./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1f55fffdfb523946c08e4798dfd7a981dcf70594f408e958cce4b1b6e97bd924 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 05:48:23,899 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 05:48:23,900 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 05:48:23,913 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 05:48:23,914 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 05:48:23,914 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 05:48:23,915 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 05:48:23,916 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 05:48:23,917 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 05:48:23,918 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 05:48:23,918 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 05:48:23,919 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 05:48:23,919 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 05:48:23,920 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 05:48:23,920 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 05:48:23,921 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 05:48:23,922 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 05:48:23,922 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 05:48:23,923 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 05:48:23,924 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 05:48:23,925 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 05:48:23,926 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 05:48:23,927 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 05:48:23,928 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 05:48:23,931 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 05:48:23,932 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 05:48:23,932 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 05:48:23,933 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 05:48:23,933 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 05:48:23,934 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 05:48:23,934 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 05:48:23,935 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 05:48:23,935 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 05:48:23,936 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 05:48:23,937 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 05:48:23,937 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 05:48:23,938 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 05:48:23,938 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 05:48:23,938 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 05:48:23,939 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 05:48:23,939 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 05:48:23,940 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-12-14 05:48:23,961 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 05:48:23,961 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 05:48:23,961 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 05:48:23,962 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 05:48:23,962 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 05:48:23,962 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 05:48:23,963 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 05:48:23,963 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 05:48:23,963 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 05:48:23,963 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-12-14 05:48:23,963 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 05:48:23,964 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 05:48:23,964 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-12-14 05:48:23,964 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-12-14 05:48:23,964 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 05:48:23,964 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-12-14 05:48:23,965 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-12-14 05:48:23,965 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-12-14 05:48:23,965 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 05:48:23,966 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 05:48:23,966 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 05:48:23,966 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 05:48:23,966 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 05:48:23,966 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-12-14 05:48:23,967 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 05:48:23,967 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-12-14 05:48:23,967 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 05:48:23,967 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-14 05:48:23,967 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 05:48:23,967 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-12-14 05:48:23,968 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 05:48:23,968 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 05:48:23,968 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 05:48:23,968 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 05:48:23,968 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-12-14 05:48:23,969 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 05:48:23,969 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-12-14 05:48:23,969 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-12-14 05:48:23,969 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-14 05:48:23,969 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-12-14 05:48:23,970 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 05:48:23,970 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1f55fffdfb523946c08e4798dfd7a981dcf70594f408e958cce4b1b6e97bd924 [2022-12-14 05:48:24,156 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 05:48:24,177 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 05:48:24,179 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 05:48:24,180 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 05:48:24,181 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 05:48:24,182 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c [2022-12-14 05:48:26,775 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 05:48:26,921 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 05:48:26,921 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c [2022-12-14 05:48:26,929 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/data/5afb23f9d/a42ac6641fcf48578c49eb772693ea64/FLAG66d98437b [2022-12-14 05:48:26,942 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/data/5afb23f9d/a42ac6641fcf48578c49eb772693ea64 [2022-12-14 05:48:26,943 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 05:48:26,944 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 05:48:26,945 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 05:48:26,945 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 05:48:26,949 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 05:48:26,950 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 05:48:26" (1/1) ... [2022-12-14 05:48:26,950 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5603c86a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:48:26, skipping insertion in model container [2022-12-14 05:48:26,951 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 05:48:26" (1/1) ... [2022-12-14 05:48:26,958 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 05:48:26,994 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 05:48:27,102 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c[1605,1618] [2022-12-14 05:48:27,175 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 05:48:27,183 INFO L203 MainTranslator]: Completed pre-run [2022-12-14 05:48:27,193 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c[1605,1618] [2022-12-14 05:48:27,227 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 05:48:27,239 INFO L208 MainTranslator]: Completed translation [2022-12-14 05:48:27,239 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:48:27 WrapperNode [2022-12-14 05:48:27,239 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 05:48:27,240 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-14 05:48:27,240 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-14 05:48:27,240 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-14 05:48:27,246 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:48:27" (1/1) ... [2022-12-14 05:48:27,254 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:48:27" (1/1) ... [2022-12-14 05:48:27,270 INFO L138 Inliner]: procedures = 57, calls = 103, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 221 [2022-12-14 05:48:27,271 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-14 05:48:27,271 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-14 05:48:27,271 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-14 05:48:27,271 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-14 05:48:27,278 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:48:27" (1/1) ... [2022-12-14 05:48:27,278 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:48:27" (1/1) ... [2022-12-14 05:48:27,280 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:48:27" (1/1) ... [2022-12-14 05:48:27,280 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:48:27" (1/1) ... [2022-12-14 05:48:27,283 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:48:27" (1/1) ... [2022-12-14 05:48:27,286 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:48:27" (1/1) ... [2022-12-14 05:48:27,287 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:48:27" (1/1) ... [2022-12-14 05:48:27,288 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:48:27" (1/1) ... [2022-12-14 05:48:27,289 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-14 05:48:27,290 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-14 05:48:27,290 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-14 05:48:27,290 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-14 05:48:27,291 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:48:27" (1/1) ... [2022-12-14 05:48:27,296 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 05:48:27,304 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 05:48:27,313 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-14 05:48:27,315 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-14 05:48:27,341 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-14 05:48:27,342 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-12-14 05:48:27,342 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-12-14 05:48:27,342 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-12-14 05:48:27,342 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-12-14 05:48:27,342 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-12-14 05:48:27,342 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-12-14 05:48:27,342 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-12-14 05:48:27,342 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-12-14 05:48:27,342 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-12-14 05:48:27,342 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-12-14 05:48:27,342 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-12-14 05:48:27,343 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-12-14 05:48:27,343 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-12-14 05:48:27,343 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-12-14 05:48:27,343 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-12-14 05:48:27,343 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-12-14 05:48:27,343 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-14 05:48:27,343 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-12-14 05:48:27,343 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-12-14 05:48:27,343 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-14 05:48:27,343 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-14 05:48:27,406 INFO L235 CfgBuilder]: Building ICFG [2022-12-14 05:48:27,408 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-14 05:48:27,627 INFO L276 CfgBuilder]: Performing block encoding [2022-12-14 05:48:27,722 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-14 05:48:27,722 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-12-14 05:48:27,725 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:48:27 BoogieIcfgContainer [2022-12-14 05:48:27,725 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-14 05:48:27,728 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-14 05:48:27,728 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-14 05:48:27,731 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-14 05:48:27,731 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 05:48:26" (1/3) ... [2022-12-14 05:48:27,732 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1ea2bc33 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 05:48:27, skipping insertion in model container [2022-12-14 05:48:27,732 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:48:27" (2/3) ... [2022-12-14 05:48:27,733 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1ea2bc33 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 05:48:27, skipping insertion in model container [2022-12-14 05:48:27,733 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:48:27" (3/3) ... [2022-12-14 05:48:27,734 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product53.cil.c [2022-12-14 05:48:27,748 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-14 05:48:27,748 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-12-14 05:48:27,783 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-14 05:48:27,788 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5a3d6912, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-12-14 05:48:27,788 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-12-14 05:48:27,791 INFO L276 IsEmpty]: Start isEmpty. Operand has 69 states, 42 states have (on average 1.4285714285714286) internal successors, (60), 52 states have internal predecessors, (60), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-12-14 05:48:27,798 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-12-14 05:48:27,798 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:48:27,798 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:48:27,799 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:48:27,803 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:48:27,803 INFO L85 PathProgramCache]: Analyzing trace with hash 996103182, now seen corresponding path program 1 times [2022-12-14 05:48:27,813 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:48:27,813 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1582719010] [2022-12-14 05:48:27,814 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:48:27,814 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:48:27,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:48:27,959 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 05:48:27,960 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:48:27,960 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1582719010] [2022-12-14 05:48:27,961 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1582719010] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 05:48:27,961 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 05:48:27,961 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 05:48:27,963 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2019388433] [2022-12-14 05:48:27,963 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 05:48:27,967 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-12-14 05:48:27,968 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 05:48:27,994 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-12-14 05:48:27,994 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 05:48:27,996 INFO L87 Difference]: Start difference. First operand has 69 states, 42 states have (on average 1.4285714285714286) internal successors, (60), 52 states have internal predecessors, (60), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 05:48:28,060 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 05:48:28,060 INFO L93 Difference]: Finished difference Result 136 states and 185 transitions. [2022-12-14 05:48:28,062 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-12-14 05:48:28,062 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-12-14 05:48:28,063 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 05:48:28,070 INFO L225 Difference]: With dead ends: 136 [2022-12-14 05:48:28,070 INFO L226 Difference]: Without dead ends: 64 [2022-12-14 05:48:28,073 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 05:48:28,076 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 71 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 05:48:28,077 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 71 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 05:48:28,089 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2022-12-14 05:48:28,105 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 64. [2022-12-14 05:48:28,106 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 39 states have (on average 1.3333333333333333) internal successors, (52), 48 states have internal predecessors, (52), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-12-14 05:48:28,108 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 83 transitions. [2022-12-14 05:48:28,109 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 83 transitions. Word has length 17 [2022-12-14 05:48:28,109 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 05:48:28,109 INFO L495 AbstractCegarLoop]: Abstraction has 64 states and 83 transitions. [2022-12-14 05:48:28,110 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 05:48:28,110 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 83 transitions. [2022-12-14 05:48:28,112 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-12-14 05:48:28,112 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:48:28,112 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:48:28,112 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-14 05:48:28,113 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:48:28,113 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:48:28,113 INFO L85 PathProgramCache]: Analyzing trace with hash 1657805293, now seen corresponding path program 1 times [2022-12-14 05:48:28,114 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:48:28,114 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [884249895] [2022-12-14 05:48:28,114 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:48:28,114 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:48:28,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:48:28,198 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 05:48:28,199 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:48:28,199 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [884249895] [2022-12-14 05:48:28,199 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [884249895] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 05:48:28,199 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 05:48:28,199 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 05:48:28,200 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1275626458] [2022-12-14 05:48:28,200 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 05:48:28,201 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 05:48:28,201 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 05:48:28,202 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 05:48:28,202 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 05:48:28,202 INFO L87 Difference]: Start difference. First operand 64 states and 83 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 05:48:28,239 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 05:48:28,239 INFO L93 Difference]: Finished difference Result 105 states and 137 transitions. [2022-12-14 05:48:28,240 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 05:48:28,240 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-12-14 05:48:28,240 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 05:48:28,241 INFO L225 Difference]: With dead ends: 105 [2022-12-14 05:48:28,241 INFO L226 Difference]: Without dead ends: 56 [2022-12-14 05:48:28,242 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 05:48:28,243 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 7 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 05:48:28,243 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 105 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 05:48:28,244 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2022-12-14 05:48:28,250 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 56. [2022-12-14 05:48:28,250 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 34 states have (on average 1.3529411764705883) internal successors, (46), 43 states have internal predecessors, (46), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-12-14 05:48:28,252 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 72 transitions. [2022-12-14 05:48:28,252 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 72 transitions. Word has length 18 [2022-12-14 05:48:28,252 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 05:48:28,252 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 72 transitions. [2022-12-14 05:48:28,252 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 05:48:28,253 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 72 transitions. [2022-12-14 05:48:28,253 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-12-14 05:48:28,253 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:48:28,254 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:48:28,254 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-14 05:48:28,254 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:48:28,254 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:48:28,254 INFO L85 PathProgramCache]: Analyzing trace with hash 1649027138, now seen corresponding path program 1 times [2022-12-14 05:48:28,255 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:48:28,255 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [255963150] [2022-12-14 05:48:28,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:48:28,255 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:48:28,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:48:28,366 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 05:48:28,366 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:48:28,367 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [255963150] [2022-12-14 05:48:28,367 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [255963150] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 05:48:28,367 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 05:48:28,367 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 05:48:28,367 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1070558911] [2022-12-14 05:48:28,367 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 05:48:28,368 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 05:48:28,368 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 05:48:28,368 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 05:48:28,369 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 05:48:28,369 INFO L87 Difference]: Start difference. First operand 56 states and 72 transitions. Second operand has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 05:48:28,452 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 05:48:28,452 INFO L93 Difference]: Finished difference Result 110 states and 143 transitions. [2022-12-14 05:48:28,453 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 05:48:28,453 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2022-12-14 05:48:28,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 05:48:28,454 INFO L225 Difference]: With dead ends: 110 [2022-12-14 05:48:28,454 INFO L226 Difference]: Without dead ends: 56 [2022-12-14 05:48:28,455 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 05:48:28,456 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 68 mSDsluCounter, 23 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 75 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 05:48:28,457 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 75 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 05:48:28,457 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2022-12-14 05:48:28,466 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 56. [2022-12-14 05:48:28,466 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 43 states have internal predecessors, (45), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-12-14 05:48:28,467 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 71 transitions. [2022-12-14 05:48:28,468 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 71 transitions. Word has length 20 [2022-12-14 05:48:28,468 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 05:48:28,468 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 71 transitions. [2022-12-14 05:48:28,468 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 05:48:28,468 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 71 transitions. [2022-12-14 05:48:28,469 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-12-14 05:48:28,469 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:48:28,470 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:48:28,470 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-14 05:48:28,470 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:48:28,471 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:48:28,471 INFO L85 PathProgramCache]: Analyzing trace with hash -876669846, now seen corresponding path program 1 times [2022-12-14 05:48:28,471 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:48:28,471 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [976729563] [2022-12-14 05:48:28,471 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:48:28,472 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:48:28,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:48:28,567 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 05:48:28,567 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:48:28,568 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [976729563] [2022-12-14 05:48:28,568 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [976729563] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 05:48:28,568 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1866947660] [2022-12-14 05:48:28,568 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:48:28,568 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 05:48:28,568 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 05:48:28,569 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 05:48:28,570 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-14 05:48:28,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:48:28,631 INFO L263 TraceCheckSpWp]: Trace formula consists of 192 conjuncts, 7 conjunts are in the unsatisfiable core [2022-12-14 05:48:28,636 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 05:48:28,676 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-12-14 05:48:28,676 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 05:48:28,677 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1866947660] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 05:48:28,677 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 05:48:28,677 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [6] total 7 [2022-12-14 05:48:28,677 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1083475440] [2022-12-14 05:48:28,677 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 05:48:28,677 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 05:48:28,677 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 05:48:28,678 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 05:48:28,678 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-14 05:48:28,678 INFO L87 Difference]: Start difference. First operand 56 states and 71 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-12-14 05:48:28,726 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 05:48:28,726 INFO L93 Difference]: Finished difference Result 149 states and 194 transitions. [2022-12-14 05:48:28,726 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 05:48:28,726 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 30 [2022-12-14 05:48:28,727 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 05:48:28,728 INFO L225 Difference]: With dead ends: 149 [2022-12-14 05:48:28,728 INFO L226 Difference]: Without dead ends: 95 [2022-12-14 05:48:28,729 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 30 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-14 05:48:28,729 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 43 mSDsluCounter, 46 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 43 SdHoareTripleChecker+Valid, 122 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 05:48:28,730 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [43 Valid, 122 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 05:48:28,730 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95 states. [2022-12-14 05:48:28,740 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95 to 93. [2022-12-14 05:48:28,740 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 60 states have (on average 1.2666666666666666) internal successors, (76), 68 states have internal predecessors, (76), 17 states have call successors, (17), 15 states have call predecessors, (17), 15 states have return successors, (23), 15 states have call predecessors, (23), 17 states have call successors, (23) [2022-12-14 05:48:28,741 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 116 transitions. [2022-12-14 05:48:28,741 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 116 transitions. Word has length 30 [2022-12-14 05:48:28,741 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 05:48:28,741 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 116 transitions. [2022-12-14 05:48:28,741 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-12-14 05:48:28,742 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 116 transitions. [2022-12-14 05:48:28,742 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-12-14 05:48:28,742 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:48:28,742 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:48:28,748 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-14 05:48:28,943 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 05:48:28,944 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:48:28,944 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:48:28,944 INFO L85 PathProgramCache]: Analyzing trace with hash 708793469, now seen corresponding path program 1 times [2022-12-14 05:48:28,945 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:48:28,945 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1848244414] [2022-12-14 05:48:28,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:48:28,945 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:48:28,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:48:29,112 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 05:48:29,112 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:48:29,112 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1848244414] [2022-12-14 05:48:29,112 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1848244414] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 05:48:29,112 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 05:48:29,112 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-14 05:48:29,113 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [73176510] [2022-12-14 05:48:29,113 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 05:48:29,113 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 05:48:29,113 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 05:48:29,114 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 05:48:29,114 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-14 05:48:29,114 INFO L87 Difference]: Start difference. First operand 93 states and 116 transitions. Second operand has 6 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-14 05:48:29,240 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 05:48:29,241 INFO L93 Difference]: Finished difference Result 271 states and 345 transitions. [2022-12-14 05:48:29,241 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-12-14 05:48:29,241 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 33 [2022-12-14 05:48:29,241 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 05:48:29,243 INFO L225 Difference]: With dead ends: 271 [2022-12-14 05:48:29,243 INFO L226 Difference]: Without dead ends: 180 [2022-12-14 05:48:29,244 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-12-14 05:48:29,245 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 48 mSDsluCounter, 225 mSDsCounter, 0 mSdLazyCounter, 111 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 292 SdHoareTripleChecker+Invalid, 112 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 111 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 05:48:29,245 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 292 Invalid, 112 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 05:48:29,246 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2022-12-14 05:48:29,273 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 172. [2022-12-14 05:48:29,274 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 172 states, 111 states have (on average 1.2342342342342343) internal successors, (137), 124 states have internal predecessors, (137), 32 states have call successors, (32), 28 states have call predecessors, (32), 28 states have return successors, (44), 28 states have call predecessors, (44), 32 states have call successors, (44) [2022-12-14 05:48:29,275 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 213 transitions. [2022-12-14 05:48:29,275 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 213 transitions. Word has length 33 [2022-12-14 05:48:29,276 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 05:48:29,276 INFO L495 AbstractCegarLoop]: Abstraction has 172 states and 213 transitions. [2022-12-14 05:48:29,276 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-14 05:48:29,276 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 213 transitions. [2022-12-14 05:48:29,277 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-12-14 05:48:29,277 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:48:29,277 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:48:29,278 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-14 05:48:29,278 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:48:29,278 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:48:29,278 INFO L85 PathProgramCache]: Analyzing trace with hash 137333065, now seen corresponding path program 1 times [2022-12-14 05:48:29,279 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:48:29,279 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [952226443] [2022-12-14 05:48:29,279 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:48:29,279 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:48:29,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:48:29,328 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 05:48:29,329 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:48:29,329 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [952226443] [2022-12-14 05:48:29,329 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [952226443] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 05:48:29,329 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 05:48:29,329 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 05:48:29,329 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1357935314] [2022-12-14 05:48:29,329 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 05:48:29,330 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 05:48:29,330 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 05:48:29,330 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 05:48:29,330 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 05:48:29,331 INFO L87 Difference]: Start difference. First operand 172 states and 213 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-14 05:48:29,393 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 05:48:29,393 INFO L93 Difference]: Finished difference Result 263 states and 335 transitions. [2022-12-14 05:48:29,393 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 05:48:29,393 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 36 [2022-12-14 05:48:29,394 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 05:48:29,396 INFO L225 Difference]: With dead ends: 263 [2022-12-14 05:48:29,396 INFO L226 Difference]: Without dead ends: 261 [2022-12-14 05:48:29,397 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 05:48:29,397 INFO L413 NwaCegarLoop]: 78 mSDtfsCounter, 47 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 34 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 131 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 34 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 05:48:29,397 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 131 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 34 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 05:48:29,398 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 261 states. [2022-12-14 05:48:29,424 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 261 to 261. [2022-12-14 05:48:29,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 261 states, 168 states have (on average 1.2380952380952381) internal successors, (208), 188 states have internal predecessors, (208), 49 states have call successors, (49), 43 states have call predecessors, (49), 43 states have return successors, (75), 43 states have call predecessors, (75), 49 states have call successors, (75) [2022-12-14 05:48:29,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 261 states to 261 states and 332 transitions. [2022-12-14 05:48:29,426 INFO L78 Accepts]: Start accepts. Automaton has 261 states and 332 transitions. Word has length 36 [2022-12-14 05:48:29,426 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 05:48:29,426 INFO L495 AbstractCegarLoop]: Abstraction has 261 states and 332 transitions. [2022-12-14 05:48:29,426 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-14 05:48:29,426 INFO L276 IsEmpty]: Start isEmpty. Operand 261 states and 332 transitions. [2022-12-14 05:48:29,428 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-12-14 05:48:29,428 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:48:29,428 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:48:29,428 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-12-14 05:48:29,428 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:48:29,429 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:48:29,429 INFO L85 PathProgramCache]: Analyzing trace with hash -1989289965, now seen corresponding path program 1 times [2022-12-14 05:48:29,429 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:48:29,429 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1675899429] [2022-12-14 05:48:29,429 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:48:29,429 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:48:29,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:48:29,490 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 05:48:29,490 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:48:29,490 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1675899429] [2022-12-14 05:48:29,490 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1675899429] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 05:48:29,490 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 05:48:29,490 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 05:48:29,490 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1428210518] [2022-12-14 05:48:29,490 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 05:48:29,491 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 05:48:29,491 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 05:48:29,492 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 05:48:29,492 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 05:48:29,492 INFO L87 Difference]: Start difference. First operand 261 states and 332 transitions. Second operand has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-12-14 05:48:29,567 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 05:48:29,568 INFO L93 Difference]: Finished difference Result 425 states and 547 transitions. [2022-12-14 05:48:29,568 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 05:48:29,568 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 65 [2022-12-14 05:48:29,569 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 05:48:29,571 INFO L225 Difference]: With dead ends: 425 [2022-12-14 05:48:29,571 INFO L226 Difference]: Without dead ends: 245 [2022-12-14 05:48:29,572 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 05:48:29,573 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 45 mSDsluCounter, 117 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 05:48:29,573 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [45 Valid, 190 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 05:48:29,574 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 245 states. [2022-12-14 05:48:29,591 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 245 to 233. [2022-12-14 05:48:29,591 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 233 states, 148 states have (on average 1.2297297297297298) internal successors, (182), 167 states have internal predecessors, (182), 45 states have call successors, (45), 39 states have call predecessors, (45), 39 states have return successors, (65), 38 states have call predecessors, (65), 45 states have call successors, (65) [2022-12-14 05:48:29,592 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 233 states to 233 states and 292 transitions. [2022-12-14 05:48:29,592 INFO L78 Accepts]: Start accepts. Automaton has 233 states and 292 transitions. Word has length 65 [2022-12-14 05:48:29,592 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 05:48:29,593 INFO L495 AbstractCegarLoop]: Abstraction has 233 states and 292 transitions. [2022-12-14 05:48:29,593 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-12-14 05:48:29,593 INFO L276 IsEmpty]: Start isEmpty. Operand 233 states and 292 transitions. [2022-12-14 05:48:29,594 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-12-14 05:48:29,594 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:48:29,594 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:48:29,595 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-12-14 05:48:29,595 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:48:29,595 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:48:29,595 INFO L85 PathProgramCache]: Analyzing trace with hash -1826274272, now seen corresponding path program 1 times [2022-12-14 05:48:29,595 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:48:29,595 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [574086043] [2022-12-14 05:48:29,595 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:48:29,595 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:48:29,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:48:29,761 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 11 proven. 6 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 05:48:29,762 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:48:29,762 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [574086043] [2022-12-14 05:48:29,762 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [574086043] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 05:48:29,762 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1362145830] [2022-12-14 05:48:29,762 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:48:29,762 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 05:48:29,762 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 05:48:29,763 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 05:48:29,764 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-14 05:48:29,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:48:29,838 INFO L263 TraceCheckSpWp]: Trace formula consists of 332 conjuncts, 6 conjunts are in the unsatisfiable core [2022-12-14 05:48:29,840 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 05:48:29,923 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 24 proven. 4 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-12-14 05:48:29,923 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 05:48:30,043 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 20 proven. 4 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 05:48:30,044 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1362145830] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 05:48:30,044 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1466722323] [2022-12-14 05:48:30,064 INFO L159 IcfgInterpreter]: Started Sifa with 43 locations of interest [2022-12-14 05:48:30,064 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 05:48:30,068 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 05:48:30,074 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 05:48:30,074 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 05:48:31,536 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 32 for LOIs [2022-12-14 05:48:31,661 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 54 for LOIs [2022-12-14 05:48:31,777 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 28 for LOIs [2022-12-14 05:48:31,794 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 51 for LOIs [2022-12-14 05:48:31,801 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 45 for LOIs [2022-12-14 05:48:31,806 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 05:48:35,685 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4329#(and (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|) (<= 0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~4#1|) (= ~head~0.offset 0) (<= 2 ~waterLevel~0) (= 1 ~systemActive~0) (<= 0 ~methAndRunningLastTime~0) (<= 2 |old(~waterLevel~0)|) (<= 0 |old(~methAndRunningLastTime~0)|) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| ~methaneLevelCritical~0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 2147483647) (<= 0 ~methaneLevelCritical~0) (= ~head~0.base 0) (= |#NULL.offset| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~4#1|) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0)) (not (= ~methAndRunningLastTime~0 0)) (<= 0 |#StackHeapBarrier|) (= ~pumpRunning~0 1) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-12-14 05:48:35,685 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 05:48:35,685 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 05:48:35,685 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 5, 5] total 14 [2022-12-14 05:48:35,685 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2020674641] [2022-12-14 05:48:35,685 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 05:48:35,686 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-12-14 05:48:35,686 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 05:48:35,686 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-12-14 05:48:35,687 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=197, Invalid=1695, Unknown=0, NotChecked=0, Total=1892 [2022-12-14 05:48:35,687 INFO L87 Difference]: Start difference. First operand 233 states and 292 transitions. Second operand has 14 states, 12 states have (on average 6.833333333333333) internal successors, (82), 12 states have internal predecessors, (82), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 6 states have call successors, (19) [2022-12-14 05:48:36,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 05:48:36,673 INFO L93 Difference]: Finished difference Result 625 states and 782 transitions. [2022-12-14 05:48:36,673 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-12-14 05:48:36,674 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 12 states have (on average 6.833333333333333) internal successors, (82), 12 states have internal predecessors, (82), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 6 states have call successors, (19) Word has length 73 [2022-12-14 05:48:36,674 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 05:48:36,677 INFO L225 Difference]: With dead ends: 625 [2022-12-14 05:48:36,677 INFO L226 Difference]: Without dead ends: 394 [2022-12-14 05:48:36,680 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 269 GetRequests, 189 SyntacticMatches, 11 SemanticMatches, 69 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1620 ImplicationChecksByTransitivity, 4.4s TimeCoverageRelationStatistics Valid=466, Invalid=4504, Unknown=0, NotChecked=0, Total=4970 [2022-12-14 05:48:36,681 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 482 mSDsluCounter, 200 mSDsCounter, 0 mSdLazyCounter, 1318 mSolverCounterSat, 274 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 488 SdHoareTripleChecker+Valid, 228 SdHoareTripleChecker+Invalid, 1592 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 274 IncrementalHoareTripleChecker+Valid, 1318 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-12-14 05:48:36,681 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [488 Valid, 228 Invalid, 1592 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [274 Valid, 1318 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-12-14 05:48:36,681 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 394 states. [2022-12-14 05:48:36,701 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 394 to 372. [2022-12-14 05:48:36,701 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 372 states, 240 states have (on average 1.1583333333333334) internal successors, (278), 266 states have internal predecessors, (278), 64 states have call successors, (64), 52 states have call predecessors, (64), 67 states have return successors, (83), 68 states have call predecessors, (83), 64 states have call successors, (83) [2022-12-14 05:48:36,702 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 372 states to 372 states and 425 transitions. [2022-12-14 05:48:36,703 INFO L78 Accepts]: Start accepts. Automaton has 372 states and 425 transitions. Word has length 73 [2022-12-14 05:48:36,703 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 05:48:36,703 INFO L495 AbstractCegarLoop]: Abstraction has 372 states and 425 transitions. [2022-12-14 05:48:36,703 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 12 states have (on average 6.833333333333333) internal successors, (82), 12 states have internal predecessors, (82), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 6 states have call successors, (19) [2022-12-14 05:48:36,703 INFO L276 IsEmpty]: Start isEmpty. Operand 372 states and 425 transitions. [2022-12-14 05:48:36,704 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2022-12-14 05:48:36,704 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:48:36,704 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:48:36,710 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-14 05:48:36,905 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 05:48:36,906 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:48:36,907 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:48:36,907 INFO L85 PathProgramCache]: Analyzing trace with hash 908365108, now seen corresponding path program 1 times [2022-12-14 05:48:36,907 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:48:36,907 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [525450498] [2022-12-14 05:48:36,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:48:36,907 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:48:36,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:48:37,111 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 9 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-12-14 05:48:37,111 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:48:37,111 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [525450498] [2022-12-14 05:48:37,112 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [525450498] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 05:48:37,112 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1488913353] [2022-12-14 05:48:37,112 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:48:37,112 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 05:48:37,112 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 05:48:37,113 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 05:48:37,114 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-14 05:48:37,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:48:37,175 INFO L263 TraceCheckSpWp]: Trace formula consists of 343 conjuncts, 23 conjunts are in the unsatisfiable core [2022-12-14 05:48:37,178 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 05:48:37,226 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-14 05:48:37,226 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 05:48:37,226 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1488913353] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 05:48:37,226 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 05:48:37,226 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [11] total 14 [2022-12-14 05:48:37,226 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2083553957] [2022-12-14 05:48:37,226 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 05:48:37,227 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-12-14 05:48:37,227 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 05:48:37,227 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-12-14 05:48:37,228 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2022-12-14 05:48:37,228 INFO L87 Difference]: Start difference. First operand 372 states and 425 transitions. Second operand has 9 states, 7 states have (on average 6.714285714285714) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (10), 2 states have call predecessors, (10), 4 states have return successors, (10), 4 states have call predecessors, (10), 2 states have call successors, (10) [2022-12-14 05:48:37,437 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 05:48:37,437 INFO L93 Difference]: Finished difference Result 827 states and 957 transitions. [2022-12-14 05:48:37,438 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-12-14 05:48:37,438 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 6.714285714285714) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (10), 2 states have call predecessors, (10), 4 states have return successors, (10), 4 states have call predecessors, (10), 2 states have call successors, (10) Word has length 79 [2022-12-14 05:48:37,438 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 05:48:37,439 INFO L225 Difference]: With dead ends: 827 [2022-12-14 05:48:37,439 INFO L226 Difference]: Without dead ends: 0 [2022-12-14 05:48:37,440 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 102 GetRequests, 83 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=72, Invalid=348, Unknown=0, NotChecked=0, Total=420 [2022-12-14 05:48:37,441 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 50 mSDsluCounter, 275 mSDsCounter, 0 mSdLazyCounter, 284 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 344 SdHoareTripleChecker+Invalid, 291 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 284 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 05:48:37,441 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 344 Invalid, 291 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 284 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 05:48:37,442 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-12-14 05:48:37,442 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-12-14 05:48:37,442 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 05:48:37,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-12-14 05:48:37,442 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 79 [2022-12-14 05:48:37,442 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 05:48:37,442 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-12-14 05:48:37,443 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 6.714285714285714) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (10), 2 states have call predecessors, (10), 4 states have return successors, (10), 4 states have call predecessors, (10), 2 states have call successors, (10) [2022-12-14 05:48:37,443 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-12-14 05:48:37,443 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-12-14 05:48:37,445 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-12-14 05:48:37,451 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-14 05:48:37,646 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 05:48:37,649 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-12-14 05:48:39,735 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 624 631) no Hoare annotation was computed. [2022-12-14 05:48:39,736 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 624 631) the Hoare annotation is: (or (not (<= 1 |old(~pumpRunning~0)|)) (= 0 ~systemActive~0) (<= |old(~pumpRunning~0)| ~pumpRunning~0)) [2022-12-14 05:48:39,736 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 531 537) no Hoare annotation was computed. [2022-12-14 05:48:39,736 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 531 537) the Hoare annotation is: true [2022-12-14 05:48:39,736 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 893 904) the Hoare annotation is: (let ((.cse0 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 (not (<= 1 ~pumpRunning~0)) .cse1))) [2022-12-14 05:48:39,736 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 893 904) no Hoare annotation was computed. [2022-12-14 05:48:39,736 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 905 913) the Hoare annotation is: true [2022-12-14 05:48:39,736 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 905 913) no Hoare annotation was computed. [2022-12-14 05:48:39,736 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 767 796) no Hoare annotation was computed. [2022-12-14 05:48:39,736 INFO L902 garLoopResultBuilder]: At program point L792(lines 767 796) the Hoare annotation is: true [2022-12-14 05:48:39,736 INFO L899 garLoopResultBuilder]: For program point L788(line 788) no Hoare annotation was computed. [2022-12-14 05:48:39,736 INFO L899 garLoopResultBuilder]: For program point L781(lines 781 785) no Hoare annotation was computed. [2022-12-14 05:48:39,736 INFO L902 garLoopResultBuilder]: At program point L781-1(lines 781 785) the Hoare annotation is: true [2022-12-14 05:48:39,736 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 767 796) the Hoare annotation is: true [2022-12-14 05:48:39,737 INFO L902 garLoopResultBuilder]: At program point L777-2(lines 777 791) the Hoare annotation is: true [2022-12-14 05:48:39,737 INFO L902 garLoopResultBuilder]: At program point L773(line 773) the Hoare annotation is: true [2022-12-14 05:48:39,737 INFO L899 garLoopResultBuilder]: For program point L773-1(line 773) no Hoare annotation was computed. [2022-12-14 05:48:39,737 INFO L895 garLoopResultBuilder]: At program point L605(line 605) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2) (or .cse1 (and (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0) (<= |old(~pumpRunning~0)| ~pumpRunning~0)) .cse2) (or (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2022-12-14 05:48:39,737 INFO L895 garLoopResultBuilder]: At program point L601(line 601) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0) (or (not (<= 1 |old(~pumpRunning~0)|)) (and (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0) (not (= |timeShift_processEnvironment_~tmp~6#1| 0)) (<= |old(~pumpRunning~0)| ~pumpRunning~0)) .cse0))) [2022-12-14 05:48:39,737 INFO L895 garLoopResultBuilder]: At program point L742(line 742) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse4 (= ~methaneLevelCritical~0 0)) (.cse8 (= ~pumpRunning~0 0)) (.cse2 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse9 (not .cse3))) (let ((.cse1 (and .cse8 .cse2 .cse9)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not .cse4))) (and (or .cse0 .cse1 (and .cse2 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) .cse3) (or .cse4 .cse0 .cse1 .cse3) (or .cse5 (and (<= 1 ~pumpRunning~0) .cse6) .cse7 (and .cse8 .cse9) .cse3) (or .cse5 .cse7 .cse6 .cse10 .cse3) (or .cse7 .cse6 .cse0 .cse10 .cse3))))) [2022-12-14 05:48:39,737 INFO L899 garLoopResultBuilder]: For program point L742-1(line 742) no Hoare annotation was computed. [2022-12-14 05:48:39,737 INFO L895 garLoopResultBuilder]: At program point L610(line 610) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0))) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0))) [2022-12-14 05:48:39,737 INFO L895 garLoopResultBuilder]: At program point L610-1(lines 591 615) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse4 (= ~methaneLevelCritical~0 0)) (.cse8 (= ~pumpRunning~0 0)) (.cse2 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse9 (not .cse3))) (let ((.cse1 (and .cse8 .cse2 .cse9)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not .cse4))) (and (or .cse0 .cse1 (and .cse2 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) .cse3) (or .cse4 .cse0 .cse1 .cse3) (or .cse5 (and (<= 1 ~pumpRunning~0) .cse6) .cse7 (and .cse8 .cse9) .cse3) (or .cse5 .cse7 .cse6 .cse10 .cse3) (or .cse7 .cse6 .cse0 .cse10 .cse3))))) [2022-12-14 05:48:39,737 INFO L899 garLoopResultBuilder]: For program point L511-1(lines 510 529) no Hoare annotation was computed. [2022-12-14 05:48:39,737 INFO L899 garLoopResultBuilder]: For program point L599(lines 599 607) no Hoare annotation was computed. [2022-12-14 05:48:39,738 INFO L895 garLoopResultBuilder]: At program point L54(line 54) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0))) [2022-12-14 05:48:39,738 INFO L899 garLoopResultBuilder]: For program point L595(lines 595 612) no Hoare annotation was computed. [2022-12-14 05:48:39,738 INFO L899 garLoopResultBuilder]: For program point L748(lines 748 758) no Hoare annotation was computed. [2022-12-14 05:48:39,738 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 507 530) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and (= ~pumpRunning~0 0) .cse2)) (or .cse3 .cse1 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) (or .cse0 .cse2 .cse3 .cse1))) [2022-12-14 05:48:39,738 INFO L895 garLoopResultBuilder]: At program point L744(lines 744 761) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse0 (= ~methaneLevelCritical~0 0)) (.cse7 (= ~pumpRunning~0 0)) (.cse9 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse8 (not .cse3))) (let ((.cse2 (and .cse7 .cse9 .cse8)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0)) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not .cse0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 (and (<= 1 ~pumpRunning~0) .cse5) .cse6 (and .cse7 .cse8) .cse3) (or (and .cse9 .cse10 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) .cse1 .cse2 .cse3) (or .cse4 .cse6 (and .cse5 .cse10) .cse11 .cse3) (or .cse6 .cse1 .cse11 .cse10 .cse3) (or .cse6 .cse5 .cse1 .cse11 .cse3))))) [2022-12-14 05:48:39,738 INFO L895 garLoopResultBuilder]: At program point L744-1(lines 736 764) the Hoare annotation is: (let ((.cse5 (= ~methaneLevelCritical~0 0))) (let ((.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (not .cse5)) (.cse7 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0)) (.cse2 (= 0 ~systemActive~0))) (and (or (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 (and .cse3 .cse4)) (let ((.cse6 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0))) (or (and .cse4 .cse5 .cse6 .cse7 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) .cse8 (and .cse3 .cse4 .cse6) .cse2)) (or .cse0 .cse1 (and .cse4 .cse7) .cse9 .cse2) (or .cse1 .cse8 .cse9 .cse7 .cse2)))) [2022-12-14 05:48:39,738 INFO L895 garLoopResultBuilder]: At program point L637(line 637) the Hoare annotation is: (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) (or .cse2 (= ~methAndRunningLastTime~0 0) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse1))) [2022-12-14 05:48:39,738 INFO L895 garLoopResultBuilder]: At program point L637-1(line 637) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse2 (and (= |timeShift_isMethaneAlarm_#t~ret34#1| ~methaneLevelCritical~0) (<= |old(~pumpRunning~0)| ~pumpRunning~0)) .cse1) (or .cse0 (= ~methAndRunningLastTime~0 0) .cse2 (not (= ~methaneLevelCritical~0 0)) .cse1))) [2022-12-14 05:48:39,738 INFO L899 garLoopResultBuilder]: For program point L749(lines 749 755) no Hoare annotation was computed. [2022-12-14 05:48:39,738 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 507 530) no Hoare annotation was computed. [2022-12-14 05:48:39,738 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-12-14 05:48:39,738 INFO L899 garLoopResultBuilder]: For program point L518-1(lines 518 524) no Hoare annotation was computed. [2022-12-14 05:48:39,739 INFO L899 garLoopResultBuilder]: For program point L93(lines 93 99) no Hoare annotation was computed. [2022-12-14 05:48:39,739 INFO L899 garLoopResultBuilder]: For program point L93-1(lines 93 99) no Hoare annotation was computed. [2022-12-14 05:48:39,739 INFO L902 garLoopResultBuilder]: At program point L122(lines 63 126) the Hoare annotation is: true [2022-12-14 05:48:39,739 INFO L895 garLoopResultBuilder]: At program point L85(line 85) the Hoare annotation is: (let ((.cse6 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse7 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1))) (.cse3 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse3 .cse4 .cse5) (and .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse7 .cse3 .cse4 .cse5))) [2022-12-14 05:48:39,739 INFO L895 garLoopResultBuilder]: At program point L119(lines 72 120) the Hoare annotation is: false [2022-12-14 05:48:39,739 INFO L899 garLoopResultBuilder]: For program point L74(lines 73 118) no Hoare annotation was computed. [2022-12-14 05:48:39,739 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-12-14 05:48:39,739 INFO L895 garLoopResultBuilder]: At program point L95(line 95) the Hoare annotation is: (let ((.cse6 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse7 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1))) (.cse3 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse3 .cse4 .cse5) (and .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse7 .cse3 .cse4 .cse5))) [2022-12-14 05:48:39,739 INFO L895 garLoopResultBuilder]: At program point L116(lines 73 118) the Hoare annotation is: (let ((.cse6 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse7 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1))) (.cse3 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse3 .cse4 .cse5) (and .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse7 .cse3 .cse4 .cse5))) [2022-12-14 05:48:39,739 INFO L899 garLoopResultBuilder]: For program point L83(lines 83 89) no Hoare annotation was computed. [2022-12-14 05:48:39,739 INFO L899 garLoopResultBuilder]: For program point L83-1(lines 83 89) no Hoare annotation was computed. [2022-12-14 05:48:39,739 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(line -1) the Hoare annotation is: true [2022-12-14 05:48:39,739 INFO L895 garLoopResultBuilder]: At program point L852(lines 852 859) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0) (= |ULTIMATE.start_main_~tmp~10#1| 1)) [2022-12-14 05:48:39,739 INFO L902 garLoopResultBuilder]: At program point L852-2(lines 852 859) the Hoare annotation is: true [2022-12-14 05:48:39,740 INFO L895 garLoopResultBuilder]: At program point L109-2(lines 103 114) the Hoare annotation is: (let ((.cse6 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse7 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1))) (.cse3 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse3 .cse4 .cse5) (and .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse7 .cse3 .cse4 .cse5))) [2022-12-14 05:48:39,740 INFO L895 garLoopResultBuilder]: At program point L543(lines 543 560) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse0 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-14 05:48:39,740 INFO L895 garLoopResultBuilder]: At program point L558(line 558) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse0 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-14 05:48:39,740 INFO L899 garLoopResultBuilder]: For program point L558-1(lines 539 563) no Hoare annotation was computed. [2022-12-14 05:48:39,740 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 539 563) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse0 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-14 05:48:39,740 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 539 563) no Hoare annotation was computed. [2022-12-14 05:48:39,740 INFO L895 garLoopResultBuilder]: At program point L553(line 553) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse0) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-14 05:48:39,740 INFO L895 garLoopResultBuilder]: At program point L547(lines 547 555) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse0) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-14 05:48:39,740 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 881 892) no Hoare annotation was computed. [2022-12-14 05:48:39,740 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 881 892) the Hoare annotation is: true [2022-12-14 05:48:39,740 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 565 589) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse0 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-14 05:48:39,740 INFO L895 garLoopResultBuilder]: At program point L579(line 579) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse0 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-14 05:48:39,740 INFO L895 garLoopResultBuilder]: At program point L575(line 575) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse0 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-14 05:48:39,740 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 565 589) no Hoare annotation was computed. [2022-12-14 05:48:39,741 INFO L899 garLoopResultBuilder]: For program point L573(lines 573 581) no Hoare annotation was computed. [2022-12-14 05:48:39,741 INFO L895 garLoopResultBuilder]: At program point L569(lines 569 586) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse0 (<= |old(~pumpRunning~0)| ~pumpRunning~0)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-14 05:48:39,741 INFO L895 garLoopResultBuilder]: At program point L584(line 584) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse0) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-14 05:48:39,741 INFO L899 garLoopResultBuilder]: For program point L584-1(lines 565 589) no Hoare annotation was computed. [2022-12-14 05:48:39,743 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:48:39,744 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-14 05:48:39,758 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 14.12 05:48:39 BoogieIcfgContainer [2022-12-14 05:48:39,758 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-14 05:48:39,759 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-14 05:48:39,759 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-14 05:48:39,759 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-14 05:48:39,759 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:48:27" (3/4) ... [2022-12-14 05:48:39,761 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-12-14 05:48:39,765 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-12-14 05:48:39,765 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-12-14 05:48:39,765 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-12-14 05:48:39,765 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-12-14 05:48:39,765 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-12-14 05:48:39,765 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-12-14 05:48:39,765 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-12-14 05:48:39,765 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-12-14 05:48:39,765 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-12-14 05:48:39,770 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2022-12-14 05:48:39,770 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 14 nodes and edges [2022-12-14 05:48:39,770 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-12-14 05:48:39,770 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-14 05:48:39,770 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-14 05:48:39,787 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == systemActive) && splverifierCounter == 0) && !(0 == systemActive)) || ((((1 <= pumpRunning && (!(\old(methaneLevelCritical) == 0) || methaneLevelCritical == 1)) && tmp == systemActive) && splverifierCounter == 0) && !(0 == systemActive))) || ((((1 <= pumpRunning && methaneLevelCritical == 0) && tmp == systemActive) && splverifierCounter == 0) && !(0 == systemActive))) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && (!(\old(methaneLevelCritical) == 0) || methaneLevelCritical == 1)) && tmp == systemActive) && splverifierCounter == 0) && !(0 == systemActive)) [2022-12-14 05:48:39,787 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || (pumpRunning == 0 && methAndRunningLastTime == 0)) && ((!(1 <= \old(pumpRunning)) || 0 == systemActive) || \old(pumpRunning) <= pumpRunning)) && (((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || 0 == systemActive) [2022-12-14 05:48:39,788 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && !(0 == systemActive))) || (tmp == methaneLevelCritical && \old(pumpRunning) <= pumpRunning)) || 0 == systemActive) && (((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && methAndRunningLastTime == 0)) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && !(0 == systemActive))) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-12-14 05:48:39,788 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || \old(pumpRunning) <= pumpRunning) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-12-14 05:48:39,788 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && !(0 == systemActive))) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && methAndRunningLastTime == 0)) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && !(0 == systemActive))) || 0 == systemActive)) && (((((tmp == methaneLevelCritical && tmp == 0) && \old(pumpRunning) <= pumpRunning) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || tmp == 0) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-12-14 05:48:39,788 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) && ((!(1 <= \old(pumpRunning)) || (aux-isMethaneLevelCritical()-aux == methaneLevelCritical && \old(pumpRunning) <= pumpRunning)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-12-14 05:48:39,788 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || \old(pumpRunning) <= pumpRunning) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-12-14 05:48:39,788 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || (pumpRunning == 0 && methAndRunningLastTime == 0)) && (((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && tmp == 0) && \old(pumpRunning) <= pumpRunning) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || tmp == 0) || 0 == systemActive) [2022-12-14 05:48:39,789 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) && (!(1 <= \old(pumpRunning)) || 0 == systemActive) [2022-12-14 05:48:39,789 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-12-14 05:48:39,804 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/witness.graphml [2022-12-14 05:48:39,804 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-14 05:48:39,804 INFO L158 Benchmark]: Toolchain (without parser) took 12859.84ms. Allocated memory was 132.1MB in the beginning and 232.8MB in the end (delta: 100.7MB). Free memory was 88.9MB in the beginning and 177.7MB in the end (delta: -88.8MB). Peak memory consumption was 15.0MB. Max. memory is 16.1GB. [2022-12-14 05:48:39,804 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 132.1MB. Free memory is still 102.1MB. There was no memory consumed. Max. memory is 16.1GB. [2022-12-14 05:48:39,805 INFO L158 Benchmark]: CACSL2BoogieTranslator took 294.37ms. Allocated memory is still 132.1MB. Free memory was 88.9MB in the beginning and 70.0MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-12-14 05:48:39,805 INFO L158 Benchmark]: Boogie Procedure Inliner took 30.46ms. Allocated memory is still 132.1MB. Free memory was 69.8MB in the beginning and 67.5MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-14 05:48:39,805 INFO L158 Benchmark]: Boogie Preprocessor took 18.47ms. Allocated memory is still 132.1MB. Free memory was 67.5MB in the beginning and 65.9MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. [2022-12-14 05:48:39,805 INFO L158 Benchmark]: RCFGBuilder took 434.92ms. Allocated memory was 132.1MB in the beginning and 159.4MB in the end (delta: 27.3MB). Free memory was 65.9MB in the beginning and 125.5MB in the end (delta: -59.5MB). Peak memory consumption was 31.7MB. Max. memory is 16.1GB. [2022-12-14 05:48:39,805 INFO L158 Benchmark]: TraceAbstraction took 12030.61ms. Allocated memory was 159.4MB in the beginning and 232.8MB in the end (delta: 73.4MB). Free memory was 124.5MB in the beginning and 183.0MB in the end (delta: -58.4MB). Peak memory consumption was 136.6MB. Max. memory is 16.1GB. [2022-12-14 05:48:39,806 INFO L158 Benchmark]: Witness Printer took 45.06ms. Allocated memory is still 232.8MB. Free memory was 183.0MB in the beginning and 177.7MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-12-14 05:48:39,807 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 132.1MB. Free memory is still 102.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 294.37ms. Allocated memory is still 132.1MB. Free memory was 88.9MB in the beginning and 70.0MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 30.46ms. Allocated memory is still 132.1MB. Free memory was 69.8MB in the beginning and 67.5MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 18.47ms. Allocated memory is still 132.1MB. Free memory was 67.5MB in the beginning and 65.9MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 434.92ms. Allocated memory was 132.1MB in the beginning and 159.4MB in the end (delta: 27.3MB). Free memory was 65.9MB in the beginning and 125.5MB in the end (delta: -59.5MB). Peak memory consumption was 31.7MB. Max. memory is 16.1GB. * TraceAbstraction took 12030.61ms. Allocated memory was 159.4MB in the beginning and 232.8MB in the end (delta: 73.4MB). Free memory was 124.5MB in the beginning and 183.0MB in the end (delta: -58.4MB). Peak memory consumption was 136.6MB. Max. memory is 16.1GB. * Witness Printer took 45.06ms. Allocated memory is still 232.8MB. Free memory was 183.0MB in the beginning and 177.7MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 69 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 12.0s, OverallIterations: 9, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 807 SdHoareTripleChecker+Valid, 0.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 790 mSDsluCounter, 1558 SdHoareTripleChecker+Invalid, 0.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 987 mSDsCounter, 305 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1938 IncrementalHoareTripleChecker+Invalid, 2243 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 305 mSolverCounterUnsat, 571 mSDtfsCounter, 1938 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 435 GetRequests, 316 SyntacticMatches, 11 SemanticMatches, 108 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1662 ImplicationChecksByTransitivity, 4.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=372occurred in iteration=8, InterpolantAutomatonStates: 74, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 9 MinimizatonAttempts, 44 StatesRemovedByMinimization, 4 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 40 LocationsWithAnnotation, 932 PreInvPairs, 1057 NumberOfFragments, 1432 HoareAnnotationTreeSize, 932 FomulaSimplifications, 207 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 40 FomulaSimplificationsInter, 7286 FormulaSimplificationTreeSizeReductionInter, 1.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 553 NumberOfCodeBlocks, 553 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 613 ConstructedInterpolants, 0 QuantifiedInterpolants, 1147 SizeOfPredicates, 9 NumberOfNonLiveVariables, 867 ConjunctsInSsa, 36 ConjunctsInUnsatCore, 13 InterpolantComputations, 8 PerfectInterpolantSequences, 170/194 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 637]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) && ((!(1 <= \old(pumpRunning)) || (aux-isMethaneLevelCritical()-aux == methaneLevelCritical && \old(pumpRunning) <= pumpRunning)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) && (!(1 <= \old(pumpRunning)) || 0 == systemActive) - InvariantResult [Line: 852]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 777]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 767]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 547]: Loop Invariant Derived loop invariant: ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 591]: Loop Invariant Derived loop invariant: ((((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && !(0 == systemActive))) || (tmp == methaneLevelCritical && \old(pumpRunning) <= pumpRunning)) || 0 == systemActive) && (((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && methAndRunningLastTime == 0)) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && !(0 == systemActive))) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 569]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || \old(pumpRunning) <= pumpRunning) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 736]: Loop Invariant Derived loop invariant: ((((((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || (pumpRunning == 0 && methAndRunningLastTime == 0)) && (((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && tmp == methaneLevelCritical) && tmp == 0) && \old(pumpRunning) <= pumpRunning) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || tmp == 0) || 0 == systemActive) - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == systemActive) && splverifierCounter == 0) && !(0 == systemActive)) || ((((1 <= pumpRunning && (!(\old(methaneLevelCritical) == 0) || methaneLevelCritical == 1)) && tmp == systemActive) && splverifierCounter == 0) && !(0 == systemActive))) || ((((1 <= pumpRunning && methaneLevelCritical == 0) && tmp == systemActive) && splverifierCounter == 0) && !(0 == systemActive))) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && (!(\old(methaneLevelCritical) == 0) || methaneLevelCritical == 1)) && tmp == systemActive) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 852]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == systemActive) && tmp == 1 - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 543]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || \old(pumpRunning) <= pumpRunning) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 744]: Loop Invariant Derived loop invariant: (((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && !(0 == systemActive))) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && methAndRunningLastTime == 0)) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && !(0 == systemActive))) || 0 == systemActive)) && (((((tmp == methaneLevelCritical && tmp == 0) && \old(pumpRunning) <= pumpRunning) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && tmp == methaneLevelCritical) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || tmp == 0) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 63]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 507]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || (pumpRunning == 0 && methAndRunningLastTime == 0)) && ((!(1 <= \old(pumpRunning)) || 0 == systemActive) || \old(pumpRunning) <= pumpRunning)) && (((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || 0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-12-14 05:48:39,822 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fa67f588-722e-40f4-907d-cca7d6879658/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE