./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 29e70cf9c9b1d0bd005d907ed1d78af9dd0d19752a19f66dfee72f35dd243fc7 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 08:08:02,317 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 08:08:02,319 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 08:08:02,333 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 08:08:02,333 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 08:08:02,334 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 08:08:02,334 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 08:08:02,335 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 08:08:02,336 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 08:08:02,337 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 08:08:02,337 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 08:08:02,338 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 08:08:02,338 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 08:08:02,339 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 08:08:02,340 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 08:08:02,340 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 08:08:02,341 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 08:08:02,341 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 08:08:02,342 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 08:08:02,344 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 08:08:02,344 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 08:08:02,346 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 08:08:02,346 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 08:08:02,347 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 08:08:02,349 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 08:08:02,349 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 08:08:02,349 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 08:08:02,350 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 08:08:02,350 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 08:08:02,351 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 08:08:02,351 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 08:08:02,352 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 08:08:02,352 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 08:08:02,353 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 08:08:02,353 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 08:08:02,353 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 08:08:02,354 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 08:08:02,354 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 08:08:02,354 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 08:08:02,355 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 08:08:02,355 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 08:08:02,356 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-12-14 08:08:02,371 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 08:08:02,371 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 08:08:02,371 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 08:08:02,376 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 08:08:02,377 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 08:08:02,378 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 08:08:02,378 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 08:08:02,379 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 08:08:02,379 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 08:08:02,380 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-12-14 08:08:02,380 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 08:08:02,380 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 08:08:02,380 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-12-14 08:08:02,381 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-12-14 08:08:02,381 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 08:08:02,381 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-12-14 08:08:02,381 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-12-14 08:08:02,381 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-12-14 08:08:02,382 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 08:08:02,382 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 08:08:02,382 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 08:08:02,383 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 08:08:02,383 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 08:08:02,383 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-12-14 08:08:02,383 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 08:08:02,383 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-12-14 08:08:02,383 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 08:08:02,384 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-14 08:08:02,384 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 08:08:02,384 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-12-14 08:08:02,384 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 08:08:02,384 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 08:08:02,384 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 08:08:02,385 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 08:08:02,385 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-12-14 08:08:02,385 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 08:08:02,385 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-12-14 08:08:02,385 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-12-14 08:08:02,386 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-14 08:08:02,386 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-12-14 08:08:02,386 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 08:08:02,386 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 29e70cf9c9b1d0bd005d907ed1d78af9dd0d19752a19f66dfee72f35dd243fc7 [2022-12-14 08:08:02,547 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 08:08:02,565 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 08:08:02,567 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 08:08:02,568 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 08:08:02,568 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 08:08:02,569 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c [2022-12-14 08:08:05,179 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 08:08:05,319 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 08:08:05,319 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c [2022-12-14 08:08:05,326 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/data/5ca3e1a49/196424c297384fa2b6b5d679933b14dd/FLAGfe2dc153d [2022-12-14 08:08:05,336 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/data/5ca3e1a49/196424c297384fa2b6b5d679933b14dd [2022-12-14 08:08:05,339 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 08:08:05,340 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 08:08:05,340 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 08:08:05,341 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 08:08:05,343 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 08:08:05,344 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 08:08:05" (1/1) ... [2022-12-14 08:08:05,344 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@76f7dffb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 08:08:05, skipping insertion in model container [2022-12-14 08:08:05,344 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 08:08:05" (1/1) ... [2022-12-14 08:08:05,350 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 08:08:05,376 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 08:08:05,540 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c[17206,17219] [2022-12-14 08:08:05,545 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 08:08:05,554 INFO L203 MainTranslator]: Completed pre-run [2022-12-14 08:08:05,597 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c[17206,17219] [2022-12-14 08:08:05,600 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 08:08:05,612 INFO L208 MainTranslator]: Completed translation [2022-12-14 08:08:05,612 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 08:08:05 WrapperNode [2022-12-14 08:08:05,612 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 08:08:05,613 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-14 08:08:05,613 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-14 08:08:05,613 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-14 08:08:05,619 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 08:08:05" (1/1) ... [2022-12-14 08:08:05,628 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 08:08:05" (1/1) ... [2022-12-14 08:08:05,644 INFO L138 Inliner]: procedures = 53, calls = 98, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 195 [2022-12-14 08:08:05,645 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-14 08:08:05,645 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-14 08:08:05,645 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-14 08:08:05,645 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-14 08:08:05,652 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 08:08:05" (1/1) ... [2022-12-14 08:08:05,652 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 08:08:05" (1/1) ... [2022-12-14 08:08:05,653 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 08:08:05" (1/1) ... [2022-12-14 08:08:05,654 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 08:08:05" (1/1) ... [2022-12-14 08:08:05,657 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 08:08:05" (1/1) ... [2022-12-14 08:08:05,660 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 08:08:05" (1/1) ... [2022-12-14 08:08:05,661 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 08:08:05" (1/1) ... [2022-12-14 08:08:05,662 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 08:08:05" (1/1) ... [2022-12-14 08:08:05,664 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-14 08:08:05,664 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-14 08:08:05,664 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-14 08:08:05,664 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-14 08:08:05,665 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 08:08:05" (1/1) ... [2022-12-14 08:08:05,670 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 08:08:05,681 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 08:08:05,692 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-14 08:08:05,694 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-14 08:08:05,727 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-14 08:08:05,727 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-12-14 08:08:05,728 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-12-14 08:08:05,728 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-12-14 08:08:05,728 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-12-14 08:08:05,728 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-12-14 08:08:05,728 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-12-14 08:08:05,728 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-12-14 08:08:05,728 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-12-14 08:08:05,728 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-12-14 08:08:05,728 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-12-14 08:08:05,728 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-12-14 08:08:05,728 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-12-14 08:08:05,729 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-14 08:08:05,729 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-12-14 08:08:05,729 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-12-14 08:08:05,729 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-14 08:08:05,729 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-14 08:08:05,788 INFO L235 CfgBuilder]: Building ICFG [2022-12-14 08:08:05,790 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-14 08:08:05,980 INFO L276 CfgBuilder]: Performing block encoding [2022-12-14 08:08:06,046 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-14 08:08:06,046 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-12-14 08:08:06,048 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 08:08:06 BoogieIcfgContainer [2022-12-14 08:08:06,049 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-14 08:08:06,050 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-14 08:08:06,050 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-14 08:08:06,053 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-14 08:08:06,053 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 08:08:05" (1/3) ... [2022-12-14 08:08:06,054 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7f34c515 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 08:08:06, skipping insertion in model container [2022-12-14 08:08:06,054 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 08:08:05" (2/3) ... [2022-12-14 08:08:06,054 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7f34c515 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 08:08:06, skipping insertion in model container [2022-12-14 08:08:06,054 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 08:08:06" (3/3) ... [2022-12-14 08:08:06,055 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product37.cil.c [2022-12-14 08:08:06,069 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-14 08:08:06,070 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-12-14 08:08:06,106 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-14 08:08:06,111 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@12d9f269, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-12-14 08:08:06,111 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-12-14 08:08:06,114 INFO L276 IsEmpty]: Start isEmpty. Operand has 58 states, 37 states have (on average 1.4324324324324325) internal successors, (53), 45 states have internal predecessors, (53), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-12-14 08:08:06,120 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-12-14 08:08:06,121 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 08:08:06,121 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 08:08:06,121 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 08:08:06,125 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 08:08:06,126 INFO L85 PathProgramCache]: Analyzing trace with hash 926059608, now seen corresponding path program 1 times [2022-12-14 08:08:06,133 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 08:08:06,133 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1549796512] [2022-12-14 08:08:06,133 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 08:08:06,134 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 08:08:06,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 08:08:06,285 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 08:08:06,285 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 08:08:06,286 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1549796512] [2022-12-14 08:08:06,286 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1549796512] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 08:08:06,286 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 08:08:06,287 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 08:08:06,288 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [604661394] [2022-12-14 08:08:06,289 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 08:08:06,293 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-12-14 08:08:06,293 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 08:08:06,321 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-12-14 08:08:06,322 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 08:08:06,324 INFO L87 Difference]: Start difference. First operand has 58 states, 37 states have (on average 1.4324324324324325) internal successors, (53), 45 states have internal predecessors, (53), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 08:08:06,388 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 08:08:06,389 INFO L93 Difference]: Finished difference Result 114 states and 155 transitions. [2022-12-14 08:08:06,390 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-12-14 08:08:06,392 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-12-14 08:08:06,392 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 08:08:06,401 INFO L225 Difference]: With dead ends: 114 [2022-12-14 08:08:06,401 INFO L226 Difference]: Without dead ends: 53 [2022-12-14 08:08:06,404 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 08:08:06,407 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 56 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 08:08:06,408 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 56 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 08:08:06,420 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2022-12-14 08:08:06,434 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2022-12-14 08:08:06,435 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 41 states have internal predecessors, (45), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-12-14 08:08:06,437 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 68 transitions. [2022-12-14 08:08:06,438 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 68 transitions. Word has length 17 [2022-12-14 08:08:06,438 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 08:08:06,438 INFO L495 AbstractCegarLoop]: Abstraction has 53 states and 68 transitions. [2022-12-14 08:08:06,438 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 08:08:06,439 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 68 transitions. [2022-12-14 08:08:06,440 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-12-14 08:08:06,440 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 08:08:06,440 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 08:08:06,440 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-14 08:08:06,440 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 08:08:06,441 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 08:08:06,441 INFO L85 PathProgramCache]: Analyzing trace with hash 1076480352, now seen corresponding path program 1 times [2022-12-14 08:08:06,441 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 08:08:06,441 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [779639533] [2022-12-14 08:08:06,441 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 08:08:06,442 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 08:08:06,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 08:08:06,538 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 08:08:06,539 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 08:08:06,539 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [779639533] [2022-12-14 08:08:06,539 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [779639533] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 08:08:06,539 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 08:08:06,540 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 08:08:06,540 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1904712574] [2022-12-14 08:08:06,540 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 08:08:06,541 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 08:08:06,541 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 08:08:06,542 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 08:08:06,542 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 08:08:06,543 INFO L87 Difference]: Start difference. First operand 53 states and 68 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 08:08:06,582 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 08:08:06,583 INFO L93 Difference]: Finished difference Result 83 states and 107 transitions. [2022-12-14 08:08:06,583 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 08:08:06,583 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-12-14 08:08:06,584 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 08:08:06,584 INFO L225 Difference]: With dead ends: 83 [2022-12-14 08:08:06,585 INFO L226 Difference]: Without dead ends: 45 [2022-12-14 08:08:06,585 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 08:08:06,587 INFO L413 NwaCegarLoop]: 42 mSDtfsCounter, 7 mSDsluCounter, 33 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 75 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 08:08:06,587 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 75 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 08:08:06,588 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2022-12-14 08:08:06,594 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2022-12-14 08:08:06,594 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 29 states have (on average 1.3448275862068966) internal successors, (39), 36 states have internal predecessors, (39), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-12-14 08:08:06,595 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 57 transitions. [2022-12-14 08:08:06,595 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 57 transitions. Word has length 18 [2022-12-14 08:08:06,596 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 08:08:06,596 INFO L495 AbstractCegarLoop]: Abstraction has 45 states and 57 transitions. [2022-12-14 08:08:06,596 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 08:08:06,596 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 57 transitions. [2022-12-14 08:08:06,597 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-12-14 08:08:06,597 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 08:08:06,597 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 08:08:06,597 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-14 08:08:06,598 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 08:08:06,598 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 08:08:06,598 INFO L85 PathProgramCache]: Analyzing trace with hash 1732070473, now seen corresponding path program 1 times [2022-12-14 08:08:06,598 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 08:08:06,599 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1753994429] [2022-12-14 08:08:06,599 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 08:08:06,599 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 08:08:06,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 08:08:06,701 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 08:08:06,701 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 08:08:06,701 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1753994429] [2022-12-14 08:08:06,701 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1753994429] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 08:08:06,702 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 08:08:06,702 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 08:08:06,702 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [322267024] [2022-12-14 08:08:06,702 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 08:08:06,703 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 08:08:06,703 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 08:08:06,703 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 08:08:06,704 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 08:08:06,704 INFO L87 Difference]: Start difference. First operand 45 states and 57 transitions. Second operand has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 08:08:06,769 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 08:08:06,769 INFO L93 Difference]: Finished difference Result 88 states and 113 transitions. [2022-12-14 08:08:06,770 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 08:08:06,770 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2022-12-14 08:08:06,770 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 08:08:06,771 INFO L225 Difference]: With dead ends: 88 [2022-12-14 08:08:06,771 INFO L226 Difference]: Without dead ends: 45 [2022-12-14 08:08:06,771 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 08:08:06,772 INFO L413 NwaCegarLoop]: 37 mSDtfsCounter, 53 mSDsluCounter, 16 mSDsCounter, 0 mSdLazyCounter, 46 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 53 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 46 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 08:08:06,772 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 53 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 46 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 08:08:06,773 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2022-12-14 08:08:06,778 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2022-12-14 08:08:06,778 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 29 states have (on average 1.3103448275862069) internal successors, (38), 36 states have internal predecessors, (38), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-12-14 08:08:06,779 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 56 transitions. [2022-12-14 08:08:06,779 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 56 transitions. Word has length 20 [2022-12-14 08:08:06,779 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 08:08:06,780 INFO L495 AbstractCegarLoop]: Abstraction has 45 states and 56 transitions. [2022-12-14 08:08:06,780 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 08:08:06,780 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 56 transitions. [2022-12-14 08:08:06,780 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-12-14 08:08:06,780 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 08:08:06,780 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 08:08:06,781 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-14 08:08:06,781 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 08:08:06,781 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 08:08:06,781 INFO L85 PathProgramCache]: Analyzing trace with hash -1243183169, now seen corresponding path program 1 times [2022-12-14 08:08:06,781 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 08:08:06,781 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1942955219] [2022-12-14 08:08:06,782 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 08:08:06,782 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 08:08:06,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 08:08:06,899 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 08:08:06,899 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 08:08:06,899 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1942955219] [2022-12-14 08:08:06,899 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1942955219] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 08:08:06,899 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2075929304] [2022-12-14 08:08:06,900 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 08:08:06,900 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 08:08:06,900 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 08:08:06,901 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 08:08:06,902 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-14 08:08:06,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 08:08:06,966 INFO L263 TraceCheckSpWp]: Trace formula consists of 189 conjuncts, 12 conjunts are in the unsatisfiable core [2022-12-14 08:08:06,971 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 08:08:07,100 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-12-14 08:08:07,100 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 08:08:07,100 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2075929304] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 08:08:07,100 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 08:08:07,101 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [6] total 10 [2022-12-14 08:08:07,101 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [352599535] [2022-12-14 08:08:07,101 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 08:08:07,101 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 08:08:07,102 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 08:08:07,102 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 08:08:07,102 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2022-12-14 08:08:07,102 INFO L87 Difference]: Start difference. First operand 45 states and 56 transitions. Second operand has 6 states, 6 states have (on average 3.5) internal successors, (21), 5 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-12-14 08:08:07,377 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 08:08:07,377 INFO L93 Difference]: Finished difference Result 230 states and 299 transitions. [2022-12-14 08:08:07,377 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-14 08:08:07,377 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.5) internal successors, (21), 5 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 27 [2022-12-14 08:08:07,378 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 08:08:07,379 INFO L225 Difference]: With dead ends: 230 [2022-12-14 08:08:07,379 INFO L226 Difference]: Without dead ends: 187 [2022-12-14 08:08:07,380 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 24 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=146, Unknown=0, NotChecked=0, Total=182 [2022-12-14 08:08:07,381 INFO L413 NwaCegarLoop]: 127 mSDtfsCounter, 130 mSDsluCounter, 287 mSDsCounter, 0 mSdLazyCounter, 269 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 414 SdHoareTripleChecker+Invalid, 323 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 269 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 08:08:07,382 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 414 Invalid, 323 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 269 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 08:08:07,382 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 187 states. [2022-12-14 08:08:07,411 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 187 to 173. [2022-12-14 08:08:07,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 173 states, 117 states have (on average 1.264957264957265) internal successors, (148), 131 states have internal predecessors, (148), 29 states have call successors, (29), 25 states have call predecessors, (29), 26 states have return successors, (37), 28 states have call predecessors, (37), 29 states have call successors, (37) [2022-12-14 08:08:07,414 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 173 states to 173 states and 214 transitions. [2022-12-14 08:08:07,414 INFO L78 Accepts]: Start accepts. Automaton has 173 states and 214 transitions. Word has length 27 [2022-12-14 08:08:07,414 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 08:08:07,414 INFO L495 AbstractCegarLoop]: Abstraction has 173 states and 214 transitions. [2022-12-14 08:08:07,414 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.5) internal successors, (21), 5 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-12-14 08:08:07,415 INFO L276 IsEmpty]: Start isEmpty. Operand 173 states and 214 transitions. [2022-12-14 08:08:07,416 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-12-14 08:08:07,416 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 08:08:07,416 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 08:08:07,422 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-14 08:08:07,616 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable3 [2022-12-14 08:08:07,617 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 08:08:07,617 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 08:08:07,617 INFO L85 PathProgramCache]: Analyzing trace with hash -889962208, now seen corresponding path program 1 times [2022-12-14 08:08:07,617 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 08:08:07,617 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [720847703] [2022-12-14 08:08:07,617 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 08:08:07,618 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 08:08:07,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 08:08:07,706 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 08:08:07,706 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 08:08:07,707 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [720847703] [2022-12-14 08:08:07,707 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [720847703] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 08:08:07,707 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 08:08:07,707 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-14 08:08:07,707 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [651097890] [2022-12-14 08:08:07,707 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 08:08:07,708 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 08:08:07,708 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 08:08:07,708 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 08:08:07,708 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-12-14 08:08:07,709 INFO L87 Difference]: Start difference. First operand 173 states and 214 transitions. Second operand has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 6 states have internal predecessors, (23), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-12-14 08:08:07,868 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 08:08:07,869 INFO L93 Difference]: Finished difference Result 485 states and 618 transitions. [2022-12-14 08:08:07,869 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-12-14 08:08:07,869 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 6 states have internal predecessors, (23), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 28 [2022-12-14 08:08:07,869 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 08:08:07,874 INFO L225 Difference]: With dead ends: 485 [2022-12-14 08:08:07,874 INFO L226 Difference]: Without dead ends: 314 [2022-12-14 08:08:07,875 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2022-12-14 08:08:07,875 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 105 mSDsluCounter, 170 mSDsCounter, 0 mSdLazyCounter, 136 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 109 SdHoareTripleChecker+Valid, 242 SdHoareTripleChecker+Invalid, 165 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 136 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 08:08:07,876 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [109 Valid, 242 Invalid, 165 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 136 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 08:08:07,876 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 314 states. [2022-12-14 08:08:07,899 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 314 to 246. [2022-12-14 08:08:07,900 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 246 states, 165 states have (on average 1.2303030303030302) internal successors, (203), 181 states have internal predecessors, (203), 41 states have call successors, (41), 38 states have call predecessors, (41), 39 states have return successors, (55), 42 states have call predecessors, (55), 41 states have call successors, (55) [2022-12-14 08:08:07,901 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 246 states to 246 states and 299 transitions. [2022-12-14 08:08:07,901 INFO L78 Accepts]: Start accepts. Automaton has 246 states and 299 transitions. Word has length 28 [2022-12-14 08:08:07,902 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 08:08:07,902 INFO L495 AbstractCegarLoop]: Abstraction has 246 states and 299 transitions. [2022-12-14 08:08:07,902 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 6 states have internal predecessors, (23), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-12-14 08:08:07,902 INFO L276 IsEmpty]: Start isEmpty. Operand 246 states and 299 transitions. [2022-12-14 08:08:07,902 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-12-14 08:08:07,902 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 08:08:07,903 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 08:08:07,903 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-14 08:08:07,903 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 08:08:07,903 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 08:08:07,903 INFO L85 PathProgramCache]: Analyzing trace with hash 576399077, now seen corresponding path program 1 times [2022-12-14 08:08:07,903 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 08:08:07,903 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [180096414] [2022-12-14 08:08:07,903 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 08:08:07,903 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 08:08:07,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 08:08:07,958 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 08:08:07,958 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 08:08:07,958 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [180096414] [2022-12-14 08:08:07,959 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [180096414] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 08:08:07,959 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1309716344] [2022-12-14 08:08:07,959 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 08:08:07,959 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 08:08:07,959 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 08:08:07,960 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 08:08:07,961 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-14 08:08:08,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 08:08:08,016 INFO L263 TraceCheckSpWp]: Trace formula consists of 195 conjuncts, 7 conjunts are in the unsatisfiable core [2022-12-14 08:08:08,018 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 08:08:08,044 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-12-14 08:08:08,044 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 08:08:08,044 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1309716344] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 08:08:08,044 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 08:08:08,045 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [6] total 7 [2022-12-14 08:08:08,045 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1171397060] [2022-12-14 08:08:08,045 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 08:08:08,045 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 08:08:08,045 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 08:08:08,046 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 08:08:08,046 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-14 08:08:08,046 INFO L87 Difference]: Start difference. First operand 246 states and 299 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-14 08:08:08,097 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 08:08:08,097 INFO L93 Difference]: Finished difference Result 453 states and 557 transitions. [2022-12-14 08:08:08,098 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 08:08:08,098 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 30 [2022-12-14 08:08:08,098 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 08:08:08,099 INFO L225 Difference]: With dead ends: 453 [2022-12-14 08:08:08,099 INFO L226 Difference]: Without dead ends: 209 [2022-12-14 08:08:08,100 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 30 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-14 08:08:08,101 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 31 mSDsluCounter, 33 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 31 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 08:08:08,101 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [31 Valid, 87 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 08:08:08,101 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 209 states. [2022-12-14 08:08:08,115 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 209 to 199. [2022-12-14 08:08:08,115 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 199 states, 134 states have (on average 1.208955223880597) internal successors, (162), 148 states have internal predecessors, (162), 32 states have call successors, (32), 30 states have call predecessors, (32), 32 states have return successors, (40), 34 states have call predecessors, (40), 32 states have call successors, (40) [2022-12-14 08:08:08,116 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 199 states to 199 states and 234 transitions. [2022-12-14 08:08:08,117 INFO L78 Accepts]: Start accepts. Automaton has 199 states and 234 transitions. Word has length 30 [2022-12-14 08:08:08,117 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 08:08:08,117 INFO L495 AbstractCegarLoop]: Abstraction has 199 states and 234 transitions. [2022-12-14 08:08:08,117 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-14 08:08:08,117 INFO L276 IsEmpty]: Start isEmpty. Operand 199 states and 234 transitions. [2022-12-14 08:08:08,118 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-12-14 08:08:08,118 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 08:08:08,118 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 08:08:08,126 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-14 08:08:08,318 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 08:08:08,319 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 08:08:08,319 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 08:08:08,319 INFO L85 PathProgramCache]: Analyzing trace with hash -1505451988, now seen corresponding path program 1 times [2022-12-14 08:08:08,320 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 08:08:08,320 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [384883090] [2022-12-14 08:08:08,320 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 08:08:08,320 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 08:08:08,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 08:08:08,472 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 08:08:08,472 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 08:08:08,472 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [384883090] [2022-12-14 08:08:08,472 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [384883090] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 08:08:08,473 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 08:08:08,473 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-14 08:08:08,473 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [934709113] [2022-12-14 08:08:08,473 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 08:08:08,473 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 08:08:08,473 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 08:08:08,474 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 08:08:08,474 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-12-14 08:08:08,474 INFO L87 Difference]: Start difference. First operand 199 states and 234 transitions. Second operand has 6 states, 6 states have (on average 4.0) internal successors, (24), 6 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-14 08:08:08,588 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 08:08:08,588 INFO L93 Difference]: Finished difference Result 558 states and 671 transitions. [2022-12-14 08:08:08,588 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 08:08:08,588 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 6 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 31 [2022-12-14 08:08:08,588 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 08:08:08,590 INFO L225 Difference]: With dead ends: 558 [2022-12-14 08:08:08,590 INFO L226 Difference]: Without dead ends: 361 [2022-12-14 08:08:08,590 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-14 08:08:08,591 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 90 mSDsluCounter, 167 mSDsCounter, 0 mSdLazyCounter, 125 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 90 SdHoareTripleChecker+Valid, 226 SdHoareTripleChecker+Invalid, 130 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 08:08:08,591 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [90 Valid, 226 Invalid, 130 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 08:08:08,592 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 361 states. [2022-12-14 08:08:08,613 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 361 to 243. [2022-12-14 08:08:08,614 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 243 states, 164 states have (on average 1.201219512195122) internal successors, (197), 180 states have internal predecessors, (197), 38 states have call successors, (38), 36 states have call predecessors, (38), 40 states have return successors, (48), 41 states have call predecessors, (48), 38 states have call successors, (48) [2022-12-14 08:08:08,615 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 283 transitions. [2022-12-14 08:08:08,615 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 283 transitions. Word has length 31 [2022-12-14 08:08:08,615 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 08:08:08,616 INFO L495 AbstractCegarLoop]: Abstraction has 243 states and 283 transitions. [2022-12-14 08:08:08,616 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 6 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-14 08:08:08,616 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 283 transitions. [2022-12-14 08:08:08,616 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-12-14 08:08:08,616 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 08:08:08,617 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 08:08:08,617 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-12-14 08:08:08,617 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 08:08:08,617 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 08:08:08,617 INFO L85 PathProgramCache]: Analyzing trace with hash 2070494290, now seen corresponding path program 1 times [2022-12-14 08:08:08,617 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 08:08:08,617 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [588434999] [2022-12-14 08:08:08,617 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 08:08:08,617 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 08:08:08,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 08:08:08,768 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 08:08:08,768 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 08:08:08,769 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [588434999] [2022-12-14 08:08:08,769 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [588434999] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 08:08:08,769 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 08:08:08,769 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-12-14 08:08:08,769 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [324841559] [2022-12-14 08:08:08,769 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 08:08:08,770 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-12-14 08:08:08,770 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 08:08:08,770 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-12-14 08:08:08,770 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-12-14 08:08:08,771 INFO L87 Difference]: Start difference. First operand 243 states and 283 transitions. Second operand has 9 states, 8 states have (on average 3.125) internal successors, (25), 8 states have internal predecessors, (25), 4 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-12-14 08:08:09,164 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 08:08:09,164 INFO L93 Difference]: Finished difference Result 568 states and 680 transitions. [2022-12-14 08:08:09,164 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-12-14 08:08:09,164 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 3.125) internal successors, (25), 8 states have internal predecessors, (25), 4 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 34 [2022-12-14 08:08:09,164 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 08:08:09,167 INFO L225 Difference]: With dead ends: 568 [2022-12-14 08:08:09,167 INFO L226 Difference]: Without dead ends: 492 [2022-12-14 08:08:09,167 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 51 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=85, Invalid=221, Unknown=0, NotChecked=0, Total=306 [2022-12-14 08:08:09,168 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 298 mSDsluCounter, 141 mSDsCounter, 0 mSdLazyCounter, 370 mSolverCounterSat, 151 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 309 SdHoareTripleChecker+Valid, 217 SdHoareTripleChecker+Invalid, 521 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 151 IncrementalHoareTripleChecker+Valid, 370 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 08:08:09,168 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [309 Valid, 217 Invalid, 521 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [151 Valid, 370 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 08:08:09,169 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 492 states. [2022-12-14 08:08:09,201 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 492 to 472. [2022-12-14 08:08:09,202 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 472 states, 326 states have (on average 1.2116564417177915) internal successors, (395), 352 states have internal predecessors, (395), 74 states have call successors, (74), 66 states have call predecessors, (74), 71 states have return successors, (93), 74 states have call predecessors, (93), 74 states have call successors, (93) [2022-12-14 08:08:09,203 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 472 states to 472 states and 562 transitions. [2022-12-14 08:08:09,204 INFO L78 Accepts]: Start accepts. Automaton has 472 states and 562 transitions. Word has length 34 [2022-12-14 08:08:09,204 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 08:08:09,204 INFO L495 AbstractCegarLoop]: Abstraction has 472 states and 562 transitions. [2022-12-14 08:08:09,204 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 3.125) internal successors, (25), 8 states have internal predecessors, (25), 4 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-12-14 08:08:09,204 INFO L276 IsEmpty]: Start isEmpty. Operand 472 states and 562 transitions. [2022-12-14 08:08:09,205 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-12-14 08:08:09,205 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 08:08:09,205 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 08:08:09,205 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-12-14 08:08:09,205 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 08:08:09,206 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 08:08:09,206 INFO L85 PathProgramCache]: Analyzing trace with hash 780880030, now seen corresponding path program 1 times [2022-12-14 08:08:09,206 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 08:08:09,206 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1070608835] [2022-12-14 08:08:09,206 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 08:08:09,206 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 08:08:09,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 08:08:09,267 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 15 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 08:08:09,267 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 08:08:09,267 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1070608835] [2022-12-14 08:08:09,268 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1070608835] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 08:08:09,268 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1242873737] [2022-12-14 08:08:09,268 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 08:08:09,268 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 08:08:09,268 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 08:08:09,269 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 08:08:09,270 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-14 08:08:09,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 08:08:09,329 INFO L263 TraceCheckSpWp]: Trace formula consists of 272 conjuncts, 20 conjunts are in the unsatisfiable core [2022-12-14 08:08:09,332 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 08:08:09,582 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-12-14 08:08:09,582 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 08:08:09,582 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1242873737] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 08:08:09,582 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 08:08:09,583 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [7] total 14 [2022-12-14 08:08:09,583 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1877160052] [2022-12-14 08:08:09,583 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 08:08:09,583 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-12-14 08:08:09,583 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 08:08:09,584 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-12-14 08:08:09,584 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=34, Invalid=148, Unknown=0, NotChecked=0, Total=182 [2022-12-14 08:08:09,584 INFO L87 Difference]: Start difference. First operand 472 states and 562 transitions. Second operand has 9 states, 9 states have (on average 4.555555555555555) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 2 states have call predecessors, (6), 4 states have call successors, (6) [2022-12-14 08:08:09,883 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 08:08:09,883 INFO L93 Difference]: Finished difference Result 607 states and 724 transitions. [2022-12-14 08:08:09,883 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-12-14 08:08:09,883 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.555555555555555) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 2 states have call predecessors, (6), 4 states have call successors, (6) Word has length 55 [2022-12-14 08:08:09,884 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 08:08:09,884 INFO L225 Difference]: With dead ends: 607 [2022-12-14 08:08:09,884 INFO L226 Difference]: Without dead ends: 240 [2022-12-14 08:08:09,885 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 49 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=69, Invalid=273, Unknown=0, NotChecked=0, Total=342 [2022-12-14 08:08:09,886 INFO L413 NwaCegarLoop]: 45 mSDtfsCounter, 174 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 282 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 185 SdHoareTripleChecker+Valid, 147 SdHoareTripleChecker+Invalid, 356 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 282 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 08:08:09,886 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [185 Valid, 147 Invalid, 356 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 282 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 08:08:09,887 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2022-12-14 08:08:09,904 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 184. [2022-12-14 08:08:09,904 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 184 states, 127 states have (on average 1.1968503937007875) internal successors, (152), 136 states have internal predecessors, (152), 28 states have call successors, (28), 27 states have call predecessors, (28), 28 states have return successors, (31), 27 states have call predecessors, (31), 28 states have call successors, (31) [2022-12-14 08:08:09,905 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 184 states to 184 states and 211 transitions. [2022-12-14 08:08:09,905 INFO L78 Accepts]: Start accepts. Automaton has 184 states and 211 transitions. Word has length 55 [2022-12-14 08:08:09,906 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 08:08:09,906 INFO L495 AbstractCegarLoop]: Abstraction has 184 states and 211 transitions. [2022-12-14 08:08:09,906 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.555555555555555) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 2 states have call predecessors, (6), 4 states have call successors, (6) [2022-12-14 08:08:09,906 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 211 transitions. [2022-12-14 08:08:09,907 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-12-14 08:08:09,907 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 08:08:09,907 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 08:08:09,913 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-14 08:08:10,108 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 08:08:10,109 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 08:08:10,110 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 08:08:10,110 INFO L85 PathProgramCache]: Analyzing trace with hash -211681216, now seen corresponding path program 2 times [2022-12-14 08:08:10,110 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 08:08:10,110 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [712809986] [2022-12-14 08:08:10,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 08:08:10,111 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 08:08:10,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 08:08:10,271 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 15 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 08:08:10,271 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 08:08:10,271 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [712809986] [2022-12-14 08:08:10,272 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [712809986] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 08:08:10,272 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1073709662] [2022-12-14 08:08:10,272 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 08:08:10,272 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 08:08:10,272 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 08:08:10,273 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 08:08:10,274 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-12-14 08:08:10,338 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-12-14 08:08:10,338 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 08:08:10,339 INFO L263 TraceCheckSpWp]: Trace formula consists of 272 conjuncts, 17 conjunts are in the unsatisfiable core [2022-12-14 08:08:10,341 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 08:08:10,556 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 4 proven. 11 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-12-14 08:08:10,556 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 08:08:10,800 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-12-14 08:08:10,800 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1073709662] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 08:08:10,800 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1044835681] [2022-12-14 08:08:10,814 INFO L159 IcfgInterpreter]: Started Sifa with 37 locations of interest [2022-12-14 08:08:10,814 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 08:08:10,816 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 08:08:10,820 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 08:08:10,820 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 08:08:12,122 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 26 for LOIs [2022-12-14 08:08:12,124 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 27 for LOIs [2022-12-14 08:08:12,230 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 24 for LOIs [2022-12-14 08:08:12,244 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 50 for LOIs [2022-12-14 08:08:12,250 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 08:08:13,808 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1044835681] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 08:08:13,808 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 08:08:13,808 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [26] imperfect sequences [7, 9, 8] total 42 [2022-12-14 08:08:13,808 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1219127383] [2022-12-14 08:08:13,808 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 08:08:13,809 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-12-14 08:08:13,809 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 08:08:13,809 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-12-14 08:08:13,810 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=246, Invalid=1476, Unknown=0, NotChecked=0, Total=1722 [2022-12-14 08:08:13,810 INFO L87 Difference]: Start difference. First operand 184 states and 211 transitions. Second operand has 27 states, 22 states have (on average 1.3636363636363635) internal successors, (30), 21 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2022-12-14 08:08:16,430 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 08:08:16,431 INFO L93 Difference]: Finished difference Result 464 states and 538 transitions. [2022-12-14 08:08:16,431 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-12-14 08:08:16,431 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 22 states have (on average 1.3636363636363635) internal successors, (30), 21 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) Word has length 55 [2022-12-14 08:08:16,432 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 08:08:16,433 INFO L225 Difference]: With dead ends: 464 [2022-12-14 08:08:16,433 INFO L226 Difference]: Without dead ends: 345 [2022-12-14 08:08:16,434 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 191 GetRequests, 124 SyntacticMatches, 6 SemanticMatches, 61 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1091 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=525, Invalid=3381, Unknown=0, NotChecked=0, Total=3906 [2022-12-14 08:08:16,434 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 134 mSDsluCounter, 421 mSDsCounter, 0 mSdLazyCounter, 1336 mSolverCounterSat, 82 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 470 SdHoareTripleChecker+Invalid, 1418 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 82 IncrementalHoareTripleChecker+Valid, 1336 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 08:08:16,434 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [136 Valid, 470 Invalid, 1418 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [82 Valid, 1336 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-12-14 08:08:16,435 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 345 states. [2022-12-14 08:08:16,466 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 345 to 327. [2022-12-14 08:08:16,467 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 327 states, 229 states have (on average 1.1790393013100438) internal successors, (270), 240 states have internal predecessors, (270), 49 states have call successors, (49), 47 states have call predecessors, (49), 48 states have return successors, (54), 46 states have call predecessors, (54), 49 states have call successors, (54) [2022-12-14 08:08:16,468 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 327 states to 327 states and 373 transitions. [2022-12-14 08:08:16,468 INFO L78 Accepts]: Start accepts. Automaton has 327 states and 373 transitions. Word has length 55 [2022-12-14 08:08:16,468 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 08:08:16,468 INFO L495 AbstractCegarLoop]: Abstraction has 327 states and 373 transitions. [2022-12-14 08:08:16,468 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 22 states have (on average 1.3636363636363635) internal successors, (30), 21 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2022-12-14 08:08:16,468 INFO L276 IsEmpty]: Start isEmpty. Operand 327 states and 373 transitions. [2022-12-14 08:08:16,469 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-12-14 08:08:16,469 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 08:08:16,469 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 08:08:16,473 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2022-12-14 08:08:16,669 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-12-14 08:08:16,670 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 08:08:16,671 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 08:08:16,672 INFO L85 PathProgramCache]: Analyzing trace with hash -1969982288, now seen corresponding path program 1 times [2022-12-14 08:08:16,672 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 08:08:16,672 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [609453424] [2022-12-14 08:08:16,672 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 08:08:16,673 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 08:08:16,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 08:08:16,796 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 10 proven. 5 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-12-14 08:08:16,796 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 08:08:16,796 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [609453424] [2022-12-14 08:08:16,796 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [609453424] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 08:08:16,796 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [264235832] [2022-12-14 08:08:16,796 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 08:08:16,797 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 08:08:16,797 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 08:08:16,797 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 08:08:16,798 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-12-14 08:08:16,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 08:08:16,860 INFO L263 TraceCheckSpWp]: Trace formula consists of 278 conjuncts, 25 conjunts are in the unsatisfiable core [2022-12-14 08:08:16,861 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 08:08:16,909 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-12-14 08:08:16,910 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 08:08:16,910 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [264235832] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 08:08:16,910 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 08:08:16,910 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [10] total 13 [2022-12-14 08:08:16,910 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [538071893] [2022-12-14 08:08:16,910 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 08:08:16,911 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-12-14 08:08:16,911 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 08:08:16,911 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-12-14 08:08:16,911 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=130, Unknown=0, NotChecked=0, Total=156 [2022-12-14 08:08:16,911 INFO L87 Difference]: Start difference. First operand 327 states and 373 transitions. Second operand has 9 states, 7 states have (on average 5.285714285714286) internal successors, (37), 7 states have internal predecessors, (37), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-12-14 08:08:17,102 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 08:08:17,102 INFO L93 Difference]: Finished difference Result 535 states and 622 transitions. [2022-12-14 08:08:17,103 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-12-14 08:08:17,103 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 5.285714285714286) internal successors, (37), 7 states have internal predecessors, (37), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 58 [2022-12-14 08:08:17,103 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 08:08:17,106 INFO L225 Difference]: With dead ends: 535 [2022-12-14 08:08:17,106 INFO L226 Difference]: Without dead ends: 418 [2022-12-14 08:08:17,106 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 57 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=61, Invalid=319, Unknown=0, NotChecked=0, Total=380 [2022-12-14 08:08:17,107 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 53 mSDsluCounter, 336 mSDsCounter, 0 mSdLazyCounter, 276 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 409 SdHoareTripleChecker+Invalid, 281 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 276 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 08:08:17,107 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 409 Invalid, 281 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 276 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 08:08:17,108 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 418 states. [2022-12-14 08:08:17,145 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 418 to 396. [2022-12-14 08:08:17,146 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 396 states, 277 states have (on average 1.1588447653429603) internal successors, (321), 289 states have internal predecessors, (321), 60 states have call successors, (60), 58 states have call predecessors, (60), 58 states have return successors, (67), 56 states have call predecessors, (67), 60 states have call successors, (67) [2022-12-14 08:08:17,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 396 states to 396 states and 448 transitions. [2022-12-14 08:08:17,147 INFO L78 Accepts]: Start accepts. Automaton has 396 states and 448 transitions. Word has length 58 [2022-12-14 08:08:17,147 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 08:08:17,147 INFO L495 AbstractCegarLoop]: Abstraction has 396 states and 448 transitions. [2022-12-14 08:08:17,147 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 5.285714285714286) internal successors, (37), 7 states have internal predecessors, (37), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-12-14 08:08:17,148 INFO L276 IsEmpty]: Start isEmpty. Operand 396 states and 448 transitions. [2022-12-14 08:08:17,148 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-12-14 08:08:17,148 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 08:08:17,149 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 08:08:17,155 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2022-12-14 08:08:17,349 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 08:08:17,349 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 08:08:17,350 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 08:08:17,350 INFO L85 PathProgramCache]: Analyzing trace with hash -814311169, now seen corresponding path program 1 times [2022-12-14 08:08:17,350 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 08:08:17,350 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [802947563] [2022-12-14 08:08:17,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 08:08:17,350 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 08:08:17,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 08:08:17,402 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 16 proven. 1 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 08:08:17,402 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 08:08:17,402 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [802947563] [2022-12-14 08:08:17,402 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [802947563] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 08:08:17,402 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1073063861] [2022-12-14 08:08:17,402 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 08:08:17,402 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 08:08:17,402 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 08:08:17,403 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 08:08:17,404 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-12-14 08:08:17,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 08:08:17,461 INFO L263 TraceCheckSpWp]: Trace formula consists of 286 conjuncts, 12 conjunts are in the unsatisfiable core [2022-12-14 08:08:17,463 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 08:08:17,521 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-12-14 08:08:17,521 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 08:08:17,521 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1073063861] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 08:08:17,521 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 08:08:17,521 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [7] total 10 [2022-12-14 08:08:17,522 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1245820059] [2022-12-14 08:08:17,522 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 08:08:17,522 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 08:08:17,522 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 08:08:17,522 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 08:08:17,523 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2022-12-14 08:08:17,523 INFO L87 Difference]: Start difference. First operand 396 states and 448 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-12-14 08:08:17,643 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 08:08:17,643 INFO L93 Difference]: Finished difference Result 680 states and 779 transitions. [2022-12-14 08:08:17,644 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 08:08:17,644 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 62 [2022-12-14 08:08:17,644 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 08:08:17,644 INFO L225 Difference]: With dead ends: 680 [2022-12-14 08:08:17,644 INFO L226 Difference]: Without dead ends: 0 [2022-12-14 08:08:17,645 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 71 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=107, Unknown=0, NotChecked=0, Total=132 [2022-12-14 08:08:17,645 INFO L413 NwaCegarLoop]: 45 mSDtfsCounter, 32 mSDsluCounter, 109 mSDsCounter, 0 mSdLazyCounter, 83 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 32 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 86 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 83 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 08:08:17,646 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [32 Valid, 154 Invalid, 86 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 83 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 08:08:17,646 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-12-14 08:08:17,646 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-12-14 08:08:17,646 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 08:08:17,646 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-12-14 08:08:17,646 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 62 [2022-12-14 08:08:17,646 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 08:08:17,646 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-12-14 08:08:17,647 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-12-14 08:08:17,647 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-12-14 08:08:17,647 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-12-14 08:08:17,648 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-12-14 08:08:17,654 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2022-12-14 08:08:17,849 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-12-14 08:08:17,851 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-12-14 08:08:24,194 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 555 561) no Hoare annotation was computed. [2022-12-14 08:08:24,194 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 555 561) the Hoare annotation is: true [2022-12-14 08:08:24,194 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 798 809) the Hoare annotation is: (or (not (= |#NULL.offset| 0)) (not (= |old(~methaneLevelCritical~0)| 0)) (not (= ~pumpRunning~0 0)) (= ~methaneLevelCritical~0 0) (not (= 1 ~systemActive~0)) (not (= ~head~0.offset 0)) (not (<= 2 ~waterLevel~0)) (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))) [2022-12-14 08:08:24,194 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 798 809) no Hoare annotation was computed. [2022-12-14 08:08:24,195 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 810 818) the Hoare annotation is: true [2022-12-14 08:08:24,195 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 810 818) no Hoare annotation was computed. [2022-12-14 08:08:24,195 INFO L899 garLoopResultBuilder]: For program point L894(lines 894 900) no Hoare annotation was computed. [2022-12-14 08:08:24,195 INFO L895 garLoopResultBuilder]: At program point L890(lines 890 903) the Hoare annotation is: (let ((.cse12 (= |old(~pumpRunning~0)| 0)) (.cse13 (= ~pumpRunning~0 0))) (let ((.cse2 (not .cse13)) (.cse4 (not (= 0 ~systemActive~0))) (.cse3 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse0 (not .cse12)) (.cse5 (not (= |#NULL.offset| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~head~0.offset 0))) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (not (= |#NULL.base| 0))) (.cse9 (not (<= 0 |#StackHeapBarrier|))) (.cse10 (not (= ~head~0.base 0))) (.cse11 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 (and .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse5 (and (<= ~waterLevel~0 1) .cse6) .cse1 .cse7 (and (= |timeShift_getWaterLevel_~retValue_acc~8#1| ~waterLevel~0) (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1|) .cse6 (<= |timeShift_getWaterLevel_#res#1| 2147483647) (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1|) (= |timeShift_getWaterLevel_~retValue_acc~8#1| |timeShift_getWaterLevel_#res#1|) (= ~pumpRunning~0 1)) .cse8 .cse9 .cse10 .cse11) (or .cse1 .cse12 (and .cse2 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0) .cse3 .cse4)) (or (= ~methaneLevelCritical~0 0) .cse1) (or .cse0 .cse1 (not (< |old(~waterLevel~0)| 2)) (and .cse13 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1| 1) .cse3)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (= ~waterLevel~0 1)) (or .cse5 (not (<= |old(~pumpRunning~0)| 1)) .cse1 .cse7 .cse12 (and (let ((.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or (and .cse14 (<= |old(~waterLevel~0)| 0) .cse6) (and .cse14 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|)))) (= |timeShift_isMethaneAlarm_~retValue_acc~4#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_processEnvironment_~tmp~5#1| |timeShift_isMethaneAlarm_#res#1|)) .cse8 .cse9 (not (<= 0 |old(~pumpRunning~0)|)) .cse10 .cse11)))) [2022-12-14 08:08:24,196 INFO L895 garLoopResultBuilder]: At program point L890-1(lines 875 907) the Hoare annotation is: (let ((.cse13 (= ~pumpRunning~0 0)) (.cse18 (= ~methaneLevelCritical~0 0))) (let ((.cse3 (= |old(~pumpRunning~0)| 0)) (.cse4 (not .cse18)) (.cse16 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse15 (not .cse13)) (.cse19 (= 1 ~systemActive~0)) (.cse14 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse12 (and .cse15 (<= 2 ~waterLevel~0) .cse19 .cse14)) (.cse0 (not (= |#NULL.offset| 0))) (.cse2 (not (= ~head~0.offset 0))) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (not (= |#NULL.base| 0))) (.cse8 (not (<= 0 |#StackHeapBarrier|))) (.cse9 (not (= ~head~0.base 0))) (.cse10 (not (= ~cleanupTimeShifts~0 4))) (.cse17 (and .cse13 .cse4 .cse16 .cse14)) (.cse11 (not .cse3)) (.cse1 (not .cse19))) (and (or .cse0 (not (<= |old(~pumpRunning~0)| 1)) .cse1 .cse2 .cse3 .cse4 (and (let ((.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or (and .cse5 (<= |old(~waterLevel~0)| 0) .cse6) (and .cse5 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|)))) (= |timeShift_isMethaneAlarm_~retValue_acc~4#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_processEnvironment_~tmp~5#1| |timeShift_isMethaneAlarm_#res#1|)) .cse7 .cse8 (not (<= 0 |old(~pumpRunning~0)|)) .cse9 .cse10) (or .cse11 .cse1 .cse12 (and .cse13 .cse14)) (or .cse11 .cse1 .cse12 (not (<= 2 |old(~waterLevel~0)|))) (or .cse11 .cse0 (and (<= ~waterLevel~0 1) .cse6) .cse1 .cse2 .cse4 (and (= |timeShift_getWaterLevel_~retValue_acc~8#1| ~waterLevel~0) (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1|) .cse6 (<= |timeShift_getWaterLevel_#res#1| 2147483647) (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1|) (= |timeShift_getWaterLevel_~retValue_acc~8#1| |timeShift_getWaterLevel_#res#1|) (= ~pumpRunning~0 1)) .cse7 .cse8 .cse9 .cse10) (or .cse1 (and .cse15 .cse16 .cse14) .cse3 .cse17) (or .cse18 .cse1 .cse3 .cse17) (or .cse11 (not (= |old(~waterLevel~0)| 1)) .cse1 (= ~waterLevel~0 1)) (or .cse18 .cse1 (not (= |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1| 0))))))) [2022-12-14 08:08:24,196 INFO L899 garLoopResultBuilder]: For program point L535-1(lines 534 553) no Hoare annotation was computed. [2022-12-14 08:08:24,197 INFO L895 garLoopResultBuilder]: At program point L597(lines 597 605) the Hoare annotation is: (let ((.cse1 (+ ~waterLevel~0 1)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (and (or (<= .cse1 |old(~waterLevel~0)|) (and (not (< 0 ~waterLevel~0)) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (not (= ~pumpRunning~0 0)) (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0))) (or (not (= |#NULL.offset| 0)) (not (<= |old(~pumpRunning~0)| 1)) .cse0 (not (= ~head~0.offset 0)) (not (= ~methaneLevelCritical~0 0)) (and (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or (and .cse2 (= |old(~waterLevel~0)| .cse1) (< 0 |old(~waterLevel~0)|)) (and .cse2 (= |old(~waterLevel~0)| ~waterLevel~0)))) (= |timeShift_isMethaneAlarm_~retValue_acc~4#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_processEnvironment_~tmp~5#1| |timeShift_isMethaneAlarm_#res#1|)) (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) (not (<= 0 |old(~pumpRunning~0)|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0))) [2022-12-14 08:08:24,197 INFO L895 garLoopResultBuilder]: At program point L882(line 882) the Hoare annotation is: (let ((.cse18 (= ~methaneLevelCritical~0 0))) (let ((.cse14 (= |old(~pumpRunning~0)| 0)) (.cse8 (not .cse18)) (.cse16 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse3 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse19 (= ~pumpRunning~0 0))) (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not .cse19)) (.cse4 (not (= 0 ~systemActive~0))) (.cse6 (not (= |#NULL.offset| 0))) (.cse7 (not (= ~head~0.offset 0))) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (not (= |#NULL.base| 0))) (.cse11 (not (<= 0 |#StackHeapBarrier|))) (.cse12 (not (= ~head~0.base 0))) (.cse13 (not (= ~cleanupTimeShifts~0 4))) (.cse15 (and .cse19 .cse8 .cse16 .cse3)) (.cse0 (not .cse14)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (and .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4) .cse5) (or .cse0 .cse6 .cse1 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (or .cse0 .cse6 .cse1 .cse7 .cse8 .cse9 .cse11 .cse12 .cse13 (= ~pumpRunning~0 1) .cse5) (or .cse1 .cse14 .cse15 (and .cse2 .cse16 .cse3 .cse4)) (or .cse6 (not (<= |old(~pumpRunning~0)| 1)) .cse1 .cse7 .cse14 .cse8 (and (let ((.cse17 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or (and .cse17 (<= |old(~waterLevel~0)| 0) .cse10) (and .cse17 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|)))) (= |timeShift_isMethaneAlarm_~retValue_acc~4#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_processEnvironment_~tmp~5#1| |timeShift_isMethaneAlarm_#res#1|)) .cse9 .cse11 (not (<= 0 |old(~pumpRunning~0)|)) .cse12 .cse13) (or .cse18 .cse1 .cse14 .cse15) (or .cse0 .cse1 (not (< |old(~waterLevel~0)| 2)) (and .cse19 .cse3)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (= ~waterLevel~0 1)))))) [2022-12-14 08:08:24,197 INFO L899 garLoopResultBuilder]: For program point L593(lines 593 610) no Hoare annotation was computed. [2022-12-14 08:08:24,197 INFO L899 garLoopResultBuilder]: For program point L882-1(line 882) no Hoare annotation was computed. [2022-12-14 08:08:24,197 INFO L895 garLoopResultBuilder]: At program point L870(line 870) the Hoare annotation is: (not (= 1 ~systemActive~0)) [2022-12-14 08:08:24,197 INFO L895 garLoopResultBuilder]: At program point L635(line 635) the Hoare annotation is: (let ((.cse2 (+ ~waterLevel~0 1)) (.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (and (or (<= .cse2 |old(~waterLevel~0)|) (and (not (< 0 ~waterLevel~0)) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (not (= ~pumpRunning~0 0)))) (or (not (= |#NULL.offset| 0)) (not (<= |old(~pumpRunning~0)| 1)) .cse0 (not (= ~head~0.offset 0)) .cse1 (not (= ~methaneLevelCritical~0 0)) (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (and (= |old(~waterLevel~0)| .cse2) (< 0 |old(~waterLevel~0)|)) (= |old(~waterLevel~0)| ~waterLevel~0))) (not (<= 0 |old(~pumpRunning~0)|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))) (or (not .cse1) .cse0))) [2022-12-14 08:08:24,198 INFO L895 garLoopResultBuilder]: At program point L635-1(line 635) the Hoare annotation is: (let ((.cse1 (+ ~waterLevel~0 1)) (.cse2 (not (= 1 ~systemActive~0)))) (and (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or (and .cse0 (= |old(~waterLevel~0)| .cse1) (< 0 |old(~waterLevel~0)|)) (not (= |#NULL.offset| 0)) (not (<= |old(~pumpRunning~0)| 1)) .cse2 (not (= ~head~0.offset 0)) (not (= ~methaneLevelCritical~0 0)) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) (not (<= 0 |old(~pumpRunning~0)|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) (or .cse2 (and (= |timeShift_isMethaneAlarm_#t~ret30#1| ~methaneLevelCritical~0) (or (<= .cse1 |old(~waterLevel~0)|) (and (not (< 0 ~waterLevel~0)) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (not (= ~pumpRunning~0 0)))) (or (not (= |old(~pumpRunning~0)| 0)) .cse2))) [2022-12-14 08:08:24,198 INFO L895 garLoopResultBuilder]: At program point L603(line 603) the Hoare annotation is: (let ((.cse1 (+ ~waterLevel~0 1)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (and (or (<= .cse1 |old(~waterLevel~0)|) (and (not (< 0 ~waterLevel~0)) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (not (= ~pumpRunning~0 0)) (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0))) (or (not (= |#NULL.offset| 0)) (not (<= |old(~pumpRunning~0)| 1)) .cse0 (not (= ~head~0.offset 0)) (and (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or (and .cse2 (= |old(~waterLevel~0)| .cse1) (< 0 |old(~waterLevel~0)|)) (and .cse2 (= |old(~waterLevel~0)| ~waterLevel~0)))) (= |timeShift_isMethaneAlarm_~retValue_acc~4#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_processEnvironment_~tmp~5#1| |timeShift_isMethaneAlarm_#res#1|)) (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) (not (<= 0 |old(~pumpRunning~0)|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))) (or (= ~methaneLevelCritical~0 0) .cse0) (or (not (= |old(~pumpRunning~0)| 0)) .cse0))) [2022-12-14 08:08:24,198 INFO L895 garLoopResultBuilder]: At program point L884(lines 884 904) the Hoare annotation is: (let ((.cse18 (= ~methaneLevelCritical~0 0))) (let ((.cse15 (= |old(~pumpRunning~0)| 0)) (.cse9 (not .cse18)) (.cse16 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse3 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse19 (not (= |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1| 0))) (.cse6 (= ~pumpRunning~0 0))) (let ((.cse2 (not .cse6)) (.cse4 (not (= 0 ~systemActive~0))) (.cse5 (not (= |#NULL.offset| 0))) (.cse8 (not (= ~head~0.offset 0))) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (not (= |#NULL.base| 0))) (.cse11 (not (<= 0 |#StackHeapBarrier|))) (.cse12 (not (= ~head~0.base 0))) (.cse13 (not (= ~cleanupTimeShifts~0 4))) (.cse14 (and .cse6 .cse9 .cse16 .cse3 .cse19)) (.cse0 (not .cse15)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (and .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse5 (and .cse6 .cse7) .cse1 (and (<= |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1| 0) (<= 0 |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1|) .cse7 (= ~pumpRunning~0 1)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (or .cse1 .cse14 .cse15 (and .cse2 .cse16 .cse3 .cse4)) (or .cse5 (not (<= |old(~pumpRunning~0)| 1)) .cse1 .cse8 .cse15 .cse9 (and (let ((.cse17 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or (and .cse17 (<= |old(~waterLevel~0)| 0) .cse7) (and .cse17 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|)))) (= |timeShift_isMethaneAlarm_~retValue_acc~4#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_processEnvironment_~tmp~5#1| |timeShift_isMethaneAlarm_#res#1|)) .cse10 .cse11 (not (<= 0 |old(~pumpRunning~0)|)) .cse12 .cse13) (or .cse18 .cse1 .cse14 .cse15) (or .cse0 .cse1 (not (< |old(~waterLevel~0)| 2)) (and .cse6 .cse3)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (= ~waterLevel~0 1)) (or .cse18 .cse1 .cse19))))) [2022-12-14 08:08:24,198 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 531 554) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not .cse1)) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |#NULL.offset| 0)) (not (<= |old(~pumpRunning~0)| 1)) .cse0 (not (= ~head~0.offset 0)) .cse1 (not (= ~methaneLevelCritical~0 0)) (and (<= ~pumpRunning~0 1) .cse2 (<= 0 ~pumpRunning~0)) (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) (not (<= 0 |old(~pumpRunning~0)|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))) (or .cse3 .cse0 .cse2) (or .cse0 .cse1 (and (not .cse4) (<= ~waterLevel~0 |old(~waterLevel~0)|) (or .cse2 (= ~waterLevel~0 1)))) (or .cse3 .cse4 .cse0)))) [2022-12-14 08:08:24,198 INFO L895 garLoopResultBuilder]: At program point L608(line 608) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (= |old(~pumpRunning~0)| 0)) (or .cse0 (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (not (= |#NULL.offset| 0)) .cse0 (not (= ~head~0.offset 0)) (not (= ~methaneLevelCritical~0 0)) (not (= |#NULL.base| 0)) (= |old(~waterLevel~0)| ~waterLevel~0) (not (<= 0 |#StackHeapBarrier|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))) (or .cse0 (<= 2 ~waterLevel~0) (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~waterLevel~0)| 1)) .cse0 (= ~waterLevel~0 1)))) [2022-12-14 08:08:24,199 INFO L895 garLoopResultBuilder]: At program point L608-1(lines 589 613) the Hoare annotation is: (let ((.cse18 (= ~methaneLevelCritical~0 0))) (let ((.cse14 (= |old(~pumpRunning~0)| 0)) (.cse8 (not .cse18)) (.cse16 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse3 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse19 (= ~pumpRunning~0 0))) (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not .cse19)) (.cse4 (not (= 0 ~systemActive~0))) (.cse6 (not (= |#NULL.offset| 0))) (.cse7 (not (= ~head~0.offset 0))) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (not (= |#NULL.base| 0))) (.cse11 (not (<= 0 |#StackHeapBarrier|))) (.cse12 (not (= ~head~0.base 0))) (.cse13 (not (= ~cleanupTimeShifts~0 4))) (.cse15 (and .cse19 .cse8 .cse16 .cse3)) (.cse0 (not .cse14)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (and .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4) .cse5) (or .cse0 .cse6 .cse1 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (or .cse0 .cse6 .cse1 .cse7 .cse8 .cse9 .cse11 .cse12 .cse13 (= ~pumpRunning~0 1) .cse5) (or .cse1 .cse14 .cse15 (and .cse2 .cse16 .cse3 .cse4)) (or .cse6 (not (<= |old(~pumpRunning~0)| 1)) .cse1 .cse7 .cse14 .cse8 (and (let ((.cse17 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or (and .cse17 (<= |old(~waterLevel~0)| 0) .cse10) (and .cse17 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (< 0 |old(~waterLevel~0)|)))) (= |timeShift_isMethaneAlarm_~retValue_acc~4#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_processEnvironment_~tmp~5#1| |timeShift_isMethaneAlarm_#res#1|)) .cse9 .cse11 (not (<= 0 |old(~pumpRunning~0)|)) .cse12 .cse13) (or .cse18 .cse1 .cse14 .cse15) (or .cse0 .cse1 (not (< |old(~waterLevel~0)| 2)) (and .cse19 .cse3)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (= ~waterLevel~0 1)))))) [2022-12-14 08:08:24,199 INFO L899 garLoopResultBuilder]: For program point L542-1(lines 542 548) no Hoare annotation was computed. [2022-12-14 08:08:24,199 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 531 554) no Hoare annotation was computed. [2022-12-14 08:08:24,199 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 870) no Hoare annotation was computed. [2022-12-14 08:08:24,199 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-12-14 08:08:24,199 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-12-14 08:08:24,199 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-12-14 08:08:24,199 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-12-14 08:08:24,199 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-12-14 08:08:24,199 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-12-14 08:08:24,199 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 52 81) the Hoare annotation is: true [2022-12-14 08:08:24,199 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-12-14 08:08:24,199 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-12-14 08:08:24,199 INFO L895 garLoopResultBuilder]: At program point L762(lines 715 763) the Hoare annotation is: false [2022-12-14 08:08:24,199 INFO L899 garLoopResultBuilder]: For program point L717(lines 716 761) no Hoare annotation was computed. [2022-12-14 08:08:24,199 INFO L895 garLoopResultBuilder]: At program point L738(line 738) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~0#1| 1) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-12-14 08:08:24,199 INFO L895 garLoopResultBuilder]: At program point L759(lines 716 761) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= ~waterLevel~0 1) .cse1 .cse2) (and (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0) (not (= ~pumpRunning~0 0)) .cse0 .cse2) (and .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-12-14 08:08:24,200 INFO L899 garLoopResultBuilder]: For program point L726(lines 726 732) no Hoare annotation was computed. [2022-12-14 08:08:24,200 INFO L899 garLoopResultBuilder]: For program point L726-1(lines 726 732) no Hoare annotation was computed. [2022-12-14 08:08:24,200 INFO L895 garLoopResultBuilder]: At program point L140(lines 140 147) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (and (= (select |#length| 15) 25) (= 9 (select |#length| 5)) (= (select |#length| 9) 21) (= 30 (select |#length| 7)) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (= ~pumpRunning~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~11#1|) (= (select |#valid| 9) 1) (= (select |#length| 12) 25) (= (select |#valid| 11) 1) (= ~methaneLevelCritical~0 0) (= 30 (select |#length| 4)) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= 2 (select |#length| 1)) (= (select |#length| 8) 9) (= (select |#valid| 3) 1) (= (select |#valid| 7) 1) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_valid_product_~retValue_acc~11#1|) (= 30 (select |#length| 13)) (= 1 ~systemActive~0) (= 30 (select |#length| 10)) (= (select |#valid| 12) 1) (= (select |#valid| 4) 1) (= (select |#valid| 1) 1) (= (select |#length| 6) 21) (= (select |#valid| 14) 1) (= 9 (select |#length| 14)) (= (select |#valid| 0) 0) (= ~head~0.base 0) (= (select |#valid| 2) 1) (= |#NULL.offset| 0) (= 9 (select |#length| 11)) (= ~waterLevel~0 1) (= (select .cse0 0) 48) (= (select |#valid| 6) 1) (= (select .cse0 1) 0) (= (select |#valid| 10) 1) (= (select |#valid| 8) 1) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))) [2022-12-14 08:08:24,200 INFO L902 garLoopResultBuilder]: At program point L140-2(lines 140 147) the Hoare annotation is: true [2022-12-14 08:08:24,200 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-12-14 08:08:24,200 INFO L895 garLoopResultBuilder]: At program point L752-2(lines 746 757) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~0#1| 1) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-12-14 08:08:24,200 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(line -1) the Hoare annotation is: true [2022-12-14 08:08:24,200 INFO L899 garLoopResultBuilder]: For program point L736(lines 736 742) no Hoare annotation was computed. [2022-12-14 08:08:24,200 INFO L899 garLoopResultBuilder]: For program point L736-1(lines 736 742) no Hoare annotation was computed. [2022-12-14 08:08:24,200 INFO L902 garLoopResultBuilder]: At program point L765(lines 706 769) the Hoare annotation is: true [2022-12-14 08:08:24,200 INFO L895 garLoopResultBuilder]: At program point L728(line 728) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3) (and .cse0 (not (= ~pumpRunning~0 0)) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 (< ~waterLevel~0 2) .cse3))) [2022-12-14 08:08:24,200 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 563 587) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (not .cse0) .cse1 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |#NULL.offset| 0)) .cse1 (not (= ~head~0.offset 0)) (not (= ~methaneLevelCritical~0 0)) (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) (not (<= 0 |old(~pumpRunning~0)|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))) (or (not .cse2) .cse0 .cse1))) [2022-12-14 08:08:24,200 INFO L895 garLoopResultBuilder]: At program point L577(line 577) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (= |old(~pumpRunning~0)| 0)) (or (not (= |#NULL.offset| 0)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~9#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~9#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~6#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~6#1|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) .cse0 (not (= ~head~0.offset 0)) (not (= ~methaneLevelCritical~0 0)) (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))) (or .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0) (<= ~waterLevel~0 1))))) [2022-12-14 08:08:24,201 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 563 587) no Hoare annotation was computed. [2022-12-14 08:08:24,201 INFO L895 garLoopResultBuilder]: At program point L571(lines 571 579) the Hoare annotation is: (let ((.cse1 (< ~waterLevel~0 2)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (= |old(~pumpRunning~0)| 0)) (or .cse0 (and (= ~pumpRunning~0 0) (or (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 1) .cse1))) (or (not (= |#NULL.offset| 0)) .cse0 (not (= ~head~0.offset 0)) (not (= ~methaneLevelCritical~0 0)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~6#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~6#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (or (and (not .cse1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~9#1| 0)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~9#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~9#1| 1))) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~6#1|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (or (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~6#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0))) (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))) (or (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0) .cse0 (not (<= ~waterLevel~0 1))))) [2022-12-14 08:08:24,201 INFO L895 garLoopResultBuilder]: At program point L567(lines 567 584) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (not .cse0) .cse1 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |#NULL.offset| 0)) .cse1 (not (= ~head~0.offset 0)) (not (= ~methaneLevelCritical~0 0)) (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) (not (<= 0 |old(~pumpRunning~0)|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))) (or (not .cse2) .cse0 .cse1))) [2022-12-14 08:08:24,201 INFO L895 garLoopResultBuilder]: At program point L582(line 582) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |#NULL.offset| 0)) .cse0 (not (= ~head~0.offset 0)) (not (= ~methaneLevelCritical~0 0)) (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) (not (<= 0 |old(~pumpRunning~0)|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))) (or (not (= ~pumpRunning~0 0)) .cse0) (or (not (= |old(~pumpRunning~0)| 0)) .cse0))) [2022-12-14 08:08:24,201 INFO L899 garLoopResultBuilder]: For program point L582-1(lines 563 587) no Hoare annotation was computed. [2022-12-14 08:08:24,201 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 786 797) no Hoare annotation was computed. [2022-12-14 08:08:24,201 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 786 797) the Hoare annotation is: (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse8 (= 1 ~systemActive~0)) (.cse6 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse7 (or .cse5 (= ~waterLevel~0 1))) (.cse3 (= ~pumpRunning~0 0))) (let ((.cse0 (not .cse3)) (.cse1 (and .cse3 .cse8 .cse6 .cse7)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse2 (not .cse8))) (and (or .cse0 .cse1 .cse2 (not (< |old(~waterLevel~0)| 2))) (or .cse3 (not (= |#NULL.offset| 0)) .cse2 (not (= ~head~0.offset 0)) (not (<= ~pumpRunning~0 1)) (not .cse4) (not (= |#NULL.base| 0)) (not (<= 0 ~pumpRunning~0)) .cse5 (not (<= 0 |#StackHeapBarrier|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))) (or .cse3 (and .cse6 .cse7) .cse2) (or .cse0 .cse1 .cse4 .cse2))))) [2022-12-14 08:08:24,203 INFO L445 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 08:08:24,205 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-14 08:08:24,230 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 14.12 08:08:24 BoogieIcfgContainer [2022-12-14 08:08:24,230 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-14 08:08:24,230 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-14 08:08:24,231 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-14 08:08:24,231 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-14 08:08:24,231 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 08:08:06" (3/4) ... [2022-12-14 08:08:24,234 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-12-14 08:08:24,238 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-12-14 08:08:24,238 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-12-14 08:08:24,238 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-12-14 08:08:24,238 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-12-14 08:08:24,238 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-12-14 08:08:24,238 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-12-14 08:08:24,238 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-12-14 08:08:24,242 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 45 nodes and edges [2022-12-14 08:08:24,242 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-12-14 08:08:24,243 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-12-14 08:08:24,243 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-14 08:08:24,243 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-14 08:08:24,260 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && pumpRunning == 0) && 1 == retValue_acc) && \valid[9] == 1) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && 31 == unknown-#length-unknown[2]) && head == 0) && tmp == 1) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && \result == retValue_acc) && 30 == unknown-#length-unknown[13]) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[1][0] == 48) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 [2022-12-14 08:08:24,260 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(#NULL == 0) || !(\old(pumpRunning) <= 1)) || !(1 == systemActive)) || !(head == 0)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || ((pumpRunning <= 1 && \old(waterLevel) == waterLevel) && 0 <= pumpRunning)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(pumpRunning))) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || \old(waterLevel) == waterLevel)) && ((!(1 == systemActive) || \old(pumpRunning) == 0) || ((!(pumpRunning == 0) && waterLevel <= \old(waterLevel)) && (\old(waterLevel) == waterLevel || waterLevel == 1)))) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) [2022-12-14 08:08:24,261 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((!(pumpRunning == 0) && 2 <= waterLevel) && waterLevel <= \old(waterLevel)) && !(0 == systemActive))) || !(2 <= \old(waterLevel))) && (((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || \old(waterLevel) == waterLevel) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || pumpRunning == 1) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || \old(pumpRunning) == 0) || (((pumpRunning == 0 && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel))) || (((!(pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && !(0 == systemActive)))) && (((((((((((!(#NULL == 0) || !(\old(pumpRunning) <= 1)) || !(1 == systemActive)) || !(head == 0)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) <= 0) && \old(waterLevel) == waterLevel) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel + 1) && 0 < \old(waterLevel))) && retValue_acc == \result) && tmp == \result)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(pumpRunning))) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || \old(pumpRunning) == 0) || (((pumpRunning == 0 && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) < 2)) || (pumpRunning == 0 && waterLevel <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || waterLevel == 1) [2022-12-14 08:08:24,261 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(pumpRunning == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0) && (((((((((pumpRunning == \old(pumpRunning) || !(#NULL == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(pumpRunning))) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) [2022-12-14 08:08:24,261 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel + 1) && 0 < \old(waterLevel)) || !(#NULL == 0)) || !(\old(pumpRunning) <= 1)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(pumpRunning))) || !(head == 0)) || !(cleanupTimeShifts == 4)) && (!(1 == systemActive) || ((aux-isMethaneLevelCritical()-aux == methaneLevelCritical && (waterLevel + 1 <= \old(waterLevel) || (!(0 < waterLevel) && waterLevel <= \old(waterLevel)))) && !(pumpRunning == 0)))) && (!(\old(pumpRunning) == 0) || !(1 == systemActive)) [2022-12-14 08:08:24,261 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((!(pumpRunning == 0) && 2 <= waterLevel) && waterLevel <= \old(waterLevel)) && !(0 == systemActive))) || !(2 <= \old(waterLevel))) && ((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((tmp <= 0 && 0 <= tmp) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((!(1 == systemActive) || ((((pumpRunning == 0 && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && !(tmp == 0))) || \old(pumpRunning) == 0) || (((!(pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && !(0 == systemActive)))) && (((((((((((!(#NULL == 0) || !(\old(pumpRunning) <= 1)) || !(1 == systemActive)) || !(head == 0)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) <= 0) && \old(waterLevel) == waterLevel) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel + 1) && 0 < \old(waterLevel))) && retValue_acc == \result) && tmp == \result)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(pumpRunning))) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || ((((pumpRunning == 0 && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && !(tmp == 0))) || \old(pumpRunning) == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) < 2)) || (pumpRunning == 0 && waterLevel <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || waterLevel == 1)) && ((methaneLevelCritical == 0 || !(1 == systemActive)) || !(tmp == 0)) [2022-12-14 08:08:24,261 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((!(#NULL == 0) || !(\old(pumpRunning) <= 1)) || !(1 == systemActive)) || !(head == 0)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) <= 0) && \old(waterLevel) == waterLevel) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel + 1) && 0 < \old(waterLevel))) && retValue_acc == \result) && tmp == \result)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(pumpRunning))) || !(head == 0)) || !(cleanupTimeShifts == 4)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((!(pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= \old(waterLevel))) || (pumpRunning == 0 && waterLevel <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((!(pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= \old(waterLevel))) || !(2 <= \old(waterLevel)))) && ((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || (waterLevel <= 1 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || ((((((retValue_acc == waterLevel && \result == tmp___0) && \old(waterLevel) == waterLevel) && \result <= 2147483647) && methaneLevelCritical == tmp) && retValue_acc == \result) && pumpRunning == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((!(1 == systemActive) || ((!(pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel))) || \old(pumpRunning) == 0) || (((pumpRunning == 0 && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || \old(pumpRunning) == 0) || (((pumpRunning == 0 && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || waterLevel == 1)) && ((methaneLevelCritical == 0 || !(1 == systemActive)) || !(tmp == 0)) [2022-12-14 08:08:24,261 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || (((waterLevel + 1 <= \old(waterLevel) || (!(0 < waterLevel) && waterLevel <= \old(waterLevel))) && !(pumpRunning == 0)) && tmp == methaneLevelCritical)) && ((((((((((!(#NULL == 0) || !(\old(pumpRunning) <= 1)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel + 1) && 0 < \old(waterLevel)) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) && retValue_acc == \result) && tmp == \result)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(pumpRunning))) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (!(\old(pumpRunning) == 0) || !(1 == systemActive)) [2022-12-14 08:08:24,262 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((!(pumpRunning == 0) && 2 <= waterLevel) && waterLevel <= \old(waterLevel)) && !(0 == systemActive))) || !(2 <= \old(waterLevel))) && (((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || (waterLevel <= 1 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(head == 0)) || ((((((retValue_acc == waterLevel && \result == tmp___0) && \old(waterLevel) == waterLevel) && \result <= 2147483647) && methaneLevelCritical == tmp) && retValue_acc == \result) && pumpRunning == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((!(1 == systemActive) || \old(pumpRunning) == 0) || (((!(pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && !(0 == systemActive)))) && (methaneLevelCritical == 0 || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) < 2)) || ((pumpRunning == 0 && tmp___0 <= 1) && waterLevel <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || waterLevel == 1)) && ((((((((((!(#NULL == 0) || !(\old(pumpRunning) <= 1)) || !(1 == systemActive)) || !(head == 0)) || \old(pumpRunning) == 0) || (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) <= 0) && \old(waterLevel) == waterLevel) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel + 1) && 0 < \old(waterLevel))) && retValue_acc == \result) && tmp == \result)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(pumpRunning))) || !(head == 0)) || !(cleanupTimeShifts == 4)) [2022-12-14 08:08:24,262 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) && (!(1 == systemActive) || (pumpRunning == 0 && (tmp == 1 || waterLevel < 2)))) && ((((((((!(#NULL == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || (((((retValue_acc == tmp___0 && retValue_acc == \result) && ((!(waterLevel < 2) && retValue_acc == 0) || (retValue_acc == \result && retValue_acc == 1))) && \result == tmp) && tmp == \result) && (tmp == 0 || tmp___0 == 0))) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((tmp == 0 || !(1 == systemActive)) || !(waterLevel <= 1)) [2022-12-14 08:08:24,275 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/witness.graphml [2022-12-14 08:08:24,276 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-14 08:08:24,276 INFO L158 Benchmark]: Toolchain (without parser) took 18936.49ms. Allocated memory was 144.7MB in the beginning and 213.9MB in the end (delta: 69.2MB). Free memory was 107.2MB in the beginning and 153.8MB in the end (delta: -46.5MB). Peak memory consumption was 24.3MB. Max. memory is 16.1GB. [2022-12-14 08:08:24,276 INFO L158 Benchmark]: CDTParser took 0.15ms. Allocated memory is still 144.7MB. Free memory was 112.9MB in the beginning and 112.7MB in the end (delta: 149.1kB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-14 08:08:24,277 INFO L158 Benchmark]: CACSL2BoogieTranslator took 272.16ms. Allocated memory is still 144.7MB. Free memory was 106.8MB in the beginning and 88.4MB in the end (delta: 18.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-12-14 08:08:24,277 INFO L158 Benchmark]: Boogie Procedure Inliner took 31.67ms. Allocated memory is still 144.7MB. Free memory was 88.4MB in the beginning and 86.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-14 08:08:24,277 INFO L158 Benchmark]: Boogie Preprocessor took 18.55ms. Allocated memory is still 144.7MB. Free memory was 86.4MB in the beginning and 84.9MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. [2022-12-14 08:08:24,278 INFO L158 Benchmark]: RCFGBuilder took 384.43ms. Allocated memory is still 144.7MB. Free memory was 84.9MB in the beginning and 61.7MB in the end (delta: 23.2MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. [2022-12-14 08:08:24,278 INFO L158 Benchmark]: TraceAbstraction took 18180.08ms. Allocated memory was 144.7MB in the beginning and 213.9MB in the end (delta: 69.2MB). Free memory was 60.7MB in the beginning and 159.0MB in the end (delta: -98.3MB). Peak memory consumption was 78.9MB. Max. memory is 16.1GB. [2022-12-14 08:08:24,278 INFO L158 Benchmark]: Witness Printer took 45.15ms. Allocated memory is still 213.9MB. Free memory was 159.0MB in the beginning and 153.8MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-12-14 08:08:24,280 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15ms. Allocated memory is still 144.7MB. Free memory was 112.9MB in the beginning and 112.7MB in the end (delta: 149.1kB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 272.16ms. Allocated memory is still 144.7MB. Free memory was 106.8MB in the beginning and 88.4MB in the end (delta: 18.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 31.67ms. Allocated memory is still 144.7MB. Free memory was 88.4MB in the beginning and 86.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 18.55ms. Allocated memory is still 144.7MB. Free memory was 86.4MB in the beginning and 84.9MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 384.43ms. Allocated memory is still 144.7MB. Free memory was 84.9MB in the beginning and 61.7MB in the end (delta: 23.2MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. * TraceAbstraction took 18180.08ms. Allocated memory was 144.7MB in the beginning and 213.9MB in the end (delta: 69.2MB). Free memory was 60.7MB in the beginning and 159.0MB in the end (delta: -98.3MB). Peak memory consumption was 78.9MB. Max. memory is 16.1GB. * Witness Printer took 45.15ms. Allocated memory is still 213.9MB. Free memory was 159.0MB in the beginning and 153.8MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 870]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 58 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 18.1s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 4.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1143 SdHoareTripleChecker+Valid, 1.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1107 mSDsluCounter, 2550 SdHoareTripleChecker+Invalid, 1.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1815 mSDsCounter, 412 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3001 IncrementalHoareTripleChecker+Invalid, 3413 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 412 mSolverCounterUnsat, 735 mSDtfsCounter, 3001 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 529 GetRequests, 367 SyntacticMatches, 6 SemanticMatches, 156 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1211 ImplicationChecksByTransitivity, 4.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=472occurred in iteration=8, InterpolantAutomatonStates: 124, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 326 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 35 LocationsWithAnnotation, 1320 PreInvPairs, 1445 NumberOfFragments, 2836 HoareAnnotationTreeSize, 1320 FomulaSimplifications, 7025 FormulaSimplificationTreeSizeReduction, 0.6s HoareSimplificationTime, 35 FomulaSimplificationsInter, 44281 FormulaSimplificationTreeSizeReductionInter, 5.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.1s InterpolantComputationTime, 722 NumberOfCodeBlocks, 722 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 758 ConstructedInterpolants, 0 QuantifiedInterpolants, 1853 SizeOfPredicates, 39 NumberOfNonLiveVariables, 1492 ConjunctsInSsa, 93 ConjunctsInUnsatCore, 19 InterpolantComputations, 11 PerfectInterpolantSequences, 182/207 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 1.4s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 5, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 51, DAG_INTERPRETER_EARLY_EXITS: 3, TOOLS_POST_APPLICATIONS: 62, TOOLS_POST_TIME: 0.3s, TOOLS_POST_CALL_APPLICATIONS: 29, TOOLS_POST_CALL_TIME: 0.5s, TOOLS_POST_RETURN_APPLICATIONS: 24, TOOLS_POST_RETURN_TIME: 0.4s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 115, TOOLS_QUANTIFIERELIM_TIME: 1.1s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.1s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 142, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 26, DOMAIN_JOIN_TIME: 0.2s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 1, DOMAIN_WIDEN_TIME: 0.0s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 2, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 51, DOMAIN_ISBOTTOM_TIME: 0.0s, LOOP_SUMMARIZER_APPLICATIONS: 1, LOOP_SUMMARIZER_CACHE_MISSES: 1, LOOP_SUMMARIZER_OVERALL_TIME: 1.0s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 1.0s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 2, CALL_SUMMARIZER_APPLICATIONS: 24, CALL_SUMMARIZER_CACHE_MISSES: 4, CALL_SUMMARIZER_OVERALL_TIME: 0.1s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.1s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 667, DAG_COMPRESSION_RETAINED_NODES: 118, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 875]: Loop Invariant Derived loop invariant: (((((((((((((((((!(#NULL == 0) || !(\old(pumpRunning) <= 1)) || !(1 == systemActive)) || !(head == 0)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) <= 0) && \old(waterLevel) == waterLevel) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel + 1) && 0 < \old(waterLevel))) && retValue_acc == \result) && tmp == \result)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(pumpRunning))) || !(head == 0)) || !(cleanupTimeShifts == 4)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((!(pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= \old(waterLevel))) || (pumpRunning == 0 && waterLevel <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((!(pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= \old(waterLevel))) || !(2 <= \old(waterLevel)))) && ((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || (waterLevel <= 1 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || ((((((retValue_acc == waterLevel && \result == tmp___0) && \old(waterLevel) == waterLevel) && \result <= 2147483647) && methaneLevelCritical == tmp) && retValue_acc == \result) && pumpRunning == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((!(1 == systemActive) || ((!(pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel))) || \old(pumpRunning) == 0) || (((pumpRunning == 0 && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || \old(pumpRunning) == 0) || (((pumpRunning == 0 && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || waterLevel == 1)) && ((methaneLevelCritical == 0 || !(1 == systemActive)) || !(tmp == 0)) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 635]: Loop Invariant Derived loop invariant: ((((((((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel + 1) && 0 < \old(waterLevel)) || !(#NULL == 0)) || !(\old(pumpRunning) <= 1)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(pumpRunning))) || !(head == 0)) || !(cleanupTimeShifts == 4)) && (!(1 == systemActive) || ((aux-isMethaneLevelCritical()-aux == methaneLevelCritical && (waterLevel + 1 <= \old(waterLevel) || (!(0 < waterLevel) && waterLevel <= \old(waterLevel)))) && !(pumpRunning == 0)))) && (!(\old(pumpRunning) == 0) || !(1 == systemActive)) - InvariantResult [Line: 716]: Loop Invariant Derived loop invariant: ((((tmp == 1 && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) || (((tmp == systemActive && !(pumpRunning == 0)) && tmp == 1) && splverifierCounter == 0)) || (((tmp == 1 && 1 == systemActive) && !(methaneLevelCritical == 0)) && splverifierCounter == 0) - InvariantResult [Line: 140]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 706]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 715]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 571]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) && (!(1 == systemActive) || (pumpRunning == 0 && (tmp == 1 || waterLevel < 2)))) && ((((((((!(#NULL == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || (((((retValue_acc == tmp___0 && retValue_acc == \result) && ((!(waterLevel < 2) && retValue_acc == 0) || (retValue_acc == \result && retValue_acc == 1))) && \result == tmp) && tmp == \result) && (tmp == 0 || tmp___0 == 0))) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((tmp == 0 || !(1 == systemActive)) || !(waterLevel <= 1)) - InvariantResult [Line: 140]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && pumpRunning == 0) && 1 == retValue_acc) && \valid[9] == 1) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && 31 == unknown-#length-unknown[2]) && head == 0) && tmp == 1) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && \result == retValue_acc) && 30 == unknown-#length-unknown[13]) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[1][0] == 48) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 - InvariantResult [Line: 589]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((!(pumpRunning == 0) && 2 <= waterLevel) && waterLevel <= \old(waterLevel)) && !(0 == systemActive))) || !(2 <= \old(waterLevel))) && (((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || \old(waterLevel) == waterLevel) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || pumpRunning == 1) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || \old(pumpRunning) == 0) || (((pumpRunning == 0 && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel))) || (((!(pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && !(0 == systemActive)))) && (((((((((((!(#NULL == 0) || !(\old(pumpRunning) <= 1)) || !(1 == systemActive)) || !(head == 0)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) <= 0) && \old(waterLevel) == waterLevel) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel + 1) && 0 < \old(waterLevel))) && retValue_acc == \result) && tmp == \result)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(pumpRunning))) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || \old(pumpRunning) == 0) || (((pumpRunning == 0 && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) < 2)) || (pumpRunning == 0 && waterLevel <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || waterLevel == 1) - InvariantResult [Line: 567]: Loop Invariant Derived loop invariant: (((!(pumpRunning == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0) && (((((((((pumpRunning == \old(pumpRunning) || !(#NULL == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(pumpRunning))) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) - InvariantResult [Line: 870]: Loop Invariant Derived loop invariant: !(1 == systemActive) - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((!(pumpRunning == 0) && 2 <= waterLevel) && waterLevel <= \old(waterLevel)) && !(0 == systemActive))) || !(2 <= \old(waterLevel))) && (((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || (waterLevel <= 1 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(head == 0)) || ((((((retValue_acc == waterLevel && \result == tmp___0) && \old(waterLevel) == waterLevel) && \result <= 2147483647) && methaneLevelCritical == tmp) && retValue_acc == \result) && pumpRunning == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((!(1 == systemActive) || \old(pumpRunning) == 0) || (((!(pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && !(0 == systemActive)))) && (methaneLevelCritical == 0 || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) < 2)) || ((pumpRunning == 0 && tmp___0 <= 1) && waterLevel <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || waterLevel == 1)) && ((((((((((!(#NULL == 0) || !(\old(pumpRunning) <= 1)) || !(1 == systemActive)) || !(head == 0)) || \old(pumpRunning) == 0) || (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) <= 0) && \old(waterLevel) == waterLevel) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel + 1) && 0 < \old(waterLevel))) && retValue_acc == \result) && tmp == \result)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(pumpRunning))) || !(head == 0)) || !(cleanupTimeShifts == 4)) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 884]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((!(pumpRunning == 0) && 2 <= waterLevel) && waterLevel <= \old(waterLevel)) && !(0 == systemActive))) || !(2 <= \old(waterLevel))) && ((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((tmp <= 0 && 0 <= tmp) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((!(1 == systemActive) || ((((pumpRunning == 0 && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && !(tmp == 0))) || \old(pumpRunning) == 0) || (((!(pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && !(0 == systemActive)))) && (((((((((((!(#NULL == 0) || !(\old(pumpRunning) <= 1)) || !(1 == systemActive)) || !(head == 0)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) <= 0) && \old(waterLevel) == waterLevel) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel + 1) && 0 < \old(waterLevel))) && retValue_acc == \result) && tmp == \result)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(pumpRunning))) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || ((((pumpRunning == 0 && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && !(tmp == 0))) || \old(pumpRunning) == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) < 2)) || (pumpRunning == 0 && waterLevel <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || waterLevel == 1)) && ((methaneLevelCritical == 0 || !(1 == systemActive)) || !(tmp == 0)) - InvariantResult [Line: 531]: Loop Invariant Derived loop invariant: (((((((((((((!(#NULL == 0) || !(\old(pumpRunning) <= 1)) || !(1 == systemActive)) || !(head == 0)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || ((pumpRunning <= 1 && \old(waterLevel) == waterLevel) && 0 <= pumpRunning)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(pumpRunning))) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || \old(waterLevel) == waterLevel)) && ((!(1 == systemActive) || \old(pumpRunning) == 0) || ((!(pumpRunning == 0) && waterLevel <= \old(waterLevel)) && (\old(waterLevel) == waterLevel || waterLevel == 1)))) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) - InvariantResult [Line: 597]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || (((waterLevel + 1 <= \old(waterLevel) || (!(0 < waterLevel) && waterLevel <= \old(waterLevel))) && !(pumpRunning == 0)) && tmp == methaneLevelCritical)) && ((((((((((!(#NULL == 0) || !(\old(pumpRunning) <= 1)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel + 1) && 0 < \old(waterLevel)) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) && retValue_acc == \result) && tmp == \result)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(pumpRunning))) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (!(\old(pumpRunning) == 0) || !(1 == systemActive)) RESULT: Ultimate proved your program to be correct! [2022-12-14 08:08:24,309 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3ed9715-5d05-4ae9-9406-8671e085c015/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE