694 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-12-14 04:43:06,694 INFO L87 Difference]: Start difference. First operand 356 states and 445 transitions. Second operand has 7 states, 6 states have (on average 4.5) internal successors, (27), 7 states have internal predecessors, (27), 5 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2022-12-14 04:43:06,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 04:43:06,974 INFO L93 Difference]: Finished difference Result 1107 states and 1440 transitions. [2022-12-14 04:43:06,974 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-14 04:43:06,975 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 4.5) internal successors, (27), 7 states have internal predecessors, (27), 5 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) Word has length 39 [2022-12-14 04:43:06,975 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 04:43:06,981 INFO L225 Difference]: With dead ends: 1107 [2022-12-14 04:43:06,981 INFO L226 Difference]: Without dead ends: 753 [2022-12-14 04:43:06,983 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=47, Unknown=0, NotChecked=0, Total=72 [2022-12-14 04:43:06,984 INFO L413 NwaCegarLoop]: 106 mSDtfsCounter, 192 mSDsluCounter, 177 mSDsCounter, 0 mSdLazyCounter, 255 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 194 SdHoareTripleChecker+Valid, 283 SdHoareTripleChecker+Invalid, 287 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 255 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 04:43:06,984 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [194 Valid, 283 Invalid, 287 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 255 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 04:43:06,985 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 753 states. [2022-12-14 04:43:07,025 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 753 to 669. [2022-12-14 04:43:07,026 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 669 states, 458 states have (on average 1.2838427947598254) internal successors, (588), 489 states have internal predecessors, (588), 106 states have call successors, (106), 98 states have call predecessors, (106), 104 states have return successors, (140), 104 states have call predecessors, (140), 106 states have call successors, (140) [2022-12-14 04:43:07,028 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 669 states to 669 states and 834 transitions. [2022-12-14 04:43:07,028 INFO L78 Accepts]: Start accepts. Automaton has 669 states and 834 transitions. Word has length 39 [2022-12-14 04:43:07,028 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 04:43:07,029 INFO L495 AbstractCegarLoop]: Abstraction has 669 states and 834 transitions. [2022-12-14 04:43:07,029 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 4.5) internal successors, (27), 7 states have internal predecessors, (27), 5 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2022-12-14 04:43:07,029 INFO L276 IsEmpty]: Start isEmpty. Operand 669 states and 834 transitions. [2022-12-14 04:43:07,030 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-12-14 04:43:07,030 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 04:43:07,030 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 04:43:07,030 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-12-14 04:43:07,030 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 04:43:07,031 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 04:43:07,031 INFO L85 PathProgramCache]: Analyzing trace with hash 1388267941, now seen corresponding path program 1 times [2022-12-14 04:43:07,031 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 04:43:07,031 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1868706899] [2022-12-14 04:43:07,031 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 04:43:07,031 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 04:43:07,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 04:43:07,305 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 04:43:07,305 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 04:43:07,306 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1868706899] [2022-12-14 04:43:07,306 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1868706899] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 04:43:07,306 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1308193060] [2022-12-14 04:43:07,306 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 04:43:07,306 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 04:43:07,306 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 04:43:07,307 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 04:43:07,308 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-14 04:43:07,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 04:43:07,372 INFO L263 TraceCheckSpWp]: Trace formula consists of 221 conjuncts, 33 conjunts are in the unsatisfiable core [2022-12-14 04:43:07,378 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 04:43:07,643 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 04:43:07,643 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 04:43:08,063 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 04:43:08,063 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1308193060] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 04:43:08,063 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [993887642] [2022-12-14 04:43:08,082 INFO L159 IcfgInterpreter]: Started Sifa with 41 locations of interest [2022-12-14 04:43:08,082 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 04:43:08,085 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 04:43:08,091 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 04:43:08,091 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 04:43:09,211 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 114 for LOIs [2022-12-14 04:43:09,220 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 134 for LOIs [2022-12-14 04:43:09,661 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 129 for LOIs [2022-12-14 04:43:09,992 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 130 for LOIs [2022-12-14 04:43:10,180 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 43 for LOIs [2022-12-14 04:43:10,186 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 112 for LOIs [2022-12-14 04:43:10,195 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 04:43:20,400 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6276#(and (<= |timeShift___utac_acc__Specification1_spec__1_~tmp~4#1| 1) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~8#1|) (<= ~pumpRunning~0 1) (= ~head~0.offset 0) (<= 2 ~waterLevel~0) (= 1 ~systemActive~0) (= |old(~pumpRunning~0)| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~8#1|) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification1_spec__1_~tmp___0~0#1|) (<= 2 |old(~waterLevel~0)|) (= |timeShift___utac_acc__Specification1_spec__1_~tmp~4#1| ~methaneLevelCritical~0) (<= 0 ~pumpRunning~0) (= ~head~0.base 0) (= |#NULL.offset| 0) (not (= |timeShift___utac_acc__Specification1_spec__1_~tmp~4#1| 0)) (not (= |timeShift___utac_acc__Specification1_spec__1_~tmp___0~0#1| 0)) (<= 0 |timeShift___utac_acc__Specification1_spec__1_~tmp~4#1|) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-12-14 04:43:20,400 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 04:43:20,401 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 04:43:20,401 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 12, 12] total 33 [2022-12-14 04:43:20,401 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [5638171] [2022-12-14 04:43:20,401 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 04:43:20,402 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2022-12-14 04:43:20,402 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 04:43:20,403 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2022-12-14 04:43:20,405 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=438, Invalid=3468, Unknown=0, NotChecked=0, Total=3906 [2022-12-14 04:43:20,405 INFO L87 Difference]: Start difference. First operand 669 states and 834 transitions. Second operand has 33 states, 23 states have (on average 2.782608695652174) internal successors, (64), 24 states have internal predecessors, (64), 8 states have call successors, (16), 6 states have call predecessors, (16), 13 states have return successors, (16), 14 states have call predecessors, (16), 7 states have call successors, (16) [2022-12-14 04:43:25,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 04:43:25,220 INFO L93 Difference]: Finished difference Result 2495 states and 3460 transitions. [2022-12-14 04:43:25,220 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 108 states. [2022-12-14 04:43:25,220 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 23 states have (on average 2.782608695652174) internal successors, (64), 24 states have internal predecessors, (64), 8 states have call successors, (16), 6 states have call predecessors, (16), 13 states have return successors, (16), 14 states have call predecessors, (16), 7 states have call successors, (16) Word has length 42 [2022-12-14 04:43:25,221 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 04:43:25,226 INFO L225 Difference]: With dead ends: 2495 [2022-12-14 04:43:25,226 INFO L226 Difference]: Without dead ends: 1828 [2022-12-14 04:43:25,232 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 267 GetRequests, 96 SyntacticMatches, 6 SemanticMatches, 165 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10223 ImplicationChecksByTransitivity, 13.1s TimeCoverageRelationStatistics Valid=2574, Invalid=25148, Unknown=0, NotChecked=0, Total=27722 [2022-12-14 04:43:25,232 INFO L413 NwaCegarLoop]: 122 mSDtfsCounter, 1427 mSDsluCounter, 1290 mSDsCounter, 0 mSdLazyCounter, 4654 mSolverCounterSat, 1169 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1436 SdHoareTripleChecker+Valid, 1412 SdHoareTripleChecker+Invalid, 5823 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1169 IncrementalHoareTripleChecker+Valid, 4654 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2022-12-14 04:43:25,232 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1436 Valid, 1412 Invalid, 5823 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1169 Valid, 4654 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2022-12-14 04:43:25,234 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1828 states. [2022-12-14 04:43:25,302 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1828 to 1262. [2022-12-14 04:43:25,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1262 states, 878 states have (on average 1.2596810933940774) internal successors, (1106), 933 states have internal predecessors, (1106), 194 states have call successors, (194), 174 states have call predecessors, (194), 189 states have return successors, (262), 193 states have call predecessors, (262), 194 states have call successors, (262) [2022-12-14 04:43:25,307 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1262 states to 1262 states and 1562 transitions. [2022-12-14 04:43:25,307 INFO L78 Accepts]: Start accepts. Automaton has 1262 states and 1562 transitions. Word has length 42 [2022-12-14 04:43:25,307 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 04:43:25,307 INFO L495 AbstractCegarLoop]: Abstraction has 1262 states and 1562 transitions. [2022-12-14 04:43:25,308 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 23 states have (on average 2.782608695652174) internal successors, (64), 24 states have internal predecessors, (64), 8 states have call successors, (16), 6 states have call predecessors, (16), 13 states have return successors, (16), 14 states have call predecessors, (16), 7 states have call successors, (16) [2022-12-14 04:43:25,308 INFO L276 IsEmpty]: Start isEmpty. Operand 1262 states and 1562 transitions. [2022-12-14 04:43:25,309 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2022-12-14 04:43:25,310 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 04:43:25,310 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 04:43:25,315 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-14 04:43:25,510 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 04:43:25,512 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 04:43:25,513 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 04:43:25,513 INFO L85 PathProgramCache]: Analyzing trace with hash 459282060, now seen corresponding path program 1 times [2022-12-14 04:43:25,513 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 04:43:25,514 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1253980722] [2022-12-14 04:43:25,514 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 04:43:25,514 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 04:43:25,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 04:43:25,785 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 11 proven. 5 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-12-14 04:43:25,785 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 04:43:25,785 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1253980722] [2022-12-14 04:43:25,785 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1253980722] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 04:43:25,785 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1912816087] [2022-12-14 04:43:25,786 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 04:43:25,786 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 04:43:25,786 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 04:43:25,787 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 04:43:25,788 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-14 04:43:25,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 04:43:25,855 INFO L263 TraceCheckSpWp]: Trace formula consists of 314 conjuncts, 25 conjunts are in the unsatisfiable core [2022-12-14 04:43:25,857 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 04:43:25,930 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2022-12-14 04:43:25,930 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 04:43:25,930 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1912816087] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 04:43:25,930 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 04:43:25,930 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [13] total 18 [2022-12-14 04:43:25,931 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [842203357] [2022-12-14 04:43:25,931 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 04:43:25,931 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-12-14 04:43:25,933 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 04:43:25,933 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-12-14 04:43:25,934 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=269, Unknown=0, NotChecked=0, Total=306 [2022-12-14 04:43:25,934 INFO L87 Difference]: Start difference. First operand 1262 states and 1562 transitions. Second operand has 11 states, 8 states have (on average 5.625) internal successors, (45), 8 states have internal predecessors, (45), 2 states have call successors, (11), 2 states have call predecessors, (11), 5 states have return successors, (12), 5 states have call predecessors, (12), 2 states have call successors, (12) [2022-12-14 04:43:26,276 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 04:43:26,276 INFO L93 Difference]: Finished difference Result 3064 states and 3875 transitions. [2022-12-14 04:43:26,276 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-12-14 04:43:26,277 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 8 states have (on average 5.625) internal successors, (45), 8 states have internal predecessors, (45), 2 states have call successors, (11), 2 states have call predecessors, (11), 5 states have return successors, (12), 5 states have call predecessors, (12), 2 states have call successors, (12) Word has length 79 [2022-12-14 04:43:26,277 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 04:43:26,285 INFO L225 Difference]: With dead ends: 3064 [2022-12-14 04:43:26,285 INFO L226 Difference]: Without dead ends: 1729 [2022-12-14 04:43:26,288 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 102 GetRequests, 77 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 70 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=80, Invalid=622, Unknown=0, NotChecked=0, Total=702 [2022-12-14 04:43:26,289 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 62 mSDsluCounter, 388 mSDsCounter, 0 mSdLazyCounter, 394 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 461 SdHoareTripleChecker+Invalid, 401 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 394 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 04:43:26,289 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 461 Invalid, 401 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 394 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 04:43:26,291 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1729 states. [2022-12-14 04:43:26,382 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1729 to 1656. [2022-12-14 04:43:26,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1656 states, 1157 states have (on average 1.2454624027657735) internal successors, (1441), 1210 states have internal predecessors, (1441), 254 states have call successors, (254), 235 states have call predecessors, (254), 244 states have return successors, (333), 250 states have call predecessors, (333), 254 states have call successors, (333) [2022-12-14 04:43:26,391 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1656 states to 1656 states and 2028 transitions. [2022-12-14 04:43:26,391 INFO L78 Accepts]: Start accepts. Automaton has 1656 states and 2028 transitions. Word has length 79 [2022-12-14 04:43:26,392 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 04:43:26,392 INFO L495 AbstractCegarLoop]: Abstraction has 1656 states and 2028 transitions. [2022-12-14 04:43:26,392 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 8 states have (on average 5.625) internal successors, (45), 8 states have internal predecessors, (45), 2 states have call successors, (11), 2 states have call predecessors, (11), 5 states have return successors, (12), 5 states have call predecessors, (12), 2 states have call successors, (12) [2022-12-14 04:43:26,392 INFO L276 IsEmpty]: Start isEmpty. Operand 1656 states and 2028 transitions. [2022-12-14 04:43:26,395 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2022-12-14 04:43:26,395 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 04:43:26,395 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 04:43:26,400 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-14 04:43:26,596 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 04:43:26,596 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 04:43:26,596 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 04:43:26,597 INFO L85 PathProgramCache]: Analyzing trace with hash -694511407, now seen corresponding path program 1 times [2022-12-14 04:43:26,597 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 04:43:26,597 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [116513174] [2022-12-14 04:43:26,597 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 04:43:26,597 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 04:43:26,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 04:43:26,644 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 48 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-12-14 04:43:26,644 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 04:43:26,645 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [116513174] [2022-12-14 04:43:26,645 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [116513174] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 04:43:26,645 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 04:43:26,645 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 04:43:26,645 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [45419805] [2022-12-14 04:43:26,645 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 04:43:26,645 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 04:43:26,646 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 04:43:26,646 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 04:43:26,646 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 04:43:26,646 INFO L87 Difference]: Start difference. First operand 1656 states and 2028 transitions. Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 4 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 4 states have call predecessors, (12), 4 states have call successors, (12) [2022-12-14 04:43:26,784 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 04:43:26,784 INFO L93 Difference]: Finished difference Result 2368 states and 2890 transitions. [2022-12-14 04:43:26,784 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 04:43:26,785 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 4 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 4 states have call predecessors, (12), 4 states have call successors, (12) Word has length 90 [2022-12-14 04:43:26,785 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 04:43:26,785 INFO L225 Difference]: With dead ends: 2368 [2022-12-14 04:43:26,785 INFO L226 Difference]: Without dead ends: 0 [2022-12-14 04:43:26,788 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 04:43:26,789 INFO L413 NwaCegarLoop]: 78 mSDtfsCounter, 80 mSDsluCounter, 44 mSDsCounter, 0 mSdLazyCounter, 86 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 122 SdHoareTripleChecker+Invalid, 90 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 86 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 04:43:26,789 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [80 Valid, 122 Invalid, 90 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 86 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 04:43:26,789 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-12-14 04:43:26,789 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-12-14 04:43:26,789 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 04:43:26,789 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-12-14 04:43:26,790 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 90 [2022-12-14 04:43:26,790 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 04:43:26,790 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-12-14 04:43:26,790 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 4 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 4 states have call predecessors, (12), 4 states have call successors, (12) [2022-12-14 04:43:26,790 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-12-14 04:43:26,790 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-12-14 04:43:26,792 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-12-14 04:43:26,792 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-12-14 04:43:26,794 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-12-14 04:43:33,109 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 762 769) no Hoare annotation was computed. [2022-12-14 04:43:33,109 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 762 769) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse4 (and .cse1 (not (<= ~waterLevel~0 1)))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 2 ~waterLevel~0)) .cse1 .cse2 .cse3) (or .cse4 .cse0 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse2) (or .cse4 .cse0 (not (= ~methaneLevelCritical~0 0)) .cse3)))) [2022-12-14 04:43:33,109 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 678 684) no Hoare annotation was computed. [2022-12-14 04:43:33,110 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 678 684) the Hoare annotation is: true [2022-12-14 04:43:33,110 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 83 94) the Hoare annotation is: (let ((.cse6 (not (= 1 ~systemActive~0))) (.cse0 (= ~methaneLevelCritical~0 1)) (.cse1 (not (= |old(~methaneLevelCritical~0)| 1))) (.cse5 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse7 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse2 (not (<= 0 ~pumpRunning~0))) (.cse3 (not (<= ~pumpRunning~0 0))) (.cse4 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7) (or .cse6 .cse0 .cse1 .cse2 .cse3) (or .cse5 .cse7 .cse2 .cse3 .cse4))) [2022-12-14 04:43:33,110 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2022-12-14 04:43:33,110 INFO L895 garLoopResultBuilder]: At program point L726(line 726) the Hoare annotation is: (let ((.cse2 (not (<= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= 0 |old(~pumpRunning~0)|))) (.cse5 (not (= 0 ~systemActive~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0))) (or .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse2 .cse1 .cse4) (or .cse2 .cse1 .cse4 .cse5) (or .cse0 .cse3))) [2022-12-14 04:43:33,110 INFO L895 garLoopResultBuilder]: At program point L627(line 627) the Hoare annotation is: (let ((.cse13 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse5 (<= ~waterLevel~0 1)) (.cse4 (not (<= |old(~waterLevel~0)| 1))) (.cse10 (= |old(~pumpRunning~0)| 0)) (.cse15 (= ~methaneLevelCritical~0 0)) (.cse16 (= 1 ~systemActive~0)) (.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (= ~pumpRunning~0 0))) (let ((.cse2 (and .cse14 .cse12)) (.cse0 (not .cse16)) (.cse1 (not .cse15)) (.cse11 (and .cse4 .cse10)) (.cse3 (and .cse14 .cse15 .cse13 (or (not .cse12) .cse5) .cse16)) (.cse6 (not (<= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse8 (not (<= 0 |old(~pumpRunning~0)|))) (.cse9 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (and (<= 2 ~waterLevel~0) (= ~pumpRunning~0 1)) .cse3) (or .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (or .cse4 .cse5 .cse6 .cse1 .cse8 .cse9) (or (not .cse10) .cse0 .cse5 .cse11 .cse7) (or .cse12 .cse6 .cse1 .cse8 .cse9) (or .cse0 .cse2 .cse7 (and .cse12 .cse13)) (or .cse0 .cse5 .cse1 .cse11 .cse3) (or .cse12 .cse6 .cse7 .cse8 .cse9)))) [2022-12-14 04:43:33,110 INFO L895 garLoopResultBuilder]: At program point L722(line 722) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 1))) (.cse2 (not (<= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 0 |old(~pumpRunning~0)|))) (.cse4 (not (= 0 ~systemActive~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse2 .cse1 .cse3 .cse4) (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0))) (or .cse2 .cse5 .cse3 .cse4) (or .cse0 .cse5))) [2022-12-14 04:43:33,110 INFO L899 garLoopResultBuilder]: For program point L627-1(line 627) no Hoare annotation was computed. [2022-12-14 04:43:33,110 INFO L895 garLoopResultBuilder]: At program point L718(line 718) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 0 |old(~pumpRunning~0)|))) (.cse6 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 .cse3) (or .cse4 .cse3 .cse5 .cse6) (or .cse0 .cse1 .cse3) (or .cse1 .cse4 .cse2 .cse5) (or .cse4 .cse2 .cse5 .cse6))) [2022-12-14 04:43:33,110 INFO L899 garLoopResultBuilder]: For program point L718-1(line 718) no Hoare annotation was computed. [2022-12-14 04:43:33,111 INFO L895 garLoopResultBuilder]: At program point L731(line 731) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (<= ~waterLevel~0 1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse9 (and (not (<= |old(~waterLevel~0)| 1)) (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not (<= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 0 |old(~pumpRunning~0)|))) (.cse7 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 (and .cse2 .cse3)) (or .cse4 .cse5 .cse6 .cse7) (or .cse0 .cse8 .cse1 .cse9) (or .cse3 .cse0 .cse5) (or (and .cse2 .cse8) .cse0 .cse9 .cse5) (or .cse4 .cse1 .cse6 .cse7))) [2022-12-14 04:43:33,111 INFO L895 garLoopResultBuilder]: At program point L731-1(lines 712 736) the Hoare annotation is: (let ((.cse13 (= ~methaneLevelCritical~0 0)) (.cse12 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse9 (<= ~waterLevel~0 1)) (.cse8 (= |old(~pumpRunning~0)| 0)) (.cse15 (= 1 ~systemActive~0)) (.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (= ~pumpRunning~0 0))) (let ((.cse6 (and .cse14 .cse11)) (.cse1 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not .cse15)) (.cse10 (and (not (<= |old(~waterLevel~0)| 1)) .cse8)) (.cse7 (and .cse14 .cse13 .cse12 (or (not .cse11) .cse9) .cse15)) (.cse0 (not (<= |old(~pumpRunning~0)| 0))) (.cse5 (not .cse13)) (.cse2 (not (<= 0 |old(~pumpRunning~0)|))) (.cse3 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 (and (<= 2 ~waterLevel~0) (= ~pumpRunning~0 1)) .cse7) (or (not .cse8) .cse4 .cse9 .cse10 .cse1) (or .cse4 .cse6 .cse1 (and .cse11 .cse12)) (or .cse4 .cse9 .cse5 .cse10 .cse7) (or .cse0 .cse5 .cse2 .cse3)))) [2022-12-14 04:43:33,111 INFO L899 garLoopResultBuilder]: For program point L665-1(lines 665 671) no Hoare annotation was computed. [2022-12-14 04:43:33,111 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 654 677) the Hoare annotation is: (let ((.cse3 (not (<= |old(~waterLevel~0)| 1))) (.cse4 (<= ~waterLevel~0 1)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 1))) (.cse9 (and (<= ~pumpRunning~0 0) (<= 0 ~pumpRunning~0))) (.cse6 (not (<= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 0 |old(~pumpRunning~0)|))) (.cse8 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 (not (= |old(~pumpRunning~0)| 0)) .cse1 .cse4 .cse5) (or .cse3 .cse1 .cse4 .cse6 .cse2 .cse7) (or .cse3 .cse4 .cse6 .cse5 .cse7 .cse8) (or .cse9 .cse6 .cse5 .cse7 .cse8) (or .cse3 .cse4 .cse6 .cse2 .cse7 .cse8) (or .cse0 .cse1 .cse5) (or .cse9 .cse6 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse7 .cse8))) [2022-12-14 04:43:33,111 INFO L899 garLoopResultBuilder]: For program point L633(lines 633 639) no Hoare annotation was computed. [2022-12-14 04:43:33,111 INFO L895 garLoopResultBuilder]: At program point L629(lines 629 642) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (= ~pumpRunning~0 0)) (.cse16 (= |old(~pumpRunning~0)| 0)) (.cse15 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~4#1| 0))) (let ((.cse7 (not .cse15)) (.cse2 (not (<= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 0 |old(~pumpRunning~0)|))) (.cse5 (not (= 0 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 1))) (.cse13 (not .cse16)) (.cse12 (and .cse6 .cse15)) (.cse10 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (<= ~waterLevel~0 1)) (.cse8 (not (= 1 ~systemActive~0))) (.cse11 (not (= ~methaneLevelCritical~0 0))) (.cse14 (and .cse0 .cse16))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (and .cse6 .cse7) .cse2 .cse3 .cse4 .cse5) (or .cse8 (and .cse9 .cse6 .cse7) .cse3 (and .cse6 .cse10 .cse7)) (or .cse0 .cse1 .cse2 .cse11 .cse4 .cse5) (or .cse2 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse12 .cse4 .cse5) (or .cse13 .cse8 .cse1 .cse14 .cse3) (or .cse13 (and (<= 2 ~waterLevel~0) .cse15 (= ~pumpRunning~0 1)) .cse8 .cse11 .cse12) (or (and .cse9 (not .cse6) .cse10 .cse15) (and .cse9 .cse6 .cse1) .cse8 .cse11 .cse14)))) [2022-12-14 04:43:33,111 INFO L895 garLoopResultBuilder]: At program point L629-1(lines 621 645) the Hoare annotation is: (let ((.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse14 (<= ~waterLevel~0 1)) (.cse11 (= 1 ~systemActive~0)) (.cse13 (not (<= |old(~waterLevel~0)| 1))) (.cse19 (= |old(~pumpRunning~0)| 0)) (.cse20 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~4#1| 0))) (let ((.cse1 (<= |timeShift___utac_acc__Specification1_spec__1_~tmp___0~0#1| 0)) (.cse2 (< 0 (+ |timeShift___utac_acc__Specification1_spec__1_~tmp___0~0#1| 1))) (.cse4 (not .cse20)) (.cse18 (and .cse13 .cse19)) (.cse6 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (<= |old(~pumpRunning~0)| 0))) (.cse15 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse7 (not (<= 0 |old(~pumpRunning~0)|))) (.cse8 (not (= 0 ~systemActive~0))) (.cse9 (not .cse11)) (.cse16 (and .cse12 .cse10 (or (not (= ~pumpRunning~0 0)) .cse14) .cse20 .cse11)) (.cse17 (not (= ~methaneLevelCritical~0 0))) (.cse0 (<= ~pumpRunning~0 0)) (.cse3 (<= 0 ~pumpRunning~0))) (and (or (and .cse0 .cse1 .cse2 .cse3 .cse4) .cse5 .cse6 .cse7 .cse8) (or .cse9 (and .cse0 .cse10 .cse11 .cse1 .cse2 .cse3 .cse4) (and .cse12 .cse0 .cse11 .cse1 .cse2 .cse3 .cse4) .cse6) (or .cse13 .cse14 .cse5 .cse15 .cse7 .cse8) (or .cse13 .cse14 .cse5 .cse6 .cse7 .cse8) (or .cse9 .cse14 .cse16 .cse17 .cse18) (or (not .cse19) .cse9 .cse14 .cse18 .cse6) (or (and .cse0 .cse20 .cse3) .cse5 .cse15 .cse7 .cse8) (or (and (<= 2 ~waterLevel~0) .cse20 (= ~pumpRunning~0 1)) .cse9 .cse16 .cse17 (and .cse12 .cse0 .cse20 .cse11 .cse3))))) [2022-12-14 04:43:33,112 INFO L899 garLoopResultBuilder]: For program point L658-1(lines 657 676) no Hoare annotation was computed. [2022-12-14 04:43:33,112 INFO L899 garLoopResultBuilder]: For program point L720(lines 720 728) no Hoare annotation was computed. [2022-12-14 04:43:33,112 INFO L899 garLoopResultBuilder]: For program point L716(lines 716 733) no Hoare annotation was computed. [2022-12-14 04:43:33,112 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 654 677) no Hoare annotation was computed. [2022-12-14 04:43:33,112 INFO L895 garLoopResultBuilder]: At program point L873(line 873) the Hoare annotation is: (let ((.cse0 (not (<= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 0 |old(~pumpRunning~0)|))) (.cse3 (not (= 0 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse2 .cse3) (or .cse5 .cse4) (or .cse5 .cse1))) [2022-12-14 04:43:33,112 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 873) no Hoare annotation was computed. [2022-12-14 04:43:33,112 INFO L902 garLoopResultBuilder]: At program point L163-2(lines 163 177) the Hoare annotation is: true [2022-12-14 04:43:33,112 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 153 182) no Hoare annotation was computed. [2022-12-14 04:43:33,112 INFO L902 garLoopResultBuilder]: At program point L159(line 159) the Hoare annotation is: true [2022-12-14 04:43:33,112 INFO L899 garLoopResultBuilder]: For program point L159-1(line 159) no Hoare annotation was computed. [2022-12-14 04:43:33,112 INFO L902 garLoopResultBuilder]: At program point L178(lines 153 182) the Hoare annotation is: true [2022-12-14 04:43:33,112 INFO L899 garLoopResultBuilder]: For program point L174(line 174) no Hoare annotation was computed. [2022-12-14 04:43:33,112 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 153 182) the Hoare annotation is: true [2022-12-14 04:43:33,112 INFO L899 garLoopResultBuilder]: For program point L167(lines 167 171) no Hoare annotation was computed. [2022-12-14 04:43:33,112 INFO L902 garLoopResultBuilder]: At program point L167-1(lines 167 171) the Hoare annotation is: true [2022-12-14 04:43:33,112 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 95 103) the Hoare annotation is: true [2022-12-14 04:43:33,112 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 95 103) no Hoare annotation was computed. [2022-12-14 04:43:33,113 INFO L899 garLoopResultBuilder]: For program point L898-1(lines 898 904) no Hoare annotation was computed. [2022-12-14 04:43:33,113 INFO L899 garLoopResultBuilder]: For program point L849(lines 849 855) no Hoare annotation was computed. [2022-12-14 04:43:33,113 INFO L895 garLoopResultBuilder]: At program point L849-1(lines 849 855) the Hoare annotation is: (let ((.cse0 (<= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= 0 ~pumpRunning~0))) (or (and .cse0 (= ~methaneLevelCritical~0 1) .cse1 .cse2) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2022-12-14 04:43:33,113 INFO L895 garLoopResultBuilder]: At program point L239(lines 239 246) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-14 04:43:33,113 INFO L902 garLoopResultBuilder]: At program point L941(lines 878 945) the Hoare annotation is: true [2022-12-14 04:43:33,113 INFO L902 garLoopResultBuilder]: At program point L239-2(lines 239 246) the Hoare annotation is: true [2022-12-14 04:43:33,113 INFO L899 garLoopResultBuilder]: For program point L908(lines 908 914) no Hoare annotation was computed. [2022-12-14 04:43:33,113 INFO L899 garLoopResultBuilder]: For program point L908-1(lines 908 914) no Hoare annotation was computed. [2022-12-14 04:43:33,113 INFO L895 garLoopResultBuilder]: At program point L900(line 900) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 1)) (.cse1 (= 1 ~systemActive~0)) (.cse0 (<= ~pumpRunning~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= 0 ~pumpRunning~0)) (.cse5 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse3) (and .cse0 .cse6 .cse3 .cse4 .cse5))) [2022-12-14 04:43:33,113 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-12-14 04:43:33,113 INFO L895 garLoopResultBuilder]: At program point L851(line 851) the Hoare annotation is: (let ((.cse3 (not (= ~pumpRunning~0 0)))) (let ((.cse1 (= ~methaneLevelCritical~0 1)) (.cse0 (or .cse3 (<= ~waterLevel~0 1))) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 (= 1 ~systemActive~0) .cse1 .cse2 (or .cse3 (not (= |isMethaneAlarm_#res| 0))) (or .cse3 (not (= |isMethaneLevelCritical_#res| 0))) (or .cse3 (not (= |isMethaneAlarm_#t~ret38| 0)))) (and .cse3 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse4) (and (= ~methaneLevelCritical~0 0) .cse0 .cse2 .cse4)))) [2022-12-14 04:43:33,113 INFO L895 garLoopResultBuilder]: At program point L938(lines 887 939) the Hoare annotation is: false [2022-12-14 04:43:33,113 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(line -1) the Hoare annotation is: true [2022-12-14 04:43:33,113 INFO L899 garLoopResultBuilder]: For program point L926(lines 926 932) no Hoare annotation was computed. [2022-12-14 04:43:33,113 INFO L895 garLoopResultBuilder]: At program point L926-2(lines 918 933) the Hoare annotation is: (let ((.cse6 (= 1 ~systemActive~0)) (.cse1 (= ~methaneLevelCritical~0 1)) (.cse0 (<= ~pumpRunning~0 0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 0 ~pumpRunning~0)) (.cse4 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse2) (and .cse6 .cse1 .cse2) (and .cse0 .cse5 .cse2 .cse3 .cse4))) [2022-12-14 04:43:33,113 INFO L899 garLoopResultBuilder]: For program point L889(lines 888 937) no Hoare annotation was computed. [2022-12-14 04:43:33,114 INFO L895 garLoopResultBuilder]: At program point L918(lines 918 933) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse4 (= 1 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse1 .cse4 .cse2) (and .cse4 .cse5 .cse2) (and .cse0 .cse5 .cse2 .cse3))) [2022-12-14 04:43:33,114 INFO L895 garLoopResultBuilder]: At program point L910(line 910) the Hoare annotation is: (let ((.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= 0 ~systemActive~0))) (or (and (<= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 0 ~pumpRunning~0)) (and .cse3 .cse4 .cse2 .cse5) (and .cse4 .cse0 .cse2) (and .cse3 .cse1 .cse2 .cse5))) [2022-12-14 04:43:33,114 INFO L895 garLoopResultBuilder]: At program point L935(lines 888 937) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse4 (= 1 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2) (and .cse1 .cse4 .cse2) (and .cse0 .cse5 .cse2 .cse3))) [2022-12-14 04:43:33,114 INFO L899 garLoopResultBuilder]: For program point L898(lines 898 904) no Hoare annotation was computed. [2022-12-14 04:43:33,114 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2022-12-14 04:43:33,114 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 71 82) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (<= 2 ~waterLevel~0) .cse1 (not (= ~pumpRunning~0 1)) (not (<= 2 |old(~waterLevel~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) (not (= ~pumpRunning~0 0)) .cse0 (<= ~waterLevel~0 1) .cse1))) [2022-12-14 04:43:33,114 INFO L895 garLoopResultBuilder]: At program point L700(line 700) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (and (= ~pumpRunning~0 0) (or (= |processEnvironment__wrappee__methaneQuery_~tmp~5#1| 0) (<= 2 ~waterLevel~0))))) (and (or .cse0 (= |old(~pumpRunning~0)| 0) .cse1) (or .cse0 .cse1 .cse2) (or .cse0 (not (<= |old(~pumpRunning~0)| 0)) .cse2 (not (= ~methaneLevelCritical~0 1)) (not (<= 0 |old(~pumpRunning~0)|))))) [2022-12-14 04:43:33,114 INFO L899 garLoopResultBuilder]: For program point L694(lines 694 702) no Hoare annotation was computed. [2022-12-14 04:43:33,114 INFO L895 garLoopResultBuilder]: At program point L690(lines 690 707) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (= ~pumpRunning~0 0) .cse0 (not (<= |old(~pumpRunning~0)| 0)) (not (= ~methaneLevelCritical~0 1)) (not (<= 0 |old(~pumpRunning~0)|))))) [2022-12-14 04:43:33,114 INFO L895 garLoopResultBuilder]: At program point L750(line 750) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (not (<= |old(~pumpRunning~0)| 0)) (and .cse1 (<= 2 ~waterLevel~0)) (not (= ~methaneLevelCritical~0 1)) (not (<= 0 |old(~pumpRunning~0)|))) (or (and (= |old(~pumpRunning~0)| 0) (not (<= ~waterLevel~0 1))) .cse0 .cse2) (or .cse1 .cse0 .cse2))) [2022-12-14 04:43:33,114 INFO L895 garLoopResultBuilder]: At program point L750-1(line 750) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |processEnvironment__wrappee__methaneQuery_activatePump_#t~ret37#1| ~methaneLevelCritical~0))) (and (or (and (= |old(~pumpRunning~0)| 0) (not (<= ~waterLevel~0 1))) .cse0 .cse1) (or .cse0 .cse1 (and .cse2 .cse3)) (or .cse0 (not (<= |old(~pumpRunning~0)| 0)) (and .cse2 .cse3 (<= 2 ~waterLevel~0)) (not (= ~methaneLevelCritical~0 1)) (not (<= 0 |old(~pumpRunning~0)|))))) [2022-12-14 04:43:33,114 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 686 710) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (= ~pumpRunning~0 0) .cse0 (not (<= |old(~pumpRunning~0)| 0)) (not (= ~methaneLevelCritical~0 1)) (not (<= 0 |old(~pumpRunning~0)|))))) [2022-12-14 04:43:33,114 INFO L895 garLoopResultBuilder]: At program point L705(line 705) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= 0 |old(~pumpRunning~0)|)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse0 .cse2 (not (= ~methaneLevelCritical~0 1)) .cse3) (or .cse0 .cse2 .cse1 .cse3))) [2022-12-14 04:43:33,115 INFO L899 garLoopResultBuilder]: For program point L705-1(lines 686 710) no Hoare annotation was computed. [2022-12-14 04:43:33,115 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 686 710) no Hoare annotation was computed. [2022-12-14 04:43:33,115 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 770 780) no Hoare annotation was computed. [2022-12-14 04:43:33,115 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 770 780) the Hoare annotation is: true [2022-12-14 04:43:33,115 INFO L902 garLoopResultBuilder]: At program point L775(line 775) the Hoare annotation is: true [2022-12-14 04:43:33,115 INFO L899 garLoopResultBuilder]: For program point L775-1(line 775) no Hoare annotation was computed. [2022-12-14 04:43:33,117 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 04:43:33,118 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-14 04:43:33,135 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 14.12 04:43:33 BoogieIcfgContainer [2022-12-14 04:43:33,135 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-14 04:43:33,135 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-14 04:43:33,135 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-14 04:43:33,136 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-14 04:43:33,136 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 04:43:05" (3/4) ... [2022-12-14 04:43:33,138 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-12-14 04:43:33,142 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-12-14 04:43:33,142 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-12-14 04:43:33,142 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-12-14 04:43:33,142 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-12-14 04:43:33,142 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-12-14 04:43:33,142 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-12-14 04:43:33,143 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-12-14 04:43:33,143 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-12-14 04:43:33,143 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-12-14 04:43:33,147 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 45 nodes and edges [2022-12-14 04:43:33,147 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2022-12-14 04:43:33,147 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-12-14 04:43:33,147 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-14 04:43:33,148 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-14 04:43:33,165 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || waterLevel <= 1) || !(methaneLevelCritical == 1))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == 0)) || !(0 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 1) || waterLevel <= 1) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == 1)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive))) && (((((pumpRunning <= 0 && 0 <= pumpRunning) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == 1)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive))) && (((((!(\old(waterLevel) <= 1) || waterLevel <= 1) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == 0)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive))) && ((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((((pumpRunning <= 0 && 0 <= pumpRunning) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == systemActive)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive)) [2022-12-14 04:43:33,165 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) <= 0) || !(methaneLevelCritical == 1)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive)) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || (2 <= waterLevel && pumpRunning == 1)) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && (!(pumpRunning == 0) || waterLevel <= 1)) && 1 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || waterLevel <= 1) || (!(\old(waterLevel) <= 1) && \old(pumpRunning) == 0)) || !(methaneLevelCritical == 1))) && (((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(methaneLevelCritical == 1)) || (pumpRunning == 0 && tmp == methaneLevelCritical))) && ((((!(1 == systemActive) || waterLevel <= 1) || !(methaneLevelCritical == 0)) || (!(\old(waterLevel) <= 1) && \old(pumpRunning) == 0)) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && (!(pumpRunning == 0) || waterLevel <= 1)) && 1 == systemActive))) && (((!(\old(pumpRunning) <= 0) || !(methaneLevelCritical == 0)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive)) [2022-12-14 04:43:33,165 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((((pumpRunning == 0 || !(1 == systemActive)) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == 1)) || !(0 <= \old(pumpRunning))) [2022-12-14 04:43:33,165 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(waterLevel) <= 1) || waterLevel <= 1) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == 1)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive)) && (((((pumpRunning == 0 && !(tmp == 0)) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == 1)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive))) && (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(tmp == 0))) || !(methaneLevelCritical == 1)) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && !(tmp == 0)))) && (((((!(\old(waterLevel) <= 1) || waterLevel <= 1) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == 0)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive))) && ((((!(\old(pumpRunning) <= 0) || !(methaneLevelCritical == systemActive)) || (pumpRunning == 0 && tmp == 0)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || waterLevel <= 1) || (!(\old(waterLevel) <= 1) && \old(pumpRunning) == 0)) || !(methaneLevelCritical == 1))) && ((((!(\old(pumpRunning) == 0) || ((2 <= waterLevel && tmp == 0) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && tmp == 0))) && (((((((pumpRunning == \old(pumpRunning) && !(pumpRunning == 0)) && tmp == methaneLevelCritical) && tmp == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (!(\old(waterLevel) <= 1) && \old(pumpRunning) == 0)) [2022-12-14 04:43:33,166 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((pumpRunning <= 0 && tmp___0 <= 0) && 0 < tmp___0 + 1) && 0 <= pumpRunning) && !(tmp == 0)) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == 1)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive)) && (((!(1 == systemActive) || ((((((pumpRunning <= 0 && tmp == methaneLevelCritical) && 1 == systemActive) && tmp___0 <= 0) && 0 < tmp___0 + 1) && 0 <= pumpRunning) && !(tmp == 0))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning <= 0) && 1 == systemActive) && tmp___0 <= 0) && 0 < tmp___0 + 1) && 0 <= pumpRunning) && !(tmp == 0))) || !(methaneLevelCritical == 1))) && (((((!(\old(waterLevel) <= 1) || waterLevel <= 1) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == systemActive)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive))) && (((((!(\old(waterLevel) <= 1) || waterLevel <= 1) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == 1)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive))) && ((((!(1 == systemActive) || waterLevel <= 1) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && (!(pumpRunning == 0) || waterLevel <= 1)) && tmp == 0) && 1 == systemActive)) || !(methaneLevelCritical == 0)) || (!(\old(waterLevel) <= 1) && \old(pumpRunning) == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || waterLevel <= 1) || (!(\old(waterLevel) <= 1) && \old(pumpRunning) == 0)) || !(methaneLevelCritical == 1))) && ((((((pumpRunning <= 0 && tmp == 0) && 0 <= pumpRunning) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == systemActive)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive))) && ((((((2 <= waterLevel && tmp == 0) && pumpRunning == 1) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && (!(pumpRunning == 0) || waterLevel <= 1)) && tmp == 0) && 1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning <= 0) && tmp == 0) && 1 == systemActive) && 0 <= pumpRunning)) [2022-12-14 04:43:33,166 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((\old(pumpRunning) == 0 && !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && aux-isMethaneAlarm()-aux == methaneLevelCritical))) && ((((!(1 == systemActive) || !(\old(pumpRunning) <= 0)) || ((pumpRunning == 0 && aux-isMethaneAlarm()-aux == methaneLevelCritical) && 2 <= waterLevel)) || !(methaneLevelCritical == 1)) || !(0 <= \old(pumpRunning))) [2022-12-14 04:43:33,166 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) <= 0) || !(methaneLevelCritical == 1)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive)) && (((!(\old(pumpRunning) <= 0) || !(methaneLevelCritical == 0)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive))) && (!(1 == systemActive) || !(methaneLevelCritical == 0))) && (!(1 == systemActive) || !(methaneLevelCritical == 1)) [2022-12-14 04:43:33,180 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/witness.graphml [2022-12-14 04:43:33,180 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-14 04:43:33,180 INFO L158 Benchmark]: Toolchain (without parser) took 28665.31ms. Allocated memory was 117.4MB in the beginning and 199.2MB in the end (delta: 81.8MB). Free memory was 75.7MB in the beginning and 75.9MB in the end (delta: -194.6kB). Peak memory consumption was 83.7MB. Max. memory is 16.1GB. [2022-12-14 04:43:33,180 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 117.4MB. Free memory is still 83.1MB. There was no memory consumed. Max. memory is 16.1GB. [2022-12-14 04:43:33,180 INFO L158 Benchmark]: CACSL2BoogieTranslator took 346.15ms. Allocated memory is still 117.4MB. Free memory was 75.4MB in the beginning and 56.9MB in the end (delta: 18.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-12-14 04:43:33,181 INFO L158 Benchmark]: Boogie Procedure Inliner took 40.09ms. Allocated memory is still 117.4MB. Free memory was 56.9MB in the beginning and 54.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-14 04:43:33,181 INFO L158 Benchmark]: Boogie Preprocessor took 24.50ms. Allocated memory is still 117.4MB. Free memory was 54.8MB in the beginning and 53.0MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-14 04:43:33,181 INFO L158 Benchmark]: RCFGBuilder took 386.43ms. Allocated memory was 117.4MB in the beginning and 165.7MB in the end (delta: 48.2MB). Free memory was 53.0MB in the beginning and 127.0MB in the end (delta: -74.0MB). Peak memory consumption was 20.2MB. Max. memory is 16.1GB. [2022-12-14 04:43:33,181 INFO L158 Benchmark]: TraceAbstraction took 27818.59ms. Allocated memory was 165.7MB in the beginning and 199.2MB in the end (delta: 33.6MB). Free memory was 126.1MB in the beginning and 81.1MB in the end (delta: 45.0MB). Peak memory consumption was 127.6MB. Max. memory is 16.1GB. [2022-12-14 04:43:33,181 INFO L158 Benchmark]: Witness Printer took 44.29ms. Allocated memory is still 199.2MB. Free memory was 81.1MB in the beginning and 75.9MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-12-14 04:43:33,182 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 117.4MB. Free memory is still 83.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 346.15ms. Allocated memory is still 117.4MB. Free memory was 75.4MB in the beginning and 56.9MB in the end (delta: 18.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 40.09ms. Allocated memory is still 117.4MB. Free memory was 56.9MB in the beginning and 54.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 24.50ms. Allocated memory is still 117.4MB. Free memory was 54.8MB in the beginning and 53.0MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 386.43ms. Allocated memory was 117.4MB in the beginning and 165.7MB in the end (delta: 48.2MB). Free memory was 53.0MB in the beginning and 127.0MB in the end (delta: -74.0MB). Peak memory consumption was 20.2MB. Max. memory is 16.1GB. * TraceAbstraction took 27818.59ms. Allocated memory was 165.7MB in the beginning and 199.2MB in the end (delta: 33.6MB). Free memory was 126.1MB in the beginning and 81.1MB in the end (delta: 45.0MB). Peak memory consumption was 127.6MB. Max. memory is 16.1GB. * Witness Printer took 44.29ms. Allocated memory is still 199.2MB. Free memory was 81.1MB in the beginning and 75.9MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 873]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 71 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 27.8s, OverallIterations: 9, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 6.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1962 SdHoareTripleChecker+Valid, 2.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1937 mSDsluCounter, 3073 SdHoareTripleChecker+Invalid, 2.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2348 mSDsCounter, 1223 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 5629 IncrementalHoareTripleChecker+Invalid, 6852 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1223 mSolverCounterUnsat, 725 mSDtfsCounter, 5629 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 406 GetRequests, 189 SyntacticMatches, 6 SemanticMatches, 211 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10303 ImplicationChecksByTransitivity, 13.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1656occurred in iteration=8, InterpolantAutomatonStates: 161, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 9 MinimizatonAttempts, 744 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 40 LocationsWithAnnotation, 2746 PreInvPairs, 3095 NumberOfFragments, 2327 HoareAnnotationTreeSize, 2746 FomulaSimplifications, 7924 FormulaSimplificationTreeSizeReduction, 0.8s HoareSimplificationTime, 40 FomulaSimplificationsInter, 44409 FormulaSimplificationTreeSizeReductionInter, 5.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.8s InterpolantComputationTime, 473 NumberOfCodeBlocks, 473 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 503 ConstructedInterpolants, 0 QuantifiedInterpolants, 1360 SizeOfPredicates, 16 NumberOfNonLiveVariables, 535 ConjunctsInSsa, 58 ConjunctsInUnsatCore, 12 InterpolantComputations, 8 PerfectInterpolantSequences, 140/149 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 888]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methaneLevelCritical == 0) && splverifierCounter == 0) && 0 == systemActive) || (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0)) || ((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && methaneLevelCritical == 1) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 878]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 849]: Loop Invariant Derived loop invariant: (((pumpRunning <= 0 && methaneLevelCritical == 1) && splverifierCounter == 0) && 0 <= pumpRunning) || (((pumpRunning <= 0 && methaneLevelCritical == 0) && splverifierCounter == 0) && 0 <= pumpRunning) - InvariantResult [Line: 750]: Loop Invariant Derived loop invariant: ((((\old(pumpRunning) == 0 && !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && aux-isMethaneAlarm()-aux == methaneLevelCritical))) && ((((!(1 == systemActive) || !(\old(pumpRunning) <= 0)) || ((pumpRunning == 0 && aux-isMethaneAlarm()-aux == methaneLevelCritical) && 2 <= waterLevel)) || !(methaneLevelCritical == 1)) || !(0 <= \old(pumpRunning))) - InvariantResult [Line: 621]: Loop Invariant Derived loop invariant: ((((((((((((((pumpRunning <= 0 && tmp___0 <= 0) && 0 < tmp___0 + 1) && 0 <= pumpRunning) && !(tmp == 0)) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == 1)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive)) && (((!(1 == systemActive) || ((((((pumpRunning <= 0 && tmp == methaneLevelCritical) && 1 == systemActive) && tmp___0 <= 0) && 0 < tmp___0 + 1) && 0 <= pumpRunning) && !(tmp == 0))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning <= 0) && 1 == systemActive) && tmp___0 <= 0) && 0 < tmp___0 + 1) && 0 <= pumpRunning) && !(tmp == 0))) || !(methaneLevelCritical == 1))) && (((((!(\old(waterLevel) <= 1) || waterLevel <= 1) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == systemActive)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive))) && (((((!(\old(waterLevel) <= 1) || waterLevel <= 1) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == 1)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive))) && ((((!(1 == systemActive) || waterLevel <= 1) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && (!(pumpRunning == 0) || waterLevel <= 1)) && tmp == 0) && 1 == systemActive)) || !(methaneLevelCritical == 0)) || (!(\old(waterLevel) <= 1) && \old(pumpRunning) == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || waterLevel <= 1) || (!(\old(waterLevel) <= 1) && \old(pumpRunning) == 0)) || !(methaneLevelCritical == 1))) && ((((((pumpRunning <= 0 && tmp == 0) && 0 <= pumpRunning) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == systemActive)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive))) && ((((((2 <= waterLevel && tmp == 0) && pumpRunning == 1) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && (!(pumpRunning == 0) || waterLevel <= 1)) && tmp == 0) && 1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning <= 0) && tmp == 0) && 1 == systemActive) && 0 <= pumpRunning)) - InvariantResult [Line: 873]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) <= 0) || !(methaneLevelCritical == 1)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive)) && (((!(\old(pumpRunning) <= 0) || !(methaneLevelCritical == 0)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive))) && (!(1 == systemActive) || !(methaneLevelCritical == 0))) && (!(1 == systemActive) || !(methaneLevelCritical == 1)) - InvariantResult [Line: 239]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 153]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 690]: Loop Invariant Derived loop invariant: ((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((((pumpRunning == 0 || !(1 == systemActive)) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == 1)) || !(0 <= \old(pumpRunning))) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 239]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 887]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 918]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methaneLevelCritical == 0) && splverifierCounter == 0) && 0 == systemActive) || ((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0)) || ((1 == systemActive && methaneLevelCritical == 1) && splverifierCounter == 0)) || (((pumpRunning == 0 && methaneLevelCritical == 1) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 629]: Loop Invariant Derived loop invariant: (((((((((((!(\old(waterLevel) <= 1) || waterLevel <= 1) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == 1)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive)) && (((((pumpRunning == 0 && !(tmp == 0)) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == 1)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive))) && (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(tmp == 0))) || !(methaneLevelCritical == 1)) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && !(tmp == 0)))) && (((((!(\old(waterLevel) <= 1) || waterLevel <= 1) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == 0)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive))) && ((((!(\old(pumpRunning) <= 0) || !(methaneLevelCritical == systemActive)) || (pumpRunning == 0 && tmp == 0)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || waterLevel <= 1) || (!(\old(waterLevel) <= 1) && \old(pumpRunning) == 0)) || !(methaneLevelCritical == 1))) && ((((!(\old(pumpRunning) == 0) || ((2 <= waterLevel && tmp == 0) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && tmp == 0))) && (((((((pumpRunning == \old(pumpRunning) && !(pumpRunning == 0)) && tmp == methaneLevelCritical) && tmp == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (!(\old(waterLevel) <= 1) && \old(pumpRunning) == 0)) - InvariantResult [Line: 654]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || waterLevel <= 1) || !(methaneLevelCritical == 1))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == 0)) || !(0 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 1) || waterLevel <= 1) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == 1)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive))) && (((((pumpRunning <= 0 && 0 <= pumpRunning) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == 1)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive))) && (((((!(\old(waterLevel) <= 1) || waterLevel <= 1) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == 0)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive))) && ((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((((pumpRunning <= 0 && 0 <= pumpRunning) || !(\old(pumpRunning) <= 0)) || !(methaneLevelCritical == systemActive)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive)) - InvariantResult [Line: 712]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) <= 0) || !(methaneLevelCritical == 1)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive)) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || (2 <= waterLevel && pumpRunning == 1)) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && (!(pumpRunning == 0) || waterLevel <= 1)) && 1 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || waterLevel <= 1) || (!(\old(waterLevel) <= 1) && \old(pumpRunning) == 0)) || !(methaneLevelCritical == 1))) && (((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(methaneLevelCritical == 1)) || (pumpRunning == 0 && tmp == methaneLevelCritical))) && ((((!(1 == systemActive) || waterLevel <= 1) || !(methaneLevelCritical == 0)) || (!(\old(waterLevel) <= 1) && \old(pumpRunning) == 0)) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && (!(pumpRunning == 0) || waterLevel <= 1)) && 1 == systemActive))) && (((!(\old(pumpRunning) <= 0) || !(methaneLevelCritical == 0)) || !(0 <= \old(pumpRunning))) || !(0 == systemActive)) RESULT: Ultimate proved your program to be correct! [2022-12-14 04:43:33,201 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d203585b-fe0e-405b-9c06-a31cdedadcd0/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE