./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 242c9b24ea8c293cca4af0028144a97f9048375edcd4379fb21e62564563d3d5 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 10:31:42,264 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 10:31:42,265 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 10:31:42,278 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 10:31:42,278 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 10:31:42,279 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 10:31:42,279 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 10:31:42,280 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 10:31:42,281 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 10:31:42,282 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 10:31:42,283 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 10:31:42,283 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 10:31:42,284 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 10:31:42,284 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 10:31:42,285 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 10:31:42,286 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 10:31:42,286 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 10:31:42,287 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 10:31:42,288 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 10:31:42,289 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 10:31:42,290 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 10:31:42,291 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 10:31:42,292 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 10:31:42,292 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 10:31:42,294 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 10:31:42,295 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 10:31:42,295 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 10:31:42,295 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 10:31:42,296 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 10:31:42,296 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 10:31:42,296 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 10:31:42,297 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 10:31:42,297 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 10:31:42,298 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 10:31:42,299 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 10:31:42,299 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 10:31:42,299 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 10:31:42,300 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 10:31:42,300 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 10:31:42,300 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 10:31:42,301 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 10:31:42,302 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-12-14 10:31:42,315 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 10:31:42,316 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 10:31:42,316 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 10:31:42,316 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 10:31:42,326 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 10:31:42,326 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 10:31:42,326 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 10:31:42,327 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 10:31:42,327 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 10:31:42,327 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-12-14 10:31:42,327 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 10:31:42,327 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 10:31:42,328 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-12-14 10:31:42,328 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-12-14 10:31:42,328 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 10:31:42,328 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-12-14 10:31:42,328 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-12-14 10:31:42,329 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-12-14 10:31:42,329 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 10:31:42,329 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 10:31:42,330 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 10:31:42,330 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 10:31:42,330 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 10:31:42,330 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-12-14 10:31:42,330 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 10:31:42,331 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-12-14 10:31:42,331 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 10:31:42,331 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-14 10:31:42,331 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 10:31:42,331 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-12-14 10:31:42,331 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 10:31:42,332 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 10:31:42,332 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 10:31:42,332 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 10:31:42,332 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-12-14 10:31:42,332 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 10:31:42,333 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-12-14 10:31:42,333 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-12-14 10:31:42,333 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-14 10:31:42,333 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-12-14 10:31:42,333 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 10:31:42,334 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 242c9b24ea8c293cca4af0028144a97f9048375edcd4379fb21e62564563d3d5 [2022-12-14 10:31:42,508 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 10:31:42,526 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 10:31:42,528 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 10:31:42,529 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 10:31:42,530 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 10:31:42,531 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c [2022-12-14 10:31:45,078 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 10:31:45,268 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 10:31:45,268 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c [2022-12-14 10:31:45,277 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/data/7d17cd3cb/0322c6ea13594cd7860f0eb4e30fbf7f/FLAGa8bd21917 [2022-12-14 10:31:45,289 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/data/7d17cd3cb/0322c6ea13594cd7860f0eb4e30fbf7f [2022-12-14 10:31:45,291 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 10:31:45,292 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 10:31:45,293 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 10:31:45,293 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 10:31:45,296 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 10:31:45,297 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 10:31:45" (1/1) ... [2022-12-14 10:31:45,298 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@746e5e96 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 10:31:45, skipping insertion in model container [2022-12-14 10:31:45,298 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 10:31:45" (1/1) ... [2022-12-14 10:31:45,305 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 10:31:45,341 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 10:31:45,481 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c[9329,9342] [2022-12-14 10:31:45,515 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 10:31:45,524 INFO L203 MainTranslator]: Completed pre-run [2022-12-14 10:31:45,549 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c[9329,9342] [2022-12-14 10:31:45,571 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 10:31:45,583 INFO L208 MainTranslator]: Completed translation [2022-12-14 10:31:45,583 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 10:31:45 WrapperNode [2022-12-14 10:31:45,583 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 10:31:45,584 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-14 10:31:45,584 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-14 10:31:45,584 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-14 10:31:45,590 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 10:31:45" (1/1) ... [2022-12-14 10:31:45,599 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 10:31:45" (1/1) ... [2022-12-14 10:31:45,616 INFO L138 Inliner]: procedures = 57, calls = 101, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 206 [2022-12-14 10:31:45,616 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-14 10:31:45,617 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-14 10:31:45,617 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-14 10:31:45,617 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-14 10:31:45,624 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 10:31:45" (1/1) ... [2022-12-14 10:31:45,624 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 10:31:45" (1/1) ... [2022-12-14 10:31:45,626 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 10:31:45" (1/1) ... [2022-12-14 10:31:45,626 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 10:31:45" (1/1) ... [2022-12-14 10:31:45,630 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 10:31:45" (1/1) ... [2022-12-14 10:31:45,633 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 10:31:45" (1/1) ... [2022-12-14 10:31:45,634 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 10:31:45" (1/1) ... [2022-12-14 10:31:45,635 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 10:31:45" (1/1) ... [2022-12-14 10:31:45,637 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-14 10:31:45,637 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-14 10:31:45,637 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-14 10:31:45,638 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-14 10:31:45,638 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 10:31:45" (1/1) ... [2022-12-14 10:31:45,643 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 10:31:45,652 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 10:31:45,662 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-14 10:31:45,664 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-14 10:31:45,695 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-14 10:31:45,696 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-12-14 10:31:45,696 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-12-14 10:31:45,696 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-12-14 10:31:45,696 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-12-14 10:31:45,696 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-12-14 10:31:45,696 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-12-14 10:31:45,696 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-12-14 10:31:45,696 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-12-14 10:31:45,696 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-12-14 10:31:45,696 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-12-14 10:31:45,696 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-12-14 10:31:45,697 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-12-14 10:31:45,697 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-12-14 10:31:45,697 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-12-14 10:31:45,697 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-14 10:31:45,697 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-12-14 10:31:45,697 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-12-14 10:31:45,697 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-14 10:31:45,697 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-14 10:31:45,759 INFO L235 CfgBuilder]: Building ICFG [2022-12-14 10:31:45,761 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-14 10:31:45,966 INFO L276 CfgBuilder]: Performing block encoding [2022-12-14 10:31:46,024 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-14 10:31:46,024 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-12-14 10:31:46,026 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 10:31:46 BoogieIcfgContainer [2022-12-14 10:31:46,026 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-14 10:31:46,028 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-14 10:31:46,028 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-14 10:31:46,030 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-14 10:31:46,031 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 10:31:45" (1/3) ... [2022-12-14 10:31:46,031 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3430b74 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 10:31:46, skipping insertion in model container [2022-12-14 10:31:46,031 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 10:31:45" (2/3) ... [2022-12-14 10:31:46,031 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3430b74 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 10:31:46, skipping insertion in model container [2022-12-14 10:31:46,032 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 10:31:46" (3/3) ... [2022-12-14 10:31:46,033 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product51.cil.c [2022-12-14 10:31:46,047 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-14 10:31:46,047 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-12-14 10:31:46,084 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-14 10:31:46,089 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2d1fa426, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-12-14 10:31:46,089 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-12-14 10:31:46,092 INFO L276 IsEmpty]: Start isEmpty. Operand has 64 states, 41 states have (on average 1.4634146341463414) internal successors, (60), 50 states have internal predecessors, (60), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-12-14 10:31:46,099 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-12-14 10:31:46,100 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:31:46,100 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:31:46,100 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 10:31:46,104 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:31:46,105 INFO L85 PathProgramCache]: Analyzing trace with hash -1791717273, now seen corresponding path program 1 times [2022-12-14 10:31:46,112 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:31:46,112 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [286071553] [2022-12-14 10:31:46,112 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:31:46,113 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:31:46,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:31:46,257 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:31:46,258 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:31:46,258 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [286071553] [2022-12-14 10:31:46,258 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [286071553] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 10:31:46,259 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 10:31:46,259 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 10:31:46,260 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [830277188] [2022-12-14 10:31:46,262 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 10:31:46,265 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-12-14 10:31:46,266 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:31:46,292 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-12-14 10:31:46,292 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 10:31:46,295 INFO L87 Difference]: Start difference. First operand has 64 states, 41 states have (on average 1.4634146341463414) internal successors, (60), 50 states have internal predecessors, (60), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 10:31:46,354 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:31:46,354 INFO L93 Difference]: Finished difference Result 126 states and 173 transitions. [2022-12-14 10:31:46,355 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-12-14 10:31:46,356 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-12-14 10:31:46,356 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:31:46,363 INFO L225 Difference]: With dead ends: 126 [2022-12-14 10:31:46,363 INFO L226 Difference]: Without dead ends: 59 [2022-12-14 10:31:46,366 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 10:31:46,376 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 66 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 10:31:46,378 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 66 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 10:31:46,390 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-12-14 10:31:46,404 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 59. [2022-12-14 10:31:46,405 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 38 states have (on average 1.368421052631579) internal successors, (52), 46 states have internal predecessors, (52), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2022-12-14 10:31:46,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 77 transitions. [2022-12-14 10:31:46,408 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 77 transitions. Word has length 17 [2022-12-14 10:31:46,408 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:31:46,408 INFO L495 AbstractCegarLoop]: Abstraction has 59 states and 77 transitions. [2022-12-14 10:31:46,408 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 10:31:46,408 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 77 transitions. [2022-12-14 10:31:46,410 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-12-14 10:31:46,410 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:31:46,410 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:31:46,410 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-14 10:31:46,410 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 10:31:46,411 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:31:46,411 INFO L85 PathProgramCache]: Analyzing trace with hash -185931335, now seen corresponding path program 1 times [2022-12-14 10:31:46,411 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:31:46,412 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1861048912] [2022-12-14 10:31:46,412 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:31:46,412 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:31:46,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:31:46,497 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:31:46,497 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:31:46,497 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1861048912] [2022-12-14 10:31:46,497 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1861048912] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 10:31:46,498 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 10:31:46,498 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 10:31:46,498 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [620371593] [2022-12-14 10:31:46,498 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 10:31:46,499 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 10:31:46,499 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:31:46,499 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 10:31:46,499 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 10:31:46,500 INFO L87 Difference]: Start difference. First operand 59 states and 77 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 10:31:46,535 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:31:46,535 INFO L93 Difference]: Finished difference Result 90 states and 116 transitions. [2022-12-14 10:31:46,536 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 10:31:46,536 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-12-14 10:31:46,536 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:31:46,537 INFO L225 Difference]: With dead ends: 90 [2022-12-14 10:31:46,537 INFO L226 Difference]: Without dead ends: 51 [2022-12-14 10:31:46,538 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 10:31:46,539 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 14 mSDsluCounter, 35 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 10:31:46,539 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 87 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 10:31:46,540 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51 states. [2022-12-14 10:31:46,545 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51. [2022-12-14 10:31:46,546 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 33 states have (on average 1.393939393939394) internal successors, (46), 41 states have internal predecessors, (46), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 7 states have call predecessors, (10), 10 states have call successors, (10) [2022-12-14 10:31:46,546 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 66 transitions. [2022-12-14 10:31:46,547 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 66 transitions. Word has length 18 [2022-12-14 10:31:46,547 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:31:46,547 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 66 transitions. [2022-12-14 10:31:46,547 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 10:31:46,547 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 66 transitions. [2022-12-14 10:31:46,548 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-12-14 10:31:46,548 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:31:46,548 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:31:46,548 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-14 10:31:46,548 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 10:31:46,549 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:31:46,549 INFO L85 PathProgramCache]: Analyzing trace with hash 1810711758, now seen corresponding path program 1 times [2022-12-14 10:31:46,549 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:31:46,549 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [840457523] [2022-12-14 10:31:46,549 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:31:46,549 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:31:46,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:31:46,643 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:31:46,644 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:31:46,644 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [840457523] [2022-12-14 10:31:46,644 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [840457523] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 10:31:46,644 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 10:31:46,644 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 10:31:46,644 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [672777166] [2022-12-14 10:31:46,645 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 10:31:46,645 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 10:31:46,645 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:31:46,646 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 10:31:46,646 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 10:31:46,646 INFO L87 Difference]: Start difference. First operand 51 states and 66 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 10:31:46,750 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:31:46,750 INFO L93 Difference]: Finished difference Result 148 states and 198 transitions. [2022-12-14 10:31:46,750 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 10:31:46,750 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2022-12-14 10:31:46,750 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:31:46,751 INFO L225 Difference]: With dead ends: 148 [2022-12-14 10:31:46,752 INFO L226 Difference]: Without dead ends: 99 [2022-12-14 10:31:46,752 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 10:31:46,754 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 80 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 71 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 80 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 71 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 10:31:46,754 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [80 Valid, 154 Invalid, 80 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 71 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 10:31:46,755 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 99 states. [2022-12-14 10:31:46,768 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 99 to 82. [2022-12-14 10:31:46,768 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 54 states have (on average 1.3888888888888888) internal successors, (75), 65 states have internal predecessors, (75), 15 states have call successors, (15), 12 states have call predecessors, (15), 12 states have return successors, (16), 11 states have call predecessors, (16), 15 states have call successors, (16) [2022-12-14 10:31:46,769 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 106 transitions. [2022-12-14 10:31:46,769 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 106 transitions. Word has length 21 [2022-12-14 10:31:46,769 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:31:46,770 INFO L495 AbstractCegarLoop]: Abstraction has 82 states and 106 transitions. [2022-12-14 10:31:46,770 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 10:31:46,770 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 106 transitions. [2022-12-14 10:31:46,771 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-12-14 10:31:46,771 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:31:46,771 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:31:46,771 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-14 10:31:46,772 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 10:31:46,772 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:31:46,772 INFO L85 PathProgramCache]: Analyzing trace with hash 248568353, now seen corresponding path program 1 times [2022-12-14 10:31:46,772 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:31:46,772 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2116674629] [2022-12-14 10:31:46,773 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:31:46,773 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:31:46,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:31:46,859 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:31:46,860 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:31:46,860 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2116674629] [2022-12-14 10:31:46,860 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2116674629] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 10:31:46,860 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 10:31:46,860 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-14 10:31:46,860 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [238384925] [2022-12-14 10:31:46,861 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 10:31:46,861 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 10:31:46,861 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:31:46,861 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 10:31:46,862 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-14 10:31:46,862 INFO L87 Difference]: Start difference. First operand 82 states and 106 transitions. Second operand has 6 states, 5 states have (on average 4.2) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 10:31:46,970 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:31:46,970 INFO L93 Difference]: Finished difference Result 238 states and 313 transitions. [2022-12-14 10:31:46,970 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-12-14 10:31:46,971 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.2) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-12-14 10:31:46,971 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:31:46,972 INFO L225 Difference]: With dead ends: 238 [2022-12-14 10:31:46,973 INFO L226 Difference]: Without dead ends: 158 [2022-12-14 10:31:46,973 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-12-14 10:31:46,974 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 43 mSDsluCounter, 208 mSDsCounter, 0 mSdLazyCounter, 98 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 268 SdHoareTripleChecker+Invalid, 99 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 98 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 10:31:46,975 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [45 Valid, 268 Invalid, 99 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 98 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 10:31:46,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 158 states. [2022-12-14 10:31:46,998 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 158 to 150. [2022-12-14 10:31:46,998 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 150 states, 99 states have (on average 1.3636363636363635) internal successors, (135), 118 states have internal predecessors, (135), 28 states have call successors, (28), 22 states have call predecessors, (28), 22 states have return successors, (30), 20 states have call predecessors, (30), 28 states have call successors, (30) [2022-12-14 10:31:47,000 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 150 states to 150 states and 193 transitions. [2022-12-14 10:31:47,001 INFO L78 Accepts]: Start accepts. Automaton has 150 states and 193 transitions. Word has length 24 [2022-12-14 10:31:47,001 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:31:47,001 INFO L495 AbstractCegarLoop]: Abstraction has 150 states and 193 transitions. [2022-12-14 10:31:47,001 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.2) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 10:31:47,001 INFO L276 IsEmpty]: Start isEmpty. Operand 150 states and 193 transitions. [2022-12-14 10:31:47,002 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-12-14 10:31:47,003 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:31:47,003 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:31:47,003 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-14 10:31:47,003 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 10:31:47,003 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:31:47,003 INFO L85 PathProgramCache]: Analyzing trace with hash -1893417510, now seen corresponding path program 1 times [2022-12-14 10:31:47,004 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:31:47,004 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [10565444] [2022-12-14 10:31:47,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:31:47,004 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:31:47,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:31:47,057 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:31:47,057 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:31:47,058 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [10565444] [2022-12-14 10:31:47,058 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [10565444] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 10:31:47,058 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 10:31:47,058 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 10:31:47,064 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [792302117] [2022-12-14 10:31:47,064 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 10:31:47,065 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 10:31:47,065 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:31:47,065 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 10:31:47,066 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 10:31:47,066 INFO L87 Difference]: Start difference. First operand 150 states and 193 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-12-14 10:31:47,128 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:31:47,128 INFO L93 Difference]: Finished difference Result 230 states and 303 transitions. [2022-12-14 10:31:47,128 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 10:31:47,128 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 27 [2022-12-14 10:31:47,129 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:31:47,131 INFO L225 Difference]: With dead ends: 230 [2022-12-14 10:31:47,131 INFO L226 Difference]: Without dead ends: 228 [2022-12-14 10:31:47,132 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 10:31:47,133 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 41 mSDsluCounter, 49 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 110 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 10:31:47,133 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [41 Valid, 110 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 10:31:47,134 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 228 states. [2022-12-14 10:31:47,164 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 228 to 228. [2022-12-14 10:31:47,165 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 228 states, 150 states have (on average 1.3666666666666667) internal successors, (205), 179 states have internal predecessors, (205), 43 states have call successors, (43), 34 states have call predecessors, (43), 34 states have return successors, (52), 31 states have call predecessors, (52), 43 states have call successors, (52) [2022-12-14 10:31:47,167 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 228 states to 228 states and 300 transitions. [2022-12-14 10:31:47,168 INFO L78 Accepts]: Start accepts. Automaton has 228 states and 300 transitions. Word has length 27 [2022-12-14 10:31:47,168 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:31:47,168 INFO L495 AbstractCegarLoop]: Abstraction has 228 states and 300 transitions. [2022-12-14 10:31:47,168 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-12-14 10:31:47,168 INFO L276 IsEmpty]: Start isEmpty. Operand 228 states and 300 transitions. [2022-12-14 10:31:47,171 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-12-14 10:31:47,171 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:31:47,171 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:31:47,172 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-14 10:31:47,172 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 10:31:47,172 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:31:47,172 INFO L85 PathProgramCache]: Analyzing trace with hash -465854263, now seen corresponding path program 1 times [2022-12-14 10:31:47,173 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:31:47,173 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [634542681] [2022-12-14 10:31:47,173 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:31:47,173 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:31:47,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:31:47,314 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-12-14 10:31:47,314 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:31:47,315 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [634542681] [2022-12-14 10:31:47,315 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [634542681] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 10:31:47,315 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 10:31:47,315 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-14 10:31:47,315 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [884582230] [2022-12-14 10:31:47,315 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 10:31:47,316 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 10:31:47,316 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:31:47,316 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 10:31:47,316 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-12-14 10:31:47,316 INFO L87 Difference]: Start difference. First operand 228 states and 300 transitions. Second operand has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-12-14 10:31:47,521 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:31:47,521 INFO L93 Difference]: Finished difference Result 603 states and 817 transitions. [2022-12-14 10:31:47,521 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-14 10:31:47,521 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 47 [2022-12-14 10:31:47,522 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:31:47,524 INFO L225 Difference]: With dead ends: 603 [2022-12-14 10:31:47,525 INFO L226 Difference]: Without dead ends: 377 [2022-12-14 10:31:47,527 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2022-12-14 10:31:47,528 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 122 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 136 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 123 SdHoareTripleChecker+Valid, 168 SdHoareTripleChecker+Invalid, 194 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 136 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 10:31:47,528 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [123 Valid, 168 Invalid, 194 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 136 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 10:31:47,529 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 377 states. [2022-12-14 10:31:47,562 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 377 to 355. [2022-12-14 10:31:47,562 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 355 states, 242 states have (on average 1.2644628099173554) internal successors, (306), 265 states have internal predecessors, (306), 54 states have call successors, (54), 51 states have call predecessors, (54), 58 states have return successors, (85), 55 states have call predecessors, (85), 54 states have call successors, (85) [2022-12-14 10:31:47,564 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 355 states to 355 states and 445 transitions. [2022-12-14 10:31:47,565 INFO L78 Accepts]: Start accepts. Automaton has 355 states and 445 transitions. Word has length 47 [2022-12-14 10:31:47,565 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:31:47,565 INFO L495 AbstractCegarLoop]: Abstraction has 355 states and 445 transitions. [2022-12-14 10:31:47,565 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-12-14 10:31:47,565 INFO L276 IsEmpty]: Start isEmpty. Operand 355 states and 445 transitions. [2022-12-14 10:31:47,567 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-12-14 10:31:47,567 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:31:47,568 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:31:47,568 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-12-14 10:31:47,568 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 10:31:47,568 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:31:47,569 INFO L85 PathProgramCache]: Analyzing trace with hash 1034125836, now seen corresponding path program 1 times [2022-12-14 10:31:47,569 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:31:47,569 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [590277571] [2022-12-14 10:31:47,569 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:31:47,569 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:31:47,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:31:47,861 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-12-14 10:31:47,861 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:31:47,861 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [590277571] [2022-12-14 10:31:47,861 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [590277571] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 10:31:47,861 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 10:31:47,861 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-14 10:31:47,861 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [709067724] [2022-12-14 10:31:47,861 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 10:31:47,862 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-12-14 10:31:47,862 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:31:47,862 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-12-14 10:31:47,862 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-12-14 10:31:47,863 INFO L87 Difference]: Start difference. First operand 355 states and 445 transitions. Second operand has 8 states, 8 states have (on average 5.5) internal successors, (44), 7 states have internal predecessors, (44), 4 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-12-14 10:31:48,172 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:31:48,172 INFO L93 Difference]: Finished difference Result 1039 states and 1344 transitions. [2022-12-14 10:31:48,172 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-12-14 10:31:48,173 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.5) internal successors, (44), 7 states have internal predecessors, (44), 4 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 58 [2022-12-14 10:31:48,173 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:31:48,177 INFO L225 Difference]: With dead ends: 1039 [2022-12-14 10:31:48,177 INFO L226 Difference]: Without dead ends: 686 [2022-12-14 10:31:48,178 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=56, Invalid=126, Unknown=0, NotChecked=0, Total=182 [2022-12-14 10:31:48,179 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 166 mSDsluCounter, 162 mSDsCounter, 0 mSdLazyCounter, 258 mSolverCounterSat, 79 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 175 SdHoareTripleChecker+Valid, 238 SdHoareTripleChecker+Invalid, 337 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 79 IncrementalHoareTripleChecker+Valid, 258 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 10:31:48,179 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [175 Valid, 238 Invalid, 337 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [79 Valid, 258 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 10:31:48,180 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 686 states. [2022-12-14 10:31:48,248 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 686 to 625. [2022-12-14 10:31:48,250 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 625 states, 434 states have (on average 1.2811059907834101) internal successors, (556), 472 states have internal predecessors, (556), 99 states have call successors, (99), 83 states have call predecessors, (99), 91 states have return successors, (154), 97 states have call predecessors, (154), 99 states have call successors, (154) [2022-12-14 10:31:48,252 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 625 states to 625 states and 809 transitions. [2022-12-14 10:31:48,252 INFO L78 Accepts]: Start accepts. Automaton has 625 states and 809 transitions. Word has length 58 [2022-12-14 10:31:48,252 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:31:48,252 INFO L495 AbstractCegarLoop]: Abstraction has 625 states and 809 transitions. [2022-12-14 10:31:48,253 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.5) internal successors, (44), 7 states have internal predecessors, (44), 4 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-12-14 10:31:48,253 INFO L276 IsEmpty]: Start isEmpty. Operand 625 states and 809 transitions. [2022-12-14 10:31:48,254 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-12-14 10:31:48,254 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:31:48,254 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:31:48,254 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-12-14 10:31:48,255 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 10:31:48,255 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:31:48,255 INFO L85 PathProgramCache]: Analyzing trace with hash -768471365, now seen corresponding path program 1 times [2022-12-14 10:31:48,255 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:31:48,255 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1445445437] [2022-12-14 10:31:48,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:31:48,255 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:31:48,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:31:48,326 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-12-14 10:31:48,326 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:31:48,326 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1445445437] [2022-12-14 10:31:48,326 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1445445437] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 10:31:48,326 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 10:31:48,326 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 10:31:48,327 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [490958046] [2022-12-14 10:31:48,327 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 10:31:48,327 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 10:31:48,327 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:31:48,328 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 10:31:48,328 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 10:31:48,328 INFO L87 Difference]: Start difference. First operand 625 states and 809 transitions. Second operand has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (7), 1 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-12-14 10:31:48,435 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:31:48,435 INFO L93 Difference]: Finished difference Result 975 states and 1303 transitions. [2022-12-14 10:31:48,436 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 10:31:48,436 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (7), 1 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 61 [2022-12-14 10:31:48,436 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:31:48,439 INFO L225 Difference]: With dead ends: 975 [2022-12-14 10:31:48,440 INFO L226 Difference]: Without dead ends: 621 [2022-12-14 10:31:48,441 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 10:31:48,442 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 47 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 158 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 10:31:48,442 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 158 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 10:31:48,443 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 621 states. [2022-12-14 10:31:48,490 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 621 to 429. [2022-12-14 10:31:48,491 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 429 states, 299 states have (on average 1.254180602006689) internal successors, (375), 322 states have internal predecessors, (375), 62 states have call successors, (62), 60 states have call predecessors, (62), 67 states have return successors, (91), 63 states have call predecessors, (91), 62 states have call successors, (91) [2022-12-14 10:31:48,493 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 429 states to 429 states and 528 transitions. [2022-12-14 10:31:48,494 INFO L78 Accepts]: Start accepts. Automaton has 429 states and 528 transitions. Word has length 61 [2022-12-14 10:31:48,494 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:31:48,494 INFO L495 AbstractCegarLoop]: Abstraction has 429 states and 528 transitions. [2022-12-14 10:31:48,494 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (7), 1 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-12-14 10:31:48,495 INFO L276 IsEmpty]: Start isEmpty. Operand 429 states and 528 transitions. [2022-12-14 10:31:48,496 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-12-14 10:31:48,496 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:31:48,497 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:31:48,497 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-12-14 10:31:48,497 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 10:31:48,497 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:31:48,497 INFO L85 PathProgramCache]: Analyzing trace with hash 1556155898, now seen corresponding path program 1 times [2022-12-14 10:31:48,497 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:31:48,498 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1376324243] [2022-12-14 10:31:48,498 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:31:48,498 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:31:48,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:31:48,537 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-12-14 10:31:48,538 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:31:48,538 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1376324243] [2022-12-14 10:31:48,538 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1376324243] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 10:31:48,538 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 10:31:48,538 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 10:31:48,538 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [276454874] [2022-12-14 10:31:48,538 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 10:31:48,538 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 10:31:48,538 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:31:48,539 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 10:31:48,539 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 10:31:48,539 INFO L87 Difference]: Start difference. First operand 429 states and 528 transitions. Second operand has 4 states, 3 states have (on average 15.333333333333334) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2022-12-14 10:31:48,653 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:31:48,653 INFO L93 Difference]: Finished difference Result 863 states and 1061 transitions. [2022-12-14 10:31:48,654 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 10:31:48,654 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 15.333333333333334) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 66 [2022-12-14 10:31:48,654 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:31:48,655 INFO L225 Difference]: With dead ends: 863 [2022-12-14 10:31:48,655 INFO L226 Difference]: Without dead ends: 314 [2022-12-14 10:31:48,656 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 10:31:48,656 INFO L413 NwaCegarLoop]: 74 mSDtfsCounter, 84 mSDsluCounter, 46 mSDsCounter, 0 mSdLazyCounter, 76 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 78 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 76 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 10:31:48,657 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 120 Invalid, 78 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 76 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 10:31:48,657 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 314 states. [2022-12-14 10:31:48,673 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 314 to 314. [2022-12-14 10:31:48,674 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 314 states, 215 states have (on average 1.2) internal successors, (258), 231 states have internal predecessors, (258), 46 states have call successors, (46), 44 states have call predecessors, (46), 52 states have return successors, (65), 48 states have call predecessors, (65), 46 states have call successors, (65) [2022-12-14 10:31:48,675 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 314 states to 314 states and 369 transitions. [2022-12-14 10:31:48,675 INFO L78 Accepts]: Start accepts. Automaton has 314 states and 369 transitions. Word has length 66 [2022-12-14 10:31:48,675 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:31:48,675 INFO L495 AbstractCegarLoop]: Abstraction has 314 states and 369 transitions. [2022-12-14 10:31:48,676 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 15.333333333333334) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2022-12-14 10:31:48,676 INFO L276 IsEmpty]: Start isEmpty. Operand 314 states and 369 transitions. [2022-12-14 10:31:48,677 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-12-14 10:31:48,677 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:31:48,677 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:31:48,677 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-12-14 10:31:48,677 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 10:31:48,677 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:31:48,677 INFO L85 PathProgramCache]: Analyzing trace with hash -51218797, now seen corresponding path program 1 times [2022-12-14 10:31:48,678 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:31:48,678 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1029408400] [2022-12-14 10:31:48,678 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:31:48,678 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:31:48,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:31:48,737 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 19 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-12-14 10:31:48,738 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:31:48,738 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1029408400] [2022-12-14 10:31:48,738 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1029408400] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 10:31:48,738 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1410622018] [2022-12-14 10:31:48,738 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:31:48,738 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:31:48,738 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 10:31:48,739 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 10:31:48,741 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-14 10:31:48,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:31:48,806 INFO L263 TraceCheckSpWp]: Trace formula consists of 298 conjuncts, 4 conjunts are in the unsatisfiable core [2022-12-14 10:31:48,811 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 10:31:48,873 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:31:48,874 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 10:31:48,874 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1410622018] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 10:31:48,874 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 10:31:48,874 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5] total 6 [2022-12-14 10:31:48,874 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1009236201] [2022-12-14 10:31:48,874 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 10:31:48,875 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 10:31:48,875 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:31:48,875 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 10:31:48,875 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-12-14 10:31:48,875 INFO L87 Difference]: Start difference. First operand 314 states and 369 transitions. Second operand has 3 states, 3 states have (on average 16.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-12-14 10:31:48,938 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:31:48,938 INFO L93 Difference]: Finished difference Result 542 states and 641 transitions. [2022-12-14 10:31:48,938 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 10:31:48,938 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 16.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 63 [2022-12-14 10:31:48,939 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:31:48,940 INFO L225 Difference]: With dead ends: 542 [2022-12-14 10:31:48,940 INFO L226 Difference]: Without dead ends: 294 [2022-12-14 10:31:48,941 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 69 GetRequests, 65 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-12-14 10:31:48,942 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 25 mSDsluCounter, 34 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 99 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 10:31:48,942 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 99 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 10:31:48,943 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2022-12-14 10:31:48,961 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 294. [2022-12-14 10:31:48,962 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 294 states, 202 states have (on average 1.1782178217821782) internal successors, (238), 217 states have internal predecessors, (238), 43 states have call successors, (43), 41 states have call predecessors, (43), 48 states have return successors, (53), 45 states have call predecessors, (53), 43 states have call successors, (53) [2022-12-14 10:31:48,963 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294 states to 294 states and 334 transitions. [2022-12-14 10:31:48,963 INFO L78 Accepts]: Start accepts. Automaton has 294 states and 334 transitions. Word has length 63 [2022-12-14 10:31:48,963 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:31:48,963 INFO L495 AbstractCegarLoop]: Abstraction has 294 states and 334 transitions. [2022-12-14 10:31:48,963 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 16.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-12-14 10:31:48,963 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 334 transitions. [2022-12-14 10:31:48,964 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-12-14 10:31:48,964 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:31:48,964 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:31:48,978 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-14 10:31:49,165 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-12-14 10:31:49,165 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 10:31:49,166 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:31:49,166 INFO L85 PathProgramCache]: Analyzing trace with hash 1859530907, now seen corresponding path program 1 times [2022-12-14 10:31:49,166 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:31:49,166 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1601258257] [2022-12-14 10:31:49,166 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:31:49,166 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:31:49,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:31:49,572 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 7 proven. 13 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 10:31:49,572 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:31:49,572 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1601258257] [2022-12-14 10:31:49,572 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1601258257] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 10:31:49,572 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [738767672] [2022-12-14 10:31:49,573 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:31:49,573 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:31:49,573 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 10:31:49,574 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 10:31:49,578 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-14 10:31:49,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:31:49,646 INFO L263 TraceCheckSpWp]: Trace formula consists of 303 conjuncts, 34 conjunts are in the unsatisfiable core [2022-12-14 10:31:49,649 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 10:31:50,016 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 13 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:31:50,017 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 10:31:50,475 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 15 proven. 3 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-12-14 10:31:50,475 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [738767672] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 10:31:50,476 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [529026493] [2022-12-14 10:31:50,495 INFO L159 IcfgInterpreter]: Started Sifa with 43 locations of interest [2022-12-14 10:31:50,495 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 10:31:50,498 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 10:31:50,503 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 10:31:50,504 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 10:31:52,339 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 52 for LOIs [2022-12-14 10:31:52,348 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 46 for LOIs [2022-12-14 10:31:52,565 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 22 for LOIs [2022-12-14 10:31:52,599 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 22 for LOIs [2022-12-14 10:31:52,601 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 24 for LOIs [2022-12-14 10:31:52,603 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 25 for LOIs [2022-12-14 10:31:52,604 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 10:31:55,583 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11844#(and (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|) (= ~head~0.offset 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= |timeShift_isPumpRunning_#res#1| 2147483647) (<= |#NULL.offset| 0) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= 0 ~methAndRunningLastTime~0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 2147483647) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)) (<= 0 |old(~methAndRunningLastTime~0)|) (<= 0 ~head~0.base) (<= ~head~0.base 0) (<= 0 |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1|) (<= 0 (+ |timeShift_isPumpRunning_#res#1| 2147483648)) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| ~methaneLevelCritical~0) (<= 0 |#NULL.offset|) (not (= ~methAndRunningLastTime~0 0)) (<= 0 |#StackHeapBarrier|) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 0)) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-12-14 10:31:55,583 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 10:31:55,583 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 10:31:55,583 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 11, 14] total 35 [2022-12-14 10:31:55,583 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [959860877] [2022-12-14 10:31:55,583 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 10:31:55,584 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-12-14 10:31:55,584 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:31:55,584 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-12-14 10:31:55,585 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=448, Invalid=3712, Unknown=0, NotChecked=0, Total=4160 [2022-12-14 10:31:55,586 INFO L87 Difference]: Start difference. First operand 294 states and 334 transitions. Second operand has 35 states, 32 states have (on average 3.5625) internal successors, (114), 29 states have internal predecessors, (114), 14 states have call successors, (24), 13 states have call predecessors, (24), 11 states have return successors, (21), 10 states have call predecessors, (21), 12 states have call successors, (21) [2022-12-14 10:31:57,428 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:31:57,428 INFO L93 Difference]: Finished difference Result 909 states and 1066 transitions. [2022-12-14 10:31:57,428 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2022-12-14 10:31:57,428 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 32 states have (on average 3.5625) internal successors, (114), 29 states have internal predecessors, (114), 14 states have call successors, (24), 13 states have call predecessors, (24), 11 states have return successors, (21), 10 states have call predecessors, (21), 12 states have call successors, (21) Word has length 66 [2022-12-14 10:31:57,429 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:31:57,430 INFO L225 Difference]: With dead ends: 909 [2022-12-14 10:31:57,430 INFO L226 Difference]: Without dead ends: 681 [2022-12-14 10:31:57,432 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 254 GetRequests, 154 SyntacticMatches, 3 SemanticMatches, 97 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3579 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=1147, Invalid=8555, Unknown=0, NotChecked=0, Total=9702 [2022-12-14 10:31:57,433 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 941 mSDsluCounter, 1094 mSDsCounter, 0 mSdLazyCounter, 1733 mSolverCounterSat, 630 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 944 SdHoareTripleChecker+Valid, 1199 SdHoareTripleChecker+Invalid, 2363 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 630 IncrementalHoareTripleChecker+Valid, 1733 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 10:31:57,433 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [944 Valid, 1199 Invalid, 2363 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [630 Valid, 1733 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-12-14 10:31:57,434 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 681 states. [2022-12-14 10:31:57,469 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 681 to 543. [2022-12-14 10:31:57,469 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 543 states, 378 states have (on average 1.17989417989418) internal successors, (446), 402 states have internal predecessors, (446), 76 states have call successors, (76), 72 states have call predecessors, (76), 88 states have return successors, (95), 85 states have call predecessors, (95), 76 states have call successors, (95) [2022-12-14 10:31:57,471 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 543 states to 543 states and 617 transitions. [2022-12-14 10:31:57,471 INFO L78 Accepts]: Start accepts. Automaton has 543 states and 617 transitions. Word has length 66 [2022-12-14 10:31:57,471 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:31:57,471 INFO L495 AbstractCegarLoop]: Abstraction has 543 states and 617 transitions. [2022-12-14 10:31:57,471 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 32 states have (on average 3.5625) internal successors, (114), 29 states have internal predecessors, (114), 14 states have call successors, (24), 13 states have call predecessors, (24), 11 states have return successors, (21), 10 states have call predecessors, (21), 12 states have call successors, (21) [2022-12-14 10:31:57,472 INFO L276 IsEmpty]: Start isEmpty. Operand 543 states and 617 transitions. [2022-12-14 10:31:57,473 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2022-12-14 10:31:57,473 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:31:57,473 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:31:57,478 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-14 10:31:57,673 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-12-14 10:31:57,673 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 10:31:57,674 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:31:57,674 INFO L85 PathProgramCache]: Analyzing trace with hash 590215849, now seen corresponding path program 1 times [2022-12-14 10:31:57,674 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:31:57,674 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1478010693] [2022-12-14 10:31:57,674 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:31:57,674 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:31:57,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:31:57,838 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 51 proven. 11 refuted. 0 times theorem prover too weak. 69 trivial. 0 not checked. [2022-12-14 10:31:57,838 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:31:57,838 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1478010693] [2022-12-14 10:31:57,838 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1478010693] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 10:31:57,838 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [399622103] [2022-12-14 10:31:57,838 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:31:57,838 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:31:57,839 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 10:31:57,839 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 10:31:57,840 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-14 10:31:57,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:31:57,928 INFO L263 TraceCheckSpWp]: Trace formula consists of 469 conjuncts, 24 conjunts are in the unsatisfiable core [2022-12-14 10:31:57,930 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 10:31:58,102 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 87 proven. 18 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2022-12-14 10:31:58,102 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 10:31:58,355 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 63 proven. 28 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-12-14 10:31:58,356 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [399622103] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 10:31:58,356 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [472365559] [2022-12-14 10:31:58,358 INFO L159 IcfgInterpreter]: Started Sifa with 46 locations of interest [2022-12-14 10:31:58,358 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 10:31:58,358 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 10:31:58,358 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 10:31:58,358 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 10:32:00,346 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 48 for LOIs [2022-12-14 10:32:00,351 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 48 for LOIs [2022-12-14 10:32:00,634 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 39 for LOIs [2022-12-14 10:32:00,692 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 38 for LOIs [2022-12-14 10:32:00,696 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 43 for LOIs [2022-12-14 10:32:00,700 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 25 for LOIs [2022-12-14 10:32:00,702 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 31 for LOIs [2022-12-14 10:32:00,704 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 10:32:04,648 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14825#(and (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|) (= ~head~0.offset 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= |timeShift_isPumpRunning_#res#1| 2147483647) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= 0 ~methAndRunningLastTime~0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 2147483647) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)) (<= 0 |old(~methAndRunningLastTime~0)|) (= ~head~0.base 0) (<= 0 |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1|) (= |#NULL.offset| 0) (<= 0 (+ |timeShift_isPumpRunning_#res#1| 2147483648)) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| ~methaneLevelCritical~0) (not (= ~methAndRunningLastTime~0 0)) (<= 0 |#StackHeapBarrier|) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 0)) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-12-14 10:32:04,648 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 10:32:04,648 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 10:32:04,648 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 9, 12] total 26 [2022-12-14 10:32:04,648 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [310717911] [2022-12-14 10:32:04,648 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 10:32:04,649 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-12-14 10:32:04,649 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:32:04,649 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-12-14 10:32:04,650 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=325, Invalid=2981, Unknown=0, NotChecked=0, Total=3306 [2022-12-14 10:32:04,650 INFO L87 Difference]: Start difference. First operand 543 states and 617 transitions. Second operand has 26 states, 20 states have (on average 6.5) internal successors, (130), 20 states have internal predecessors, (130), 10 states have call successors, (28), 8 states have call predecessors, (28), 13 states have return successors, (30), 13 states have call predecessors, (30), 10 states have call successors, (30) [2022-12-14 10:32:05,203 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:32:05,203 INFO L93 Difference]: Finished difference Result 1131 states and 1328 transitions. [2022-12-14 10:32:05,203 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-12-14 10:32:05,204 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 20 states have (on average 6.5) internal successors, (130), 20 states have internal predecessors, (130), 10 states have call successors, (28), 8 states have call predecessors, (28), 13 states have return successors, (30), 13 states have call predecessors, (30), 10 states have call successors, (30) Word has length 116 [2022-12-14 10:32:05,204 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:32:05,206 INFO L225 Difference]: With dead ends: 1131 [2022-12-14 10:32:05,206 INFO L226 Difference]: Without dead ends: 821 [2022-12-14 10:32:05,208 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 371 GetRequests, 284 SyntacticMatches, 20 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2318 ImplicationChecksByTransitivity, 4.2s TimeCoverageRelationStatistics Valid=474, Invalid=4218, Unknown=0, NotChecked=0, Total=4692 [2022-12-14 10:32:05,208 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 287 mSDsluCounter, 210 mSDsCounter, 0 mSdLazyCounter, 943 mSolverCounterSat, 181 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 290 SdHoareTripleChecker+Valid, 236 SdHoareTripleChecker+Invalid, 1124 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 181 IncrementalHoareTripleChecker+Valid, 943 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 10:32:05,209 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [290 Valid, 236 Invalid, 1124 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [181 Valid, 943 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 10:32:05,209 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 821 states. [2022-12-14 10:32:05,284 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 821 to 558. [2022-12-14 10:32:05,286 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 558 states, 383 states have (on average 1.1488250652741514) internal successors, (440), 412 states have internal predecessors, (440), 81 states have call successors, (81), 77 states have call predecessors, (81), 93 states have return successors, (100), 90 states have call predecessors, (100), 81 states have call successors, (100) [2022-12-14 10:32:05,288 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 558 states to 558 states and 621 transitions. [2022-12-14 10:32:05,288 INFO L78 Accepts]: Start accepts. Automaton has 558 states and 621 transitions. Word has length 116 [2022-12-14 10:32:05,288 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:32:05,288 INFO L495 AbstractCegarLoop]: Abstraction has 558 states and 621 transitions. [2022-12-14 10:32:05,289 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 20 states have (on average 6.5) internal successors, (130), 20 states have internal predecessors, (130), 10 states have call successors, (28), 8 states have call predecessors, (28), 13 states have return successors, (30), 13 states have call predecessors, (30), 10 states have call successors, (30) [2022-12-14 10:32:05,289 INFO L276 IsEmpty]: Start isEmpty. Operand 558 states and 621 transitions. [2022-12-14 10:32:05,290 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2022-12-14 10:32:05,291 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:32:05,291 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:32:05,295 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-14 10:32:05,491 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:32:05,491 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 10:32:05,492 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:32:05,492 INFO L85 PathProgramCache]: Analyzing trace with hash -391121139, now seen corresponding path program 2 times [2022-12-14 10:32:05,492 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:32:05,492 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [597201082] [2022-12-14 10:32:05,492 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:32:05,492 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:32:05,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:32:06,093 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 52 proven. 58 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-12-14 10:32:06,093 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:32:06,093 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [597201082] [2022-12-14 10:32:06,093 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [597201082] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 10:32:06,093 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [394325769] [2022-12-14 10:32:06,093 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 10:32:06,094 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:32:06,094 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 10:32:06,095 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 10:32:06,095 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-12-14 10:32:06,147 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-12-14 10:32:06,147 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 10:32:06,149 INFO L263 TraceCheckSpWp]: Trace formula consists of 297 conjuncts, 33 conjunts are in the unsatisfiable core [2022-12-14 10:32:06,151 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 10:32:06,339 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 82 proven. 4 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-12-14 10:32:06,339 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 10:32:06,610 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 68 proven. 2 refuted. 0 times theorem prover too weak. 61 trivial. 0 not checked. [2022-12-14 10:32:06,610 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [394325769] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 10:32:06,610 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1391520613] [2022-12-14 10:32:06,613 INFO L159 IcfgInterpreter]: Started Sifa with 46 locations of interest [2022-12-14 10:32:06,613 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 10:32:06,613 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 10:32:06,613 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 10:32:06,613 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 10:32:08,484 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 48 for LOIs [2022-12-14 10:32:08,489 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 48 for LOIs [2022-12-14 10:32:08,810 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 39 for LOIs [2022-12-14 10:32:08,866 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 38 for LOIs [2022-12-14 10:32:08,869 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 43 for LOIs [2022-12-14 10:32:08,874 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 25 for LOIs [2022-12-14 10:32:08,875 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 31 for LOIs [2022-12-14 10:32:08,877 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 10:32:13,013 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18123#(and (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|) (= ~head~0.offset 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= |timeShift_isPumpRunning_#res#1| 2147483647) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= 0 ~methAndRunningLastTime~0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 2147483647) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)) (<= 0 |old(~methAndRunningLastTime~0)|) (= ~head~0.base 0) (<= 0 |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1|) (= |#NULL.offset| 0) (<= 0 (+ |timeShift_isPumpRunning_#res#1| 2147483648)) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| ~methaneLevelCritical~0) (not (= ~methAndRunningLastTime~0 0)) (<= 0 |#StackHeapBarrier|) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 0)) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-12-14 10:32:13,013 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 10:32:13,013 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 10:32:13,013 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 7, 8] total 32 [2022-12-14 10:32:13,013 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [919289749] [2022-12-14 10:32:13,013 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 10:32:13,014 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-12-14 10:32:13,014 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:32:13,014 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-12-14 10:32:13,015 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=377, Invalid=3655, Unknown=0, NotChecked=0, Total=4032 [2022-12-14 10:32:13,015 INFO L87 Difference]: Start difference. First operand 558 states and 621 transitions. Second operand has 32 states, 30 states have (on average 6.1) internal successors, (183), 29 states have internal predecessors, (183), 15 states have call successors, (34), 7 states have call predecessors, (34), 12 states have return successors, (35), 11 states have call predecessors, (35), 15 states have call successors, (35) [2022-12-14 10:32:13,726 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:32:13,726 INFO L93 Difference]: Finished difference Result 752 states and 847 transitions. [2022-12-14 10:32:13,727 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-12-14 10:32:13,727 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 30 states have (on average 6.1) internal successors, (183), 29 states have internal predecessors, (183), 15 states have call successors, (34), 7 states have call predecessors, (34), 12 states have return successors, (35), 11 states have call predecessors, (35), 15 states have call successors, (35) Word has length 116 [2022-12-14 10:32:13,727 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:32:13,727 INFO L225 Difference]: With dead ends: 752 [2022-12-14 10:32:13,727 INFO L226 Difference]: Without dead ends: 0 [2022-12-14 10:32:13,729 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 394 GetRequests, 294 SyntacticMatches, 20 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3315 ImplicationChecksByTransitivity, 4.8s TimeCoverageRelationStatistics Valid=700, Invalid=5942, Unknown=0, NotChecked=0, Total=6642 [2022-12-14 10:32:13,730 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 365 mSDsluCounter, 502 mSDsCounter, 0 mSdLazyCounter, 730 mSolverCounterSat, 230 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 365 SdHoareTripleChecker+Valid, 560 SdHoareTripleChecker+Invalid, 960 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 230 IncrementalHoareTripleChecker+Valid, 730 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 10:32:13,730 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [365 Valid, 560 Invalid, 960 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [230 Valid, 730 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 10:32:13,730 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-12-14 10:32:13,730 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-12-14 10:32:13,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:32:13,731 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-12-14 10:32:13,731 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 116 [2022-12-14 10:32:13,731 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:32:13,731 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-12-14 10:32:13,731 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 30 states have (on average 6.1) internal successors, (183), 29 states have internal predecessors, (183), 15 states have call successors, (34), 7 states have call predecessors, (34), 12 states have return successors, (35), 11 states have call predecessors, (35), 15 states have call successors, (35) [2022-12-14 10:32:13,731 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-12-14 10:32:13,731 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-12-14 10:32:13,733 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-12-14 10:32:13,738 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2022-12-14 10:32:13,934 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-12-14 10:32:13,940 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-12-14 10:32:18,554 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 226 233) no Hoare annotation was computed. [2022-12-14 10:32:18,554 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 226 233) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= 0 ~systemActive~0)) [2022-12-14 10:32:18,554 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 159 165) no Hoare annotation was computed. [2022-12-14 10:32:18,554 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 159 165) the Hoare annotation is: true [2022-12-14 10:32:18,555 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 449 460) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse1 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse4 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse6 (not (= 2 ~waterLevel~0))) (.cse7 (not (= ~pumpRunning~0 1))) (.cse2 (not (= ~pumpRunning~0 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 2 ~waterLevel~0))) (.cse8 (= ~methaneLevelCritical~0 1)) (.cse11 (not (<= ~waterLevel~0 2))) (.cse9 (not (= |old(~methaneLevelCritical~0)| 1))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse3 .cse6 .cse4 .cse7) (or .cse0 .cse2 .cse3 .cse8 .cse9 .cse5) (or .cse1 .cse2 .cse3 .cse4 .cse10 .cse11 .cse5) (or .cse3 .cse6 .cse8 .cse7 .cse9) (or .cse2 .cse3 .cse10 .cse8 .cse11 .cse9 .cse5))) [2022-12-14 10:32:18,555 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 449 460) no Hoare annotation was computed. [2022-12-14 10:32:18,555 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 461 469) the Hoare annotation is: true [2022-12-14 10:32:18,555 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 461 469) no Hoare annotation was computed. [2022-12-14 10:32:18,555 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 527 556) no Hoare annotation was computed. [2022-12-14 10:32:18,555 INFO L899 garLoopResultBuilder]: For program point L541(lines 541 545) no Hoare annotation was computed. [2022-12-14 10:32:18,555 INFO L902 garLoopResultBuilder]: At program point L541-1(lines 541 545) the Hoare annotation is: true [2022-12-14 10:32:18,555 INFO L902 garLoopResultBuilder]: At program point L537-2(lines 537 551) the Hoare annotation is: true [2022-12-14 10:32:18,555 INFO L902 garLoopResultBuilder]: At program point L533(line 533) the Hoare annotation is: true [2022-12-14 10:32:18,555 INFO L899 garLoopResultBuilder]: For program point L533-1(line 533) no Hoare annotation was computed. [2022-12-14 10:32:18,555 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 527 556) the Hoare annotation is: true [2022-12-14 10:32:18,556 INFO L902 garLoopResultBuilder]: At program point L552(lines 527 556) the Hoare annotation is: true [2022-12-14 10:32:18,556 INFO L899 garLoopResultBuilder]: For program point L548(line 548) no Hoare annotation was computed. [2022-12-14 10:32:18,556 INFO L899 garLoopResultBuilder]: For program point L366(lines 366 376) no Hoare annotation was computed. [2022-12-14 10:32:18,556 INFO L899 garLoopResultBuilder]: For program point L139-1(lines 138 157) no Hoare annotation was computed. [2022-12-14 10:32:18,556 INFO L895 garLoopResultBuilder]: At program point L362(lines 362 379) the Hoare annotation is: (let ((.cse11 (= 0 ~systemActive~0))) (let ((.cse9 (= ~methAndRunningLastTime~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse10 (= ~waterLevel~0 1)) (.cse17 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| ~methaneLevelCritical~0)) (.cse3 (not .cse11))) (let ((.cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse10 .cse17 .cse3)) (.cse2 (not (= |old(~waterLevel~0)| 1))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse15 (and .cse1 (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse10 .cse17)) (.cse16 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse12 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (and .cse9 (= |old(~waterLevel~0)| ~waterLevel~0) .cse17 (= ~pumpRunning~0 1))) (.cse14 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (and .cse1 (or .cse2 (<= ~waterLevel~0 1))) .cse3) (or .cse0 .cse4 .cse2 .cse5 .cse6 .cse7) (or .cse0 .cse4 .cse8 (and .cse9 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 0)) .cse3) (or .cse0 .cse4 .cse2 .cse5 .cse8 .cse6) (or .cse0 .cse4 .cse2 .cse10 .cse3) (or .cse0 .cse4 .cse5 .cse8 .cse11 .cse12 .cse13 .cse14) (or .cse15 .cse5 .cse8 .cse16 .cse12 .cse14) (or .cse15 .cse5 .cse16 .cse7 .cse12 .cse14) (or .cse0 .cse4 .cse5 .cse7 .cse11 .cse12 .cse13 .cse14))))) [2022-12-14 10:32:18,556 INFO L899 garLoopResultBuilder]: For program point L201(lines 201 209) no Hoare annotation was computed. [2022-12-14 10:32:18,557 INFO L895 garLoopResultBuilder]: At program point L362-1(lines 354 382) the Hoare annotation is: (let ((.cse14 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse15 (= ~waterLevel~0 1)) (.cse17 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| ~methaneLevelCritical~0))) (let ((.cse8 (and .cse1 .cse2 .cse15 .cse17)) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse4 (not .cse14)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse16 (and (= |old(~waterLevel~0)| ~waterLevel~0) .cse17 (= ~pumpRunning~0 1))) (.cse6 (not (= 1 ~systemActive~0))) (.cse9 (and .cse1 .cse2 (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse15 .cse17)) (.cse10 (not (= |old(~pumpRunning~0)| 1))) (.cse13 (not (= ~methaneLevelCritical~0 1))) (.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse12 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (and .cse1 .cse2 (or .cse3 (<= ~waterLevel~0 1))) .cse4) (or .cse0 .cse5 .cse3 .cse6 .cse7 .cse8) (or .cse6 .cse9 .cse7 .cse10 .cse11 .cse12) (or .cse0 .cse5 .cse7 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 0) .cse4) (or .cse0 .cse5 .cse3 .cse6 .cse13 .cse8 .cse14) (or .cse0 .cse5 .cse3 .cse15 .cse4) (or .cse0 .cse5 .cse16 .cse6 .cse7 .cse14 .cse11 .cse12) (or .cse0 .cse5 .cse16 .cse6 .cse13 .cse14 .cse11 .cse12) (or .cse6 .cse9 .cse10 .cse13 .cse11 .cse12)))) [2022-12-14 10:32:18,557 INFO L895 garLoopResultBuilder]: At program point L197(lines 197 214) the Hoare annotation is: (let ((.cse13 (= 0 ~systemActive~0)) (.cse10 (not (= |old(~waterLevel~0)| 1)))) (let ((.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= ~pumpRunning~0 0)) (.cse8 (= ~methAndRunningLastTime~0 0)) (.cse15 (or .cse10 (<= ~waterLevel~0 1))) (.cse16 (not .cse13))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (= ~waterLevel~0 1)) (.cse3 (not (= ~methaneLevelCritical~0 1))) (.cse9 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse11 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse14 (and .cse12 .cse7 .cse8 (= |old(~waterLevel~0)| ~waterLevel~0) .cse15 .cse16)) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (= |old(~pumpRunning~0)| 0)))) (and (or (and .cse0 (= ~pumpRunning~0 1)) .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 (and .cse7 .cse8 .cse0) .cse9 .cse10 .cse1 .cse11) (or (and .cse12 .cse0) .cse1 .cse11 .cse2 .cse4 .cse5) (or .cse6 .cse9 .cse1 .cse3 .cse13 .cse4 .cse14 .cse5) (or .cse6 .cse9 (and .cse12 .cse7 .cse8 .cse0 .cse15 .cse16) .cse10 .cse1 .cse3 .cse13) (or .cse6 .cse9 .cse1 .cse11 .cse13 .cse4 .cse14 .cse5) (or .cse6 .cse16))))) [2022-12-14 10:32:18,557 INFO L895 garLoopResultBuilder]: At program point L627(line 627) the Hoare annotation is: (let ((.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse8 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse7 .cse2 .cse8) (or .cse0 .cse1 .cse7 .cse2 .cse3 .cse4) (or .cse2 .cse3 .cse9 .cse5 .cse6) (or .cse2 .cse9 .cse8 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse8 .cse4 .cse5 .cse6) (or .cse0 (not .cse4)))) [2022-12-14 10:32:18,558 INFO L899 garLoopResultBuilder]: For program point L367(lines 367 373) no Hoare annotation was computed. [2022-12-14 10:32:18,558 INFO L895 garLoopResultBuilder]: At program point L207(line 207) the Hoare annotation is: (let ((.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse8 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse7 .cse2 .cse8) (or .cse0 .cse1 .cse7 .cse2 .cse3 .cse4) (or .cse2 .cse3 .cse9 .cse5 .cse6) (or .cse2 .cse9 .cse8 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse8 .cse4 .cse5 .cse6) (or .cse0 (not .cse4)))) [2022-12-14 10:32:18,558 INFO L895 garLoopResultBuilder]: At program point L203(line 203) the Hoare annotation is: (let ((.cse7 (not (= |old(~pumpRunning~0)| 1))) (.cse8 (and (= |timeShift_processEnvironment_~tmp~2#1| 1) (= ~waterLevel~0 1) (= ~pumpRunning~0 1))) (.cse10 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse9 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse2 .cse3 .cse7 .cse8 .cse5 .cse6) (or .cse2 .cse7 .cse9 .cse8 .cse5 .cse6) (or .cse0 .cse1 .cse10 .cse2 .cse9) (or .cse0 .cse1 .cse10 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse9 .cse4 .cse5 .cse6) (or .cse0 (not .cse4)))) [2022-12-14 10:32:18,558 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 135 158) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse17 (= 0 ~systemActive~0)) (.cse14 (= ~pumpRunning~0 0)) (.cse12 (= ~methAndRunningLastTime~0 0)) (.cse15 (= ~waterLevel~0 1))) (let ((.cse1 (and .cse14 .cse12 .cse15)) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse13 (not .cse17)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse11 (not (= ~methaneLevelCritical~0 1))) (.cse16 (and .cse7 .cse14 .cse12 .cse8)) (.cse9 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse4 .cse5 .cse6 (and .cse7 .cse8) .cse9 .cse10) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse11) (or .cse0 .cse2 .cse12 .cse13) (or .cse0 .cse13 (and .cse14 (or .cse8 .cse15))) (or .cse0 .cse2 .cse4 .cse5 .cse16 .cse17 .cse9 .cse10) (or .cse4 .cse6 .cse11 .cse9 (and .cse8 (= ~pumpRunning~0 1)) .cse10) (or .cse0 .cse2 .cse4 .cse11 .cse16 .cse17 .cse9 .cse10)))) [2022-12-14 10:32:18,558 INFO L895 garLoopResultBuilder]: At program point L360(line 360) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse5 (= ~waterLevel~0 1)) (.cse15 (= 0 ~systemActive~0)) (.cse4 (= ~methAndRunningLastTime~0 0))) (let ((.cse14 (and .cse4 (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))) (.cse11 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not .cse15)) (.cse7 (not (= 1 ~systemActive~0))) (.cse9 (and .cse1 (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse5)) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (= |old(~pumpRunning~0)| 1))) (.cse12 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (and .cse1 (or .cse2 (<= ~waterLevel~0 1))) .cse3) (or .cse0 (and .cse1 .cse4 .cse5) .cse6 .cse2 .cse7 .cse8) (or .cse7 .cse9 .cse10 .cse11 .cse12 .cse13) (or .cse0 .cse6 .cse7 .cse8 .cse14 .cse15 .cse12 .cse13) (or .cse0 .cse6 .cse4 .cse2 .cse7 .cse11) (or .cse0 .cse6 .cse4 .cse8 .cse3) (or .cse0 .cse6 .cse2 .cse7 (and .cse1 .cse5) .cse11 .cse15) (or .cse0 .cse6 .cse7 .cse14 .cse11 .cse15 .cse12 .cse13) (or .cse0 .cse6 .cse2 .cse5 .cse3) (or .cse7 .cse9 .cse8 .cse10 .cse12 .cse13)))) [2022-12-14 10:32:18,558 INFO L899 garLoopResultBuilder]: For program point L360-1(line 360) no Hoare annotation was computed. [2022-12-14 10:32:18,558 INFO L895 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: (let ((.cse12 (= 0 ~systemActive~0)) (.cse5 (not (= |old(~waterLevel~0)| 1)))) (let ((.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse15 (or .cse5 (<= ~waterLevel~0 1))) (.cse16 (not .cse12))) (let ((.cse3 (= ~waterLevel~0 1)) (.cse8 (not (= |old(~pumpRunning~0)| 1))) (.cse11 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (and .cse14 .cse1 .cse2 (= |old(~waterLevel~0)| ~waterLevel~0) .cse15 .cse16)) (.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (and .cse1 .cse2 .cse3) .cse4 .cse5 .cse6 .cse7) (or .cse6 .cse7 .cse8 .cse9 .cse10) (or .cse0 .cse4 .cse6 .cse11 .cse12 .cse9 .cse13 .cse10) (or .cse0 .cse4 (and .cse14 .cse1 .cse2 .cse3 .cse15 .cse16) .cse5 .cse6 .cse11 .cse12) (or .cse6 .cse8 .cse11 .cse9 .cse10) (or .cse0 .cse4 .cse6 .cse7 .cse12 .cse9 .cse13 .cse10) (or .cse0 .cse16))))) [2022-12-14 10:32:18,558 INFO L895 garLoopResultBuilder]: At program point L212-1(lines 193 217) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse3 (= ~waterLevel~0 1)) (.cse2 (= ~methAndRunningLastTime~0 0))) (let ((.cse5 (not (= |old(~waterLevel~0)| 1))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse13 (and .cse2 (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))) (.cse10 (not (= ~methaneLevelCritical~0 1))) (.cse6 (not (= 1 ~systemActive~0))) (.cse8 (and .cse1 (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse3)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~pumpRunning~0)| 1))) (.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse12 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse14 (= 0 ~systemActive~0))) (and (or .cse0 (and .cse1 .cse2 .cse3) .cse4 .cse5 .cse6 .cse7) (or .cse6 .cse8 .cse9 .cse10 .cse11 .cse12) (or .cse0 .cse4 .cse6 .cse7 .cse13 .cse14 .cse11 .cse12) (or .cse0 .cse4 .cse2 .cse5 .cse6 .cse10) (or .cse0 .cse4 .cse5 .cse6 (and .cse1 .cse3) .cse10 .cse14) (or .cse0 .cse4 .cse6 .cse13 .cse10 .cse14 .cse11 .cse12) (or .cse6 .cse8 .cse7 .cse9 .cse11 .cse12) (or .cse0 (not .cse14))))) [2022-12-14 10:32:18,558 INFO L899 garLoopResultBuilder]: For program point L146-1(lines 146 152) no Hoare annotation was computed. [2022-12-14 10:32:18,559 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 135 158) no Hoare annotation was computed. [2022-12-14 10:32:18,559 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 627) no Hoare annotation was computed. [2022-12-14 10:32:18,559 INFO L895 garLoopResultBuilder]: At program point L609(lines 609 616) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0)) [2022-12-14 10:32:18,559 INFO L902 garLoopResultBuilder]: At program point L609-2(lines 609 616) the Hoare annotation is: true [2022-12-14 10:32:18,559 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2022-12-14 10:32:18,559 INFO L899 garLoopResultBuilder]: For program point L85-1(lines 85 91) no Hoare annotation was computed. [2022-12-14 10:32:18,559 INFO L895 garLoopResultBuilder]: At program point L110(lines 65 112) the Hoare annotation is: (let ((.cse10 (= 0 ~systemActive~0))) (let ((.cse8 (= ~methaneLevelCritical~0 0)) (.cse5 (= ~waterLevel~0 1)) (.cse7 (= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= ~methaneLevelCritical~0 1)) (.cse6 (not .cse10)) (.cse9 (= ~pumpRunning~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse4 .cse6 .cse9) (and .cse0 .cse1 .cse8 .cse2 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse4 .cse6 .cse9) (and .cse0 .cse1 .cse4 .cse10)))) [2022-12-14 10:32:18,559 INFO L895 garLoopResultBuilder]: At program point L77(line 77) the Hoare annotation is: (let ((.cse7 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (= ~waterLevel~0 1))) (let ((.cse3 (= ~methaneLevelCritical~0 1)) (.cse0 (or (and (= 2 ~waterLevel~0) .cse7) (and .cse7 .cse8))) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 1)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= ~methAndRunningLastTime~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse2 .cse3 .cse7 .cse8) (and .cse5 .cse6 .cse9 .cse2 .cse7 .cse8) (and .cse0 .cse9 .cse1 .cse2 .cse4) (and .cse5 .cse6 .cse7 (= 0 ~systemActive~0))))) [2022-12-14 10:32:18,559 INFO L895 garLoopResultBuilder]: At program point L334(line 334) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2022-12-14 10:32:18,559 INFO L899 garLoopResultBuilder]: For program point L66(lines 65 112) no Hoare annotation was computed. [2022-12-14 10:32:18,559 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-12-14 10:32:18,559 INFO L899 garLoopResultBuilder]: For program point L95(lines 95 108) no Hoare annotation was computed. [2022-12-14 10:32:18,559 INFO L895 garLoopResultBuilder]: At program point L87(line 87) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 1)) (.cse0 (= 2 ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 1)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse8 (= ~waterLevel~0 1)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse7 (<= 2 ~waterLevel~0) .cse1 .cse3 (<= ~waterLevel~0 2)) (and .cse5 .cse6 .cse0 .cse1 .cse2 .cse3) (and .cse5 .cse6 .cse1 .cse2 .cse3 .cse8) (and .cse0 .cse7 .cse1 .cse3 .cse4) (and .cse5 .cse6 .cse7 .cse1 .cse3 .cse8) (and .cse5 .cse6 .cse3 (= 0 ~systemActive~0)))) [2022-12-14 10:32:18,559 INFO L902 garLoopResultBuilder]: At program point L116(lines 55 120) the Hoare annotation is: true [2022-12-14 10:32:18,560 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 81) no Hoare annotation was computed. [2022-12-14 10:32:18,560 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 75 81) no Hoare annotation was computed. [2022-12-14 10:32:18,560 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(line -1) the Hoare annotation is: true [2022-12-14 10:32:18,560 INFO L895 garLoopResultBuilder]: At program point L113(lines 64 114) the Hoare annotation is: false [2022-12-14 10:32:18,560 INFO L899 garLoopResultBuilder]: For program point L332(lines 332 338) no Hoare annotation was computed. [2022-12-14 10:32:18,560 INFO L895 garLoopResultBuilder]: At program point L332-1(lines 332 338) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (not (= 0 ~systemActive~0))) (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1))) [2022-12-14 10:32:18,560 INFO L899 garLoopResultBuilder]: For program point L101(lines 101 107) no Hoare annotation was computed. [2022-12-14 10:32:18,560 INFO L895 garLoopResultBuilder]: At program point L101-2(lines 95 108) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 1)) (.cse4 (= ~pumpRunning~0 1)) (.cse7 (= ~waterLevel~0 1)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse0 (= 2 ~waterLevel~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse0 .cse1 .cse2 .cse3) (and .cse5 .cse6 .cse1 .cse2 .cse3 .cse7) (and .cse0 .cse8 .cse1 .cse3 .cse4) (and .cse5 .cse6 .cse8 .cse1 .cse3 .cse7) (and .cse5 .cse3 (= 0 ~systemActive~0)) (and .cse5 .cse6 .cse0 .cse8 .cse1 .cse3))) [2022-12-14 10:32:18,560 INFO L895 garLoopResultBuilder]: At program point L186(line 186) the Hoare annotation is: (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= ~waterLevel~0 1))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 2 ~waterLevel~0))) (.cse6 (not (<= ~waterLevel~0 2))) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse5 .cse3 .cse6 .cse4) (or .cse0 .cse1 .cse2 .cse7 .cse4) (or .cse1 .cse2 .cse5 .cse6 .cse7 .cse4))) [2022-12-14 10:32:18,560 INFO L899 garLoopResultBuilder]: For program point L186-1(lines 167 191) no Hoare annotation was computed. [2022-12-14 10:32:18,560 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 167 191) the Hoare annotation is: (let ((.cse7 (not (= ~waterLevel~0 1))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 2 ~waterLevel~0))) (.cse5 (not (<= ~waterLevel~0 2))) (.cse8 (not (= ~methaneLevelCritical~0 1))) (.cse6 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse0 .cse1 .cse2 .cse8 .cse6) (or .cse7 .cse0 .cse1 .cse2 .cse4 .cse6) (or .cse0 .cse1 .cse2 .cse3 .cse5 .cse8 .cse6))) [2022-12-14 10:32:18,560 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 167 191) no Hoare annotation was computed. [2022-12-14 10:32:18,560 INFO L895 garLoopResultBuilder]: At program point L181(line 181) the Hoare annotation is: (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= ~waterLevel~0 1))) (.cse4 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 2 ~waterLevel~0))) (.cse7 (not (<= ~waterLevel~0 2))) (.cse8 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse6 .cse3 .cse7 .cse5) (or .cse0 .cse1 .cse2 .cse4 .cse8 .cse5) (or .cse1 .cse2 .cse6 .cse7 .cse8 .cse5))) [2022-12-14 10:32:18,560 INFO L895 garLoopResultBuilder]: At program point L175(lines 175 183) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 0))) (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= ~waterLevel~0 1))) (.cse4 (and .cse10 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (.cse6 (and .cse10 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 1))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 2 ~waterLevel~0))) (.cse8 (not (<= ~waterLevel~0 2))) (.cse9 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse1 .cse2 .cse7 .cse3 .cse8 .cse5) (or .cse0 .cse1 .cse2 .cse4 .cse9 .cse5) (or .cse6 .cse1 .cse2 .cse7 .cse8 .cse9 .cse5)))) [2022-12-14 10:32:18,561 INFO L895 garLoopResultBuilder]: At program point L171(lines 171 188) the Hoare annotation is: (let ((.cse7 (not (= ~waterLevel~0 1))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 2 ~waterLevel~0))) (.cse5 (not (<= ~waterLevel~0 2))) (.cse8 (not (= ~methaneLevelCritical~0 1))) (.cse6 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse0 .cse1 .cse2 .cse8 .cse6) (or .cse7 .cse0 .cse1 .cse2 .cse4 .cse6) (or .cse0 .cse1 .cse2 .cse3 .cse5 .cse8 .cse6))) [2022-12-14 10:32:18,561 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 437 448) no Hoare annotation was computed. [2022-12-14 10:32:18,561 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 437 448) the Hoare annotation is: (let ((.cse2 (not (= ~pumpRunning~0 1))) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (= ~waterLevel~0 1)) (.cse8 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse2 .cse4 (not (= |old(~waterLevel~0)| 2)) .cse3) (or .cse5 .cse6 .cse0 .cse4 .cse7 .cse8) (or .cse5 .cse6 .cse0 .cse1 .cse7 .cse8) (or .cse5 .cse3 .cse7 .cse8 (not (= 0 ~systemActive~0))))) [2022-12-14 10:32:18,563 INFO L445 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:32:18,564 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-14 10:32:18,589 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 14.12 10:32:18 BoogieIcfgContainer [2022-12-14 10:32:18,589 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-14 10:32:18,589 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-14 10:32:18,589 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-14 10:32:18,589 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-14 10:32:18,590 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 10:31:46" (3/4) ... [2022-12-14 10:32:18,592 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-12-14 10:32:18,596 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-12-14 10:32:18,596 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-12-14 10:32:18,596 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-12-14 10:32:18,596 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-12-14 10:32:18,596 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-12-14 10:32:18,596 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-12-14 10:32:18,596 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-12-14 10:32:18,597 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-12-14 10:32:18,601 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 46 nodes and edges [2022-12-14 10:32:18,601 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 13 nodes and edges [2022-12-14 10:32:18,601 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-12-14 10:32:18,601 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-14 10:32:18,602 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-14 10:32:18,619 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && (((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || (pumpRunning == 0 && (\old(waterLevel) == waterLevel || waterLevel == 1)))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-12-14 10:32:18,619 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((waterLevel == 1 && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((((pumpRunning == \old(pumpRunning) && waterLevel == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && (!(\old(waterLevel) == 1) || waterLevel <= 1)) && !(0 == systemActive))) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel == 1) && (!(\old(waterLevel) == 1) || waterLevel <= 1)) && !(0 == systemActive))) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && (!(\old(waterLevel) == 1) || waterLevel <= 1)) && !(0 == systemActive))) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-12-14 10:32:18,619 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && (((((!(1 == systemActive) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-12-14 10:32:18,619 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || !(methAndRunningLastTime == 0)) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0))) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(methAndRunningLastTime == 0))) && ((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0)) [2022-12-14 10:32:18,620 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && (!(\old(waterLevel) == 1) || waterLevel <= 1))) || !(0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == 1) && tmp == methaneLevelCritical) && !(0 == systemActive))) || !(methaneLevelCritical == 1))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == 1) && tmp == methaneLevelCritical) && !(0 == systemActive)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || waterLevel == 1) || !(0 == systemActive))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(2 <= \old(waterLevel))) [2022-12-14 10:32:18,620 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && (!(\old(waterLevel) == 1) || waterLevel <= 1))) || !(0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1) && tmp == methaneLevelCritical))) && (((((!(1 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || tmp == 0) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1) && tmp == methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || waterLevel == 1) || !(0 == systemActive))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((\old(waterLevel) == waterLevel && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((\old(waterLevel) == waterLevel && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-12-14 10:32:18,620 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-12-14 10:32:18,621 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && tmp == 0)) || !(methAndRunningLastTime == 0)) && (((((((pumpRunning == 0 && tmp == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || !(methAndRunningLastTime == 0))) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && tmp == 0)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0))) && (((((((pumpRunning == 0 && tmp == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0)) [2022-12-14 10:32:18,634 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/witness.graphml [2022-12-14 10:32:18,634 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-14 10:32:18,634 INFO L158 Benchmark]: Toolchain (without parser) took 33342.24ms. Allocated memory was 153.1MB in the beginning and 356.5MB in the end (delta: 203.4MB). Free memory was 120.6MB in the beginning and 174.4MB in the end (delta: -53.8MB). Peak memory consumption was 150.3MB. Max. memory is 16.1GB. [2022-12-14 10:32:18,634 INFO L158 Benchmark]: CDTParser took 0.14ms. Allocated memory is still 153.1MB. Free memory is still 122.0MB. There was no memory consumed. Max. memory is 16.1GB. [2022-12-14 10:32:18,635 INFO L158 Benchmark]: CACSL2BoogieTranslator took 290.77ms. Allocated memory is still 153.1MB. Free memory was 120.6MB in the beginning and 101.9MB in the end (delta: 18.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-12-14 10:32:18,635 INFO L158 Benchmark]: Boogie Procedure Inliner took 32.20ms. Allocated memory is still 153.1MB. Free memory was 101.9MB in the beginning and 99.3MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-14 10:32:18,635 INFO L158 Benchmark]: Boogie Preprocessor took 20.13ms. Allocated memory is still 153.1MB. Free memory was 99.3MB in the beginning and 97.7MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-14 10:32:18,635 INFO L158 Benchmark]: RCFGBuilder took 388.82ms. Allocated memory is still 153.1MB. Free memory was 97.7MB in the beginning and 73.6MB in the end (delta: 24.1MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. [2022-12-14 10:32:18,635 INFO L158 Benchmark]: TraceAbstraction took 32560.87ms. Allocated memory was 153.1MB in the beginning and 356.5MB in the end (delta: 203.4MB). Free memory was 73.1MB in the beginning and 179.7MB in the end (delta: -106.6MB). Peak memory consumption was 173.3MB. Max. memory is 16.1GB. [2022-12-14 10:32:18,636 INFO L158 Benchmark]: Witness Printer took 44.66ms. Allocated memory is still 356.5MB. Free memory was 179.7MB in the beginning and 174.4MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-12-14 10:32:18,637 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14ms. Allocated memory is still 153.1MB. Free memory is still 122.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 290.77ms. Allocated memory is still 153.1MB. Free memory was 120.6MB in the beginning and 101.9MB in the end (delta: 18.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 32.20ms. Allocated memory is still 153.1MB. Free memory was 101.9MB in the beginning and 99.3MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 20.13ms. Allocated memory is still 153.1MB. Free memory was 99.3MB in the beginning and 97.7MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 388.82ms. Allocated memory is still 153.1MB. Free memory was 97.7MB in the beginning and 73.6MB in the end (delta: 24.1MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. * TraceAbstraction took 32560.87ms. Allocated memory was 153.1MB in the beginning and 356.5MB in the end (delta: 203.4MB). Free memory was 73.1MB in the beginning and 179.7MB in the end (delta: -106.6MB). Peak memory consumption was 173.3MB. Max. memory is 16.1GB. * Witness Printer took 44.66ms. Allocated memory is still 356.5MB. Free memory was 179.7MB in the beginning and 174.4MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 627]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 64 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 32.5s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 4.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2237 SdHoareTripleChecker+Valid, 2.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2215 mSDsluCounter, 3463 SdHoareTripleChecker+Invalid, 1.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2628 mSDsCounter, 1200 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4194 IncrementalHoareTripleChecker+Invalid, 5394 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1200 mSolverCounterUnsat, 835 mSDtfsCounter, 4194 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1150 GetRequests, 822 SyntacticMatches, 43 SemanticMatches, 285 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9241 ImplicationChecksByTransitivity, 13.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=625occurred in iteration=7, InterpolantAutomatonStates: 127, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 13 MinimizatonAttempts, 701 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 36 LocationsWithAnnotation, 1575 PreInvPairs, 1678 NumberOfFragments, 3611 HoareAnnotationTreeSize, 1575 FomulaSimplifications, 3336 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 36 FomulaSimplificationsInter, 21960 FormulaSimplificationTreeSizeReductionInter, 4.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 3.8s InterpolantComputationTime, 1061 NumberOfCodeBlocks, 1008 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 1339 ConstructedInterpolants, 0 QuantifiedInterpolants, 4313 SizeOfPredicates, 37 NumberOfNonLiveVariables, 1367 ConjunctsInSsa, 95 ConjunctsInUnsatCore, 20 InterpolantComputations, 10 PerfectInterpolantSequences, 844/994 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 362]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && (!(\old(waterLevel) == 1) || waterLevel <= 1))) || !(0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == 1) && tmp == methaneLevelCritical) && !(0 == systemActive))) || !(methaneLevelCritical == 1))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == 1) && tmp == methaneLevelCritical) && !(0 == systemActive)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || waterLevel == 1) || !(0 == systemActive))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive)) || (((((2 == waterLevel && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive))) || (((((2 == waterLevel && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && !(0 == systemActive)) && pumpRunning == 1)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 171]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || !(methAndRunningLastTime == 0)) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0))) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(methAndRunningLastTime == 0))) && ((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && (((((!(1 == systemActive) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || ((pumpRunning == 0 && tmp == 1) && waterLevel == 1)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && (!(\old(waterLevel) == 1) || waterLevel <= 1))) || !(0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1) && tmp == methaneLevelCritical))) && (((((!(1 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || tmp == 0) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1) && tmp == methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || waterLevel == 1) || !(0 == systemActive))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((\old(waterLevel) == waterLevel && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((\old(waterLevel) == waterLevel && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 1) && waterLevel == 1) && tmp == methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 197]: Loop Invariant Derived loop invariant: (((((((((((waterLevel == 1 && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((((pumpRunning == \old(pumpRunning) && waterLevel == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && (!(\old(waterLevel) == 1) || waterLevel <= 1)) && !(0 == systemActive))) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel == 1) && (!(\old(waterLevel) == 1) || waterLevel <= 1)) && !(0 == systemActive))) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || 0 == systemActive)) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && (!(\old(waterLevel) == 1) || waterLevel <= 1)) && !(0 == systemActive))) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && splverifierCounter == 0) && !(0 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) - InvariantResult [Line: 537]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 627]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 609]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 55]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 609]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 135]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && (((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || (pumpRunning == 0 && (\old(waterLevel) == waterLevel || waterLevel == 1)))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 527]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: (((((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && tmp == 0)) || !(methAndRunningLastTime == 0)) && (((((((pumpRunning == 0 && tmp == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || !(methAndRunningLastTime == 0))) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && tmp == 0)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0))) && (((((((pumpRunning == 0 && tmp == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0)) RESULT: Ultimate proved your program to be correct! [2022-12-14 10:32:18,664 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9b72f4b2-2fa0-47ea-934e-efb178968628/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE