./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 826ab2ba Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash bff509ff7af2b9788fd6216f7196709183d48c973cf9a066c9793f96467b2abf --- Real Ultimate output --- This is Ultimate 0.3.0-dev-826ab2b [2024-11-14 02:42:21,296 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-14 02:42:21,378 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/config/svcomp-Reach-32bit-Taipan_Default.epf [2024-11-14 02:42:21,384 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-14 02:42:21,387 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-14 02:42:21,410 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-14 02:42:21,411 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-14 02:42:21,411 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-14 02:42:21,412 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-11-14 02:42:21,412 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-11-14 02:42:21,412 INFO L153 SettingsManager]: * User list type=DISABLED [2024-11-14 02:42:21,412 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2024-11-14 02:42:21,412 INFO L153 SettingsManager]: * Explicit value domain=true [2024-11-14 02:42:21,412 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2024-11-14 02:42:21,412 INFO L153 SettingsManager]: * Octagon Domain=false [2024-11-14 02:42:21,412 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2024-11-14 02:42:21,413 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2024-11-14 02:42:21,413 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2024-11-14 02:42:21,413 INFO L153 SettingsManager]: * Interval Domain=false [2024-11-14 02:42:21,413 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2024-11-14 02:42:21,413 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2024-11-14 02:42:21,413 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2024-11-14 02:42:21,414 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-14 02:42:21,414 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-11-14 02:42:21,414 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-14 02:42:21,414 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-14 02:42:21,414 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-14 02:42:21,414 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-14 02:42:21,414 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-11-14 02:42:21,414 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-11-14 02:42:21,414 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-11-14 02:42:21,415 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-14 02:42:21,415 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-14 02:42:21,415 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-14 02:42:21,415 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-14 02:42:21,415 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-14 02:42:21,415 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-14 02:42:21,415 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-14 02:42:21,415 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2024-11-14 02:42:21,416 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-14 02:42:21,416 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-11-14 02:42:21,416 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-11-14 02:42:21,416 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2024-11-14 02:42:21,416 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-11-14 02:42:21,416 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-11-14 02:42:21,416 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2024-11-14 02:42:21,416 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-11-14 02:42:21,416 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> bff509ff7af2b9788fd6216f7196709183d48c973cf9a066c9793f96467b2abf [2024-11-14 02:42:21,706 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-14 02:42:21,715 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-14 02:42:21,717 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-14 02:42:21,719 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-14 02:42:21,719 INFO L274 PluginConnector]: CDTParser initialized [2024-11-14 02:42:21,720 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/../../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c Unable to find full path for "g++" [2024-11-14 02:42:23,791 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-14 02:42:24,083 INFO L384 CDTParser]: Found 1 translation units. [2024-11-14 02:42:24,084 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c [2024-11-14 02:42:24,096 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/data/687debcd8/093e32277d0f404ba63c8d884f6d538d/FLAG6f0fb9de3 [2024-11-14 02:42:24,361 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/data/687debcd8/093e32277d0f404ba63c8d884f6d538d [2024-11-14 02:42:24,363 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-14 02:42:24,365 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-14 02:42:24,366 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-14 02:42:24,366 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-14 02:42:24,371 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-14 02:42:24,372 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.11 02:42:24" (1/1) ... [2024-11-14 02:42:24,373 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2d2f3c7c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 02:42:24, skipping insertion in model container [2024-11-14 02:42:24,373 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.11 02:42:24" (1/1) ... [2024-11-14 02:42:24,423 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-14 02:42:24,662 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c[2985,2998] [2024-11-14 02:42:24,821 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-14 02:42:24,840 INFO L200 MainTranslator]: Completed pre-run [2024-11-14 02:42:24,849 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [49] [2024-11-14 02:42:24,851 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [155] [2024-11-14 02:42:24,851 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [164] [2024-11-14 02:42:24,851 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [205] [2024-11-14 02:42:24,851 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [313] [2024-11-14 02:42:24,851 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [381] [2024-11-14 02:42:24,852 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [638] [2024-11-14 02:42:24,852 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [673] [2024-11-14 02:42:24,869 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c[2985,2998] [2024-11-14 02:42:24,924 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-14 02:42:24,946 INFO L204 MainTranslator]: Completed translation [2024-11-14 02:42:24,948 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 02:42:24 WrapperNode [2024-11-14 02:42:24,948 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-14 02:42:24,949 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-14 02:42:24,949 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-14 02:42:24,951 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-14 02:42:24,957 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 02:42:24" (1/1) ... [2024-11-14 02:42:24,967 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 02:42:24" (1/1) ... [2024-11-14 02:42:24,999 INFO L138 Inliner]: procedures = 59, calls = 107, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 227 [2024-11-14 02:42:25,000 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-14 02:42:25,003 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-14 02:42:25,003 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-14 02:42:25,004 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-14 02:42:25,012 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 02:42:24" (1/1) ... [2024-11-14 02:42:25,012 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 02:42:24" (1/1) ... [2024-11-14 02:42:25,015 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 02:42:24" (1/1) ... [2024-11-14 02:42:25,015 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 02:42:24" (1/1) ... [2024-11-14 02:42:25,022 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 02:42:24" (1/1) ... [2024-11-14 02:42:25,030 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 02:42:24" (1/1) ... [2024-11-14 02:42:25,032 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 02:42:24" (1/1) ... [2024-11-14 02:42:25,035 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 02:42:24" (1/1) ... [2024-11-14 02:42:25,038 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-14 02:42:25,039 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-14 02:42:25,042 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-14 02:42:25,042 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-14 02:42:25,043 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 02:42:24" (1/1) ... [2024-11-14 02:42:25,054 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2024-11-14 02:42:25,069 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 [2024-11-14 02:42:25,086 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2024-11-14 02:42:25,091 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2024-11-14 02:42:25,123 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-14 02:42:25,123 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2024-11-14 02:42:25,124 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2024-11-14 02:42:25,124 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2024-11-14 02:42:25,124 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2024-11-14 02:42:25,124 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2024-11-14 02:42:25,124 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2024-11-14 02:42:25,124 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2024-11-14 02:42:25,124 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2024-11-14 02:42:25,125 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2024-11-14 02:42:25,125 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2024-11-14 02:42:25,125 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2024-11-14 02:42:25,125 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2024-11-14 02:42:25,125 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2024-11-14 02:42:25,125 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2024-11-14 02:42:25,125 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2024-11-14 02:42:25,126 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2024-11-14 02:42:25,126 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2024-11-14 02:42:25,126 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2024-11-14 02:42:25,126 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2024-11-14 02:42:25,126 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2024-11-14 02:42:25,127 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2024-11-14 02:42:25,127 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-14 02:42:25,127 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-14 02:42:25,226 INFO L238 CfgBuilder]: Building ICFG [2024-11-14 02:42:25,229 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-14 02:42:25,694 INFO L? ?]: Removed 50 outVars from TransFormulas that were not future-live. [2024-11-14 02:42:25,694 INFO L287 CfgBuilder]: Performing block encoding [2024-11-14 02:42:25,873 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-14 02:42:25,876 INFO L316 CfgBuilder]: Removed 2 assume(true) statements. [2024-11-14 02:42:25,876 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.11 02:42:25 BoogieIcfgContainer [2024-11-14 02:42:25,877 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-14 02:42:25,880 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-11-14 02:42:25,881 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-11-14 02:42:25,886 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-11-14 02:42:25,887 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.11 02:42:24" (1/3) ... [2024-11-14 02:42:25,888 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@401242cd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.11 02:42:25, skipping insertion in model container [2024-11-14 02:42:25,888 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 02:42:24" (2/3) ... [2024-11-14 02:42:25,888 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@401242cd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.11 02:42:25, skipping insertion in model container [2024-11-14 02:42:25,889 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.11 02:42:25" (3/3) ... [2024-11-14 02:42:25,890 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product63.cil.c [2024-11-14 02:42:25,906 INFO L217 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-11-14 02:42:25,907 INFO L154 ceAbstractionStarter]: Applying trace abstraction to ICFG minepump_spec2_product63.cil.c that has 11 procedures, 80 locations, 1 initial locations, 2 loop locations, and 1 error locations. [2024-11-14 02:42:25,972 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-11-14 02:42:25,985 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@621f359a, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-11-14 02:42:25,985 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-11-14 02:42:25,990 INFO L276 IsEmpty]: Start isEmpty. Operand has 80 states, 49 states have (on average 1.4285714285714286) internal successors, (70), 60 states have internal predecessors, (70), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2024-11-14 02:42:25,998 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2024-11-14 02:42:25,998 INFO L207 NwaCegarLoop]: Found error trace [2024-11-14 02:42:25,999 INFO L215 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-14 02:42:25,999 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-14 02:42:26,003 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-14 02:42:26,003 INFO L85 PathProgramCache]: Analyzing trace with hash -2017066584, now seen corresponding path program 1 times [2024-11-14 02:42:26,009 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-14 02:42:26,010 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [429184850] [2024-11-14 02:42:26,010 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-14 02:42:26,010 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-14 02:42:26,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-14 02:42:26,193 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-14 02:42:26,193 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-14 02:42:26,193 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [429184850] [2024-11-14 02:42:26,194 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [429184850] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-14 02:42:26,194 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-14 02:42:26,195 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-14 02:42:26,196 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [634931969] [2024-11-14 02:42:26,197 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-14 02:42:26,200 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-11-14 02:42:26,201 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-14 02:42:26,219 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-11-14 02:42:26,220 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-14 02:42:26,222 INFO L87 Difference]: Start difference. First operand has 80 states, 49 states have (on average 1.4285714285714286) internal successors, (70), 60 states have internal predecessors, (70), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-14 02:42:26,306 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-14 02:42:26,306 INFO L93 Difference]: Finished difference Result 158 states and 217 transitions. [2024-11-14 02:42:26,308 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-11-14 02:42:26,309 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2024-11-14 02:42:26,309 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-14 02:42:26,321 INFO L225 Difference]: With dead ends: 158 [2024-11-14 02:42:26,321 INFO L226 Difference]: Without dead ends: 75 [2024-11-14 02:42:26,339 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-14 02:42:26,343 INFO L432 NwaCegarLoop]: 87 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-14 02:42:26,344 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 87 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-14 02:42:26,360 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2024-11-14 02:42:26,389 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2024-11-14 02:42:26,392 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 46 states have (on average 1.3478260869565217) internal successors, (62), 56 states have internal predecessors, (62), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2024-11-14 02:42:26,400 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 99 transitions. [2024-11-14 02:42:26,402 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 99 transitions. Word has length 17 [2024-11-14 02:42:26,403 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-14 02:42:26,403 INFO L471 AbstractCegarLoop]: Abstraction has 75 states and 99 transitions. [2024-11-14 02:42:26,403 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-14 02:42:26,403 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 99 transitions. [2024-11-14 02:42:26,405 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2024-11-14 02:42:26,405 INFO L207 NwaCegarLoop]: Found error trace [2024-11-14 02:42:26,405 INFO L215 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-14 02:42:26,406 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-11-14 02:42:26,406 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-14 02:42:26,406 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-14 02:42:26,407 INFO L85 PathProgramCache]: Analyzing trace with hash -931900947, now seen corresponding path program 1 times [2024-11-14 02:42:26,407 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-14 02:42:26,407 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1120282534] [2024-11-14 02:42:26,407 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-14 02:42:26,407 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-14 02:42:26,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-14 02:42:26,558 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-14 02:42:26,558 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-14 02:42:26,558 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1120282534] [2024-11-14 02:42:26,558 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1120282534] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-14 02:42:26,558 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-14 02:42:26,558 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-14 02:42:26,558 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2017777862] [2024-11-14 02:42:26,559 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-14 02:42:26,559 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-14 02:42:26,560 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-14 02:42:26,561 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-14 02:42:26,561 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-14 02:42:26,561 INFO L87 Difference]: Start difference. First operand 75 states and 99 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-14 02:42:26,647 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-14 02:42:26,647 INFO L93 Difference]: Finished difference Result 122 states and 160 transitions. [2024-11-14 02:42:26,649 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-14 02:42:26,649 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2024-11-14 02:42:26,650 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-14 02:42:26,651 INFO L225 Difference]: With dead ends: 122 [2024-11-14 02:42:26,651 INFO L226 Difference]: Without dead ends: 67 [2024-11-14 02:42:26,652 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-14 02:42:26,653 INFO L432 NwaCegarLoop]: 73 mSDtfsCounter, 14 mSDsluCounter, 56 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 129 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-14 02:42:26,656 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 129 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-14 02:42:26,657 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67 states. [2024-11-14 02:42:26,673 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 67. [2024-11-14 02:42:26,673 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 41 states have (on average 1.3658536585365855) internal successors, (56), 51 states have internal predecessors, (56), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2024-11-14 02:42:26,675 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 88 transitions. [2024-11-14 02:42:26,675 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 88 transitions. Word has length 18 [2024-11-14 02:42:26,675 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-14 02:42:26,675 INFO L471 AbstractCegarLoop]: Abstraction has 67 states and 88 transitions. [2024-11-14 02:42:26,676 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-14 02:42:26,676 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 88 transitions. [2024-11-14 02:42:26,680 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2024-11-14 02:42:26,680 INFO L207 NwaCegarLoop]: Found error trace [2024-11-14 02:42:26,680 INFO L215 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-14 02:42:26,680 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-11-14 02:42:26,681 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-14 02:42:26,681 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-14 02:42:26,681 INFO L85 PathProgramCache]: Analyzing trace with hash -978668501, now seen corresponding path program 1 times [2024-11-14 02:42:26,681 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-14 02:42:26,681 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [145181980] [2024-11-14 02:42:26,682 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-14 02:42:26,682 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-14 02:42:26,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-14 02:42:26,806 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-14 02:42:26,806 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-14 02:42:26,806 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [145181980] [2024-11-14 02:42:26,806 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [145181980] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-14 02:42:26,807 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-14 02:42:26,807 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-14 02:42:26,807 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [349739338] [2024-11-14 02:42:26,807 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-14 02:42:26,807 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-14 02:42:26,808 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-14 02:42:26,808 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-14 02:42:26,808 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-14 02:42:26,809 INFO L87 Difference]: Start difference. First operand 67 states and 88 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-14 02:42:26,918 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-14 02:42:26,919 INFO L93 Difference]: Finished difference Result 197 states and 261 transitions. [2024-11-14 02:42:26,919 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-14 02:42:26,919 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2024-11-14 02:42:26,920 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-14 02:42:26,921 INFO L225 Difference]: With dead ends: 197 [2024-11-14 02:42:26,922 INFO L226 Difference]: Without dead ends: 132 [2024-11-14 02:42:26,922 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-14 02:42:26,923 INFO L432 NwaCegarLoop]: 88 mSDtfsCounter, 75 mSDsluCounter, 71 mSDsCounter, 0 mSdLazyCounter, 34 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 159 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 34 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-14 02:42:26,924 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [75 Valid, 159 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 34 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-14 02:42:26,925 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 132 states. [2024-11-14 02:42:26,947 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 132 to 129. [2024-11-14 02:42:26,948 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 129 states, 78 states have (on average 1.3717948717948718) internal successors, (107), 97 states have internal predecessors, (107), 32 states have call successors, (32), 18 states have call predecessors, (32), 18 states have return successors, (32), 21 states have call predecessors, (32), 32 states have call successors, (32) [2024-11-14 02:42:26,950 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129 states to 129 states and 171 transitions. [2024-11-14 02:42:26,954 INFO L78 Accepts]: Start accepts. Automaton has 129 states and 171 transitions. Word has length 21 [2024-11-14 02:42:26,955 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-14 02:42:26,955 INFO L471 AbstractCegarLoop]: Abstraction has 129 states and 171 transitions. [2024-11-14 02:42:26,955 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-14 02:42:26,955 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 171 transitions. [2024-11-14 02:42:26,956 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2024-11-14 02:42:26,957 INFO L207 NwaCegarLoop]: Found error trace [2024-11-14 02:42:26,959 INFO L215 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-14 02:42:26,959 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-11-14 02:42:26,959 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-14 02:42:26,960 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-14 02:42:26,960 INFO L85 PathProgramCache]: Analyzing trace with hash -1948714603, now seen corresponding path program 1 times [2024-11-14 02:42:26,960 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-14 02:42:26,960 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1518972160] [2024-11-14 02:42:26,960 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-14 02:42:26,961 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-14 02:42:26,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-14 02:42:27,150 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-14 02:42:27,151 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-14 02:42:27,151 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1518972160] [2024-11-14 02:42:27,151 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1518972160] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-14 02:42:27,151 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-14 02:42:27,151 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-14 02:42:27,151 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1009949018] [2024-11-14 02:42:27,151 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-14 02:42:27,152 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-11-14 02:42:27,152 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-14 02:42:27,152 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-14 02:42:27,153 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-14 02:42:27,153 INFO L87 Difference]: Start difference. First operand 129 states and 171 transitions. Second operand has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-14 02:42:27,350 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-14 02:42:27,351 INFO L93 Difference]: Finished difference Result 342 states and 463 transitions. [2024-11-14 02:42:27,353 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-14 02:42:27,353 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2024-11-14 02:42:27,354 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-14 02:42:27,356 INFO L225 Difference]: With dead ends: 342 [2024-11-14 02:42:27,356 INFO L226 Difference]: Without dead ends: 215 [2024-11-14 02:42:27,357 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2024-11-14 02:42:27,359 INFO L432 NwaCegarLoop]: 70 mSDtfsCounter, 47 mSDsluCounter, 124 mSDsCounter, 0 mSdLazyCounter, 53 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 194 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 53 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-14 02:42:27,360 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 194 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 53 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-14 02:42:27,361 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 215 states. [2024-11-14 02:42:27,410 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 215 to 214. [2024-11-14 02:42:27,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 214 states, 137 states have (on average 1.2919708029197081) internal successors, (177), 154 states have internal predecessors, (177), 42 states have call successors, (42), 34 states have call predecessors, (42), 34 states have return successors, (54), 37 states have call predecessors, (54), 42 states have call successors, (54) [2024-11-14 02:42:27,416 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 214 states to 214 states and 273 transitions. [2024-11-14 02:42:27,417 INFO L78 Accepts]: Start accepts. Automaton has 214 states and 273 transitions. Word has length 24 [2024-11-14 02:42:27,418 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-14 02:42:27,418 INFO L471 AbstractCegarLoop]: Abstraction has 214 states and 273 transitions. [2024-11-14 02:42:27,418 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-14 02:42:27,418 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 273 transitions. [2024-11-14 02:42:27,420 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2024-11-14 02:42:27,422 INFO L207 NwaCegarLoop]: Found error trace [2024-11-14 02:42:27,423 INFO L215 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-14 02:42:27,423 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-11-14 02:42:27,423 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-14 02:42:27,424 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-14 02:42:27,424 INFO L85 PathProgramCache]: Analyzing trace with hash -1195013702, now seen corresponding path program 1 times [2024-11-14 02:42:27,424 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-14 02:42:27,424 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [240423712] [2024-11-14 02:42:27,424 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-14 02:42:27,425 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-14 02:42:27,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-14 02:42:27,587 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-11-14 02:42:27,588 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-14 02:42:27,588 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [240423712] [2024-11-14 02:42:27,588 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [240423712] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-14 02:42:27,588 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-14 02:42:27,588 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-14 02:42:27,588 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1583373381] [2024-11-14 02:42:27,588 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-14 02:42:27,589 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-14 02:42:27,589 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-14 02:42:27,589 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-14 02:42:27,589 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-14 02:42:27,589 INFO L87 Difference]: Start difference. First operand 214 states and 273 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2024-11-14 02:42:27,704 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-14 02:42:27,704 INFO L93 Difference]: Finished difference Result 389 states and 506 transitions. [2024-11-14 02:42:27,705 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-14 02:42:27,705 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 42 [2024-11-14 02:42:27,706 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-14 02:42:27,713 INFO L225 Difference]: With dead ends: 389 [2024-11-14 02:42:27,713 INFO L226 Difference]: Without dead ends: 387 [2024-11-14 02:42:27,713 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-14 02:42:27,714 INFO L432 NwaCegarLoop]: 89 mSDtfsCounter, 64 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 158 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-14 02:42:27,715 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 158 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-14 02:42:27,720 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 387 states. [2024-11-14 02:42:27,793 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 387 to 381. [2024-11-14 02:42:27,794 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 381 states, 239 states have (on average 1.284518828451883) internal successors, (307), 270 states have internal predecessors, (307), 79 states have call successors, (79), 63 states have call predecessors, (79), 62 states have return successors, (109), 66 states have call predecessors, (109), 79 states have call successors, (109) [2024-11-14 02:42:27,799 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 381 states to 381 states and 495 transitions. [2024-11-14 02:42:27,800 INFO L78 Accepts]: Start accepts. Automaton has 381 states and 495 transitions. Word has length 42 [2024-11-14 02:42:27,800 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-14 02:42:27,800 INFO L471 AbstractCegarLoop]: Abstraction has 381 states and 495 transitions. [2024-11-14 02:42:27,800 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2024-11-14 02:42:27,800 INFO L276 IsEmpty]: Start isEmpty. Operand 381 states and 495 transitions. [2024-11-14 02:42:27,806 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2024-11-14 02:42:27,807 INFO L207 NwaCegarLoop]: Found error trace [2024-11-14 02:42:27,807 INFO L215 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-14 02:42:27,810 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-11-14 02:42:27,810 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-14 02:42:27,811 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-14 02:42:27,811 INFO L85 PathProgramCache]: Analyzing trace with hash -1312249852, now seen corresponding path program 1 times [2024-11-14 02:42:27,811 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-14 02:42:27,811 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1564947722] [2024-11-14 02:42:27,811 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-14 02:42:27,811 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-14 02:42:27,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-14 02:42:27,908 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2024-11-14 02:42:27,908 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-14 02:42:27,908 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1564947722] [2024-11-14 02:42:27,908 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1564947722] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-14 02:42:27,908 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-14 02:42:27,908 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-14 02:42:27,908 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1867101371] [2024-11-14 02:42:27,908 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-14 02:42:27,909 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-11-14 02:42:27,909 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-14 02:42:27,909 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-14 02:42:27,910 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-14 02:42:27,910 INFO L87 Difference]: Start difference. First operand 381 states and 495 transitions. Second operand has 4 states, 3 states have (on average 16.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2024-11-14 02:42:28,099 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-14 02:42:28,099 INFO L93 Difference]: Finished difference Result 421 states and 548 transitions. [2024-11-14 02:42:28,099 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-14 02:42:28,100 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 16.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 65 [2024-11-14 02:42:28,100 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-14 02:42:28,102 INFO L225 Difference]: With dead ends: 421 [2024-11-14 02:42:28,102 INFO L226 Difference]: Without dead ends: 185 [2024-11-14 02:42:28,103 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-14 02:42:28,104 INFO L432 NwaCegarLoop]: 95 mSDtfsCounter, 106 mSDsluCounter, 55 mSDsCounter, 0 mSdLazyCounter, 90 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 106 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 92 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 90 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-14 02:42:28,104 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [106 Valid, 150 Invalid, 92 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 90 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-14 02:42:28,105 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2024-11-14 02:42:28,131 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 185. [2024-11-14 02:42:28,131 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 185 states, 116 states have (on average 1.2327586206896552) internal successors, (143), 130 states have internal predecessors, (143), 37 states have call successors, (37), 31 states have call predecessors, (37), 31 states have return successors, (51), 32 states have call predecessors, (51), 37 states have call successors, (51) [2024-11-14 02:42:28,133 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 185 states to 185 states and 231 transitions. [2024-11-14 02:42:28,133 INFO L78 Accepts]: Start accepts. Automaton has 185 states and 231 transitions. Word has length 65 [2024-11-14 02:42:28,134 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-14 02:42:28,134 INFO L471 AbstractCegarLoop]: Abstraction has 185 states and 231 transitions. [2024-11-14 02:42:28,134 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 16.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2024-11-14 02:42:28,134 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 231 transitions. [2024-11-14 02:42:28,136 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2024-11-14 02:42:28,136 INFO L207 NwaCegarLoop]: Found error trace [2024-11-14 02:42:28,137 INFO L215 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2024-11-14 02:42:28,137 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2024-11-14 02:42:28,137 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-14 02:42:28,137 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-14 02:42:28,137 INFO L85 PathProgramCache]: Analyzing trace with hash -695705705, now seen corresponding path program 1 times [2024-11-14 02:42:28,137 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-14 02:42:28,138 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [634529386] [2024-11-14 02:42:28,138 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-14 02:42:28,138 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-14 02:42:28,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-14 02:42:28,683 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 8 proven. 23 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-14 02:42:28,684 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-14 02:42:28,684 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [634529386] [2024-11-14 02:42:28,684 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [634529386] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-14 02:42:28,684 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1923763076] [2024-11-14 02:42:28,684 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-14 02:42:28,684 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-14 02:42:28,684 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 [2024-11-14 02:42:28,689 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-14 02:42:28,691 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-11-14 02:42:28,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-14 02:42:28,827 INFO L255 TraceCheckSpWp]: Trace formula consists of 294 conjuncts, 14 conjuncts are in the unsatisfiable core [2024-11-14 02:42:28,843 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-14 02:42:29,350 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 31 proven. 4 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-11-14 02:42:29,350 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-14 02:42:29,906 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2024-11-14 02:42:29,908 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1923763076] provided 1 perfect and 1 imperfect interpolant sequences [2024-11-14 02:42:29,909 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2024-11-14 02:42:29,909 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [10, 7] total 20 [2024-11-14 02:42:29,909 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1248665479] [2024-11-14 02:42:29,909 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-14 02:42:29,910 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-11-14 02:42:29,910 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-14 02:42:29,911 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-14 02:42:29,911 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=65, Invalid=315, Unknown=0, NotChecked=0, Total=380 [2024-11-14 02:42:29,913 INFO L87 Difference]: Start difference. First operand 185 states and 231 transitions. Second operand has 8 states, 8 states have (on average 5.625) internal successors, (45), 8 states have internal predecessors, (45), 5 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (10), 5 states have call predecessors, (10), 5 states have call successors, (10) [2024-11-14 02:42:30,439 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-14 02:42:30,440 INFO L93 Difference]: Finished difference Result 520 states and 677 transitions. [2024-11-14 02:42:30,440 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2024-11-14 02:42:30,441 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.625) internal successors, (45), 8 states have internal predecessors, (45), 5 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (10), 5 states have call predecessors, (10), 5 states have call successors, (10) Word has length 83 [2024-11-14 02:42:30,441 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-14 02:42:30,443 INFO L225 Difference]: With dead ends: 520 [2024-11-14 02:42:30,445 INFO L226 Difference]: Without dead ends: 337 [2024-11-14 02:42:30,447 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 184 GetRequests, 155 SyntacticMatches, 8 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 151 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=86, Invalid=420, Unknown=0, NotChecked=0, Total=506 [2024-11-14 02:42:30,447 INFO L432 NwaCegarLoop]: 75 mSDtfsCounter, 211 mSDsluCounter, 125 mSDsCounter, 0 mSdLazyCounter, 216 mSolverCounterSat, 102 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 215 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 318 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 102 IncrementalHoareTripleChecker+Valid, 216 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-11-14 02:42:30,449 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [215 Valid, 200 Invalid, 318 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [102 Valid, 216 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-11-14 02:42:30,453 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 337 states. [2024-11-14 02:42:30,510 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 337 to 297. [2024-11-14 02:42:30,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 297 states, 194 states have (on average 1.2268041237113403) internal successors, (238), 210 states have internal predecessors, (238), 51 states have call successors, (51), 47 states have call predecessors, (51), 51 states have return successors, (79), 49 states have call predecessors, (79), 51 states have call successors, (79) [2024-11-14 02:42:30,513 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 297 states to 297 states and 368 transitions. [2024-11-14 02:42:30,514 INFO L78 Accepts]: Start accepts. Automaton has 297 states and 368 transitions. Word has length 83 [2024-11-14 02:42:30,514 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-14 02:42:30,514 INFO L471 AbstractCegarLoop]: Abstraction has 297 states and 368 transitions. [2024-11-14 02:42:30,514 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.625) internal successors, (45), 8 states have internal predecessors, (45), 5 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (10), 5 states have call predecessors, (10), 5 states have call successors, (10) [2024-11-14 02:42:30,515 INFO L276 IsEmpty]: Start isEmpty. Operand 297 states and 368 transitions. [2024-11-14 02:42:30,516 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2024-11-14 02:42:30,516 INFO L207 NwaCegarLoop]: Found error trace [2024-11-14 02:42:30,517 INFO L215 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-14 02:42:30,537 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-11-14 02:42:30,721 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-14 02:42:30,721 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-14 02:42:30,722 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-14 02:42:30,722 INFO L85 PathProgramCache]: Analyzing trace with hash -214835294, now seen corresponding path program 1 times [2024-11-14 02:42:30,722 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-14 02:42:30,722 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1328049041] [2024-11-14 02:42:30,722 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-14 02:42:30,722 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-14 02:42:30,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-14 02:42:31,138 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 8 proven. 23 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-14 02:42:31,139 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-14 02:42:31,139 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1328049041] [2024-11-14 02:42:31,139 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1328049041] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-14 02:42:31,139 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2001776817] [2024-11-14 02:42:31,139 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-14 02:42:31,139 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-14 02:42:31,140 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 [2024-11-14 02:42:31,141 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-14 02:42:31,144 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-11-14 02:42:31,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-14 02:42:31,255 INFO L255 TraceCheckSpWp]: Trace formula consists of 300 conjuncts, 9 conjuncts are in the unsatisfiable core [2024-11-14 02:42:31,258 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-14 02:42:31,459 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 5 proven. 2 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-11-14 02:42:31,459 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-14 02:42:31,677 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 33 trivial. 0 not checked. [2024-11-14 02:42:31,677 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2001776817] provided 1 perfect and 1 imperfect interpolant sequences [2024-11-14 02:42:31,678 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2024-11-14 02:42:31,678 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10, 5] total 15 [2024-11-14 02:42:31,678 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [991701634] [2024-11-14 02:42:31,678 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-14 02:42:31,679 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-11-14 02:42:31,679 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-14 02:42:31,679 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-14 02:42:31,680 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2024-11-14 02:42:31,680 INFO L87 Difference]: Start difference. First operand 297 states and 368 transitions. Second operand has 6 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) [2024-11-14 02:42:31,929 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-14 02:42:31,929 INFO L93 Difference]: Finished difference Result 759 states and 949 transitions. [2024-11-14 02:42:31,930 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-14 02:42:31,930 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) Word has length 86 [2024-11-14 02:42:31,930 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-14 02:42:31,934 INFO L225 Difference]: With dead ends: 759 [2024-11-14 02:42:31,935 INFO L226 Difference]: Without dead ends: 464 [2024-11-14 02:42:31,936 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 187 GetRequests, 171 SyntacticMatches, 1 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 46 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=43, Invalid=229, Unknown=0, NotChecked=0, Total=272 [2024-11-14 02:42:31,937 INFO L432 NwaCegarLoop]: 65 mSDtfsCounter, 52 mSDsluCounter, 226 mSDsCounter, 0 mSdLazyCounter, 111 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 291 SdHoareTripleChecker+Invalid, 112 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 111 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-14 02:42:31,937 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 291 Invalid, 112 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-14 02:42:31,939 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 464 states. [2024-11-14 02:42:32,011 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 464 to 452. [2024-11-14 02:42:32,012 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 452 states, 299 states have (on average 1.2107023411371238) internal successors, (362), 319 states have internal predecessors, (362), 76 states have call successors, (76), 70 states have call predecessors, (76), 76 states have return successors, (115), 74 states have call predecessors, (115), 76 states have call successors, (115) [2024-11-14 02:42:32,018 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 452 states to 452 states and 553 transitions. [2024-11-14 02:42:32,023 INFO L78 Accepts]: Start accepts. Automaton has 452 states and 553 transitions. Word has length 86 [2024-11-14 02:42:32,023 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-14 02:42:32,023 INFO L471 AbstractCegarLoop]: Abstraction has 452 states and 553 transitions. [2024-11-14 02:42:32,023 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) [2024-11-14 02:42:32,024 INFO L276 IsEmpty]: Start isEmpty. Operand 452 states and 553 transitions. [2024-11-14 02:42:32,026 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2024-11-14 02:42:32,026 INFO L207 NwaCegarLoop]: Found error trace [2024-11-14 02:42:32,026 INFO L215 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-14 02:42:32,053 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2024-11-14 02:42:32,227 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-14 02:42:32,228 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-14 02:42:32,229 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-14 02:42:32,229 INFO L85 PathProgramCache]: Analyzing trace with hash 1405605229, now seen corresponding path program 1 times [2024-11-14 02:42:32,229 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-14 02:42:32,229 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1703121496] [2024-11-14 02:42:32,229 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-14 02:42:32,229 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-14 02:42:32,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-14 02:42:32,910 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 19 proven. 18 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2024-11-14 02:42:32,910 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-14 02:42:32,910 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1703121496] [2024-11-14 02:42:32,910 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1703121496] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-14 02:42:32,910 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2086515028] [2024-11-14 02:42:32,911 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-14 02:42:32,911 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-14 02:42:32,911 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 [2024-11-14 02:42:32,913 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-14 02:42:32,916 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-11-14 02:42:33,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-14 02:42:33,046 INFO L255 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 26 conjuncts are in the unsatisfiable core [2024-11-14 02:42:33,052 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-14 02:42:33,944 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 25 proven. 9 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2024-11-14 02:42:33,945 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-14 02:42:35,077 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 29 proven. 1 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-11-14 02:42:35,078 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2086515028] provided 0 perfect and 2 imperfect interpolant sequences [2024-11-14 02:42:35,079 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1337718960] [2024-11-14 02:42:35,106 INFO L159 IcfgInterpreter]: Started Sifa with 49 locations of interest [2024-11-14 02:42:35,106 INFO L166 IcfgInterpreter]: Building call graph [2024-11-14 02:42:35,109 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-14 02:42:35,114 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-14 02:42:35,114 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-14 02:42:39,398 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 133 for LOIs [2024-11-14 02:42:39,452 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 15 for LOIs [2024-11-14 02:42:39,543 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 13 for LOIs [2024-11-14 02:42:39,562 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 13 for LOIs [2024-11-14 02:42:39,597 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 14 for LOIs [2024-11-14 02:42:39,613 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 36 for LOIs [2024-11-14 02:42:39,628 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 140 for LOIs [2024-11-14 02:42:39,744 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-14 02:42:49,276 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSifa [1337718960] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-14 02:42:49,276 INFO L185 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2024-11-14 02:42:49,276 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [30] imperfect sequences [15, 16, 13] total 65 [2024-11-14 02:42:49,277 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1052555983] [2024-11-14 02:42:49,277 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-14 02:42:49,278 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2024-11-14 02:42:49,278 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-14 02:42:49,279 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2024-11-14 02:42:49,281 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=608, Invalid=3552, Unknown=0, NotChecked=0, Total=4160 [2024-11-14 02:42:49,281 INFO L87 Difference]: Start difference. First operand 452 states and 553 transitions. Second operand has 31 states, 25 states have (on average 1.44) internal successors, (36), 23 states have internal predecessors, (36), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2024-11-14 02:43:00,568 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-14 02:43:00,568 INFO L93 Difference]: Finished difference Result 1098 states and 1350 transitions. [2024-11-14 02:43:00,569 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 48 states. [2024-11-14 02:43:00,569 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 25 states have (on average 1.44) internal successors, (36), 23 states have internal predecessors, (36), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) Word has length 89 [2024-11-14 02:43:00,569 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-14 02:43:00,576 INFO L225 Difference]: With dead ends: 1098 [2024-11-14 02:43:00,577 INFO L226 Difference]: Without dead ends: 648 [2024-11-14 02:43:00,581 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 314 GetRequests, 212 SyntacticMatches, 10 SemanticMatches, 92 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3137 ImplicationChecksByTransitivity, 18.0s TimeCoverageRelationStatistics Valid=1402, Invalid=7340, Unknown=0, NotChecked=0, Total=8742 [2024-11-14 02:43:00,584 INFO L432 NwaCegarLoop]: 32 mSDtfsCounter, 431 mSDsluCounter, 350 mSDsCounter, 0 mSdLazyCounter, 1951 mSolverCounterSat, 314 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 439 SdHoareTripleChecker+Valid, 382 SdHoareTripleChecker+Invalid, 2265 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 314 IncrementalHoareTripleChecker+Valid, 1951 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.4s IncrementalHoareTripleChecker+Time [2024-11-14 02:43:00,585 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [439 Valid, 382 Invalid, 2265 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [314 Valid, 1951 Invalid, 0 Unknown, 0 Unchecked, 3.4s Time] [2024-11-14 02:43:00,586 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 648 states. [2024-11-14 02:43:00,695 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 648 to 581. [2024-11-14 02:43:00,695 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 581 states, 384 states have (on average 1.1770833333333333) internal successors, (452), 408 states have internal predecessors, (452), 96 states have call successors, (96), 90 states have call predecessors, (96), 100 states have return successors, (142), 95 states have call predecessors, (142), 96 states have call successors, (142) [2024-11-14 02:43:00,698 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 581 states to 581 states and 690 transitions. [2024-11-14 02:43:00,700 INFO L78 Accepts]: Start accepts. Automaton has 581 states and 690 transitions. Word has length 89 [2024-11-14 02:43:00,700 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-14 02:43:00,700 INFO L471 AbstractCegarLoop]: Abstraction has 581 states and 690 transitions. [2024-11-14 02:43:00,700 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 25 states have (on average 1.44) internal successors, (36), 23 states have internal predecessors, (36), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2024-11-14 02:43:00,700 INFO L276 IsEmpty]: Start isEmpty. Operand 581 states and 690 transitions. [2024-11-14 02:43:00,704 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 140 [2024-11-14 02:43:00,704 INFO L207 NwaCegarLoop]: Found error trace [2024-11-14 02:43:00,704 INFO L215 NwaCegarLoop]: trace histogram [6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-14 02:43:00,725 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2024-11-14 02:43:00,908 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-14 02:43:00,908 INFO L396 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-14 02:43:00,909 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-14 02:43:00,909 INFO L85 PathProgramCache]: Analyzing trace with hash 789716741, now seen corresponding path program 1 times [2024-11-14 02:43:00,909 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-14 02:43:00,909 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1032433500] [2024-11-14 02:43:00,909 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-14 02:43:00,909 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-14 02:43:00,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-14 02:43:01,133 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 50 proven. 7 refuted. 0 times theorem prover too weak. 73 trivial. 0 not checked. [2024-11-14 02:43:01,134 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-14 02:43:01,134 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1032433500] [2024-11-14 02:43:01,134 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1032433500] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-14 02:43:01,134 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [677992519] [2024-11-14 02:43:01,134 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-14 02:43:01,134 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-14 02:43:01,134 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 [2024-11-14 02:43:01,136 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-14 02:43:01,139 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-11-14 02:43:01,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-14 02:43:01,263 INFO L255 TraceCheckSpWp]: Trace formula consists of 418 conjuncts, 21 conjuncts are in the unsatisfiable core [2024-11-14 02:43:01,272 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-14 02:43:01,776 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 98 proven. 15 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-11-14 02:43:01,776 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-14 02:43:02,486 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 51 proven. 9 refuted. 0 times theorem prover too weak. 70 trivial. 0 not checked. [2024-11-14 02:43:02,486 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [677992519] provided 0 perfect and 2 imperfect interpolant sequences [2024-11-14 02:43:02,487 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2003545627] [2024-11-14 02:43:02,491 INFO L159 IcfgInterpreter]: Started Sifa with 58 locations of interest [2024-11-14 02:43:02,491 INFO L166 IcfgInterpreter]: Building call graph [2024-11-14 02:43:02,491 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-14 02:43:02,492 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-14 02:43:02,492 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-14 02:43:04,393 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 15 for LOIs [2024-11-14 02:43:04,396 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 31 for LOIs [2024-11-14 02:43:04,536 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 3 for LOIs [2024-11-14 02:43:04,562 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 17 for LOIs [2024-11-14 02:43:04,602 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 3 for LOIs [2024-11-14 02:43:04,608 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 3 for LOIs [2024-11-14 02:43:04,610 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 22 for LOIs [2024-11-14 02:43:04,614 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 9 for LOIs [2024-11-14 02:43:04,615 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-14 02:43:07,334 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12429#(and (not (= ~pumpRunning~0 0)) (<= ~pumpRunning~0 2147483647) (not (= ~methaneLevelCritical~0 0)) (<= 0 ~methAndRunningLastTime~0) (<= 0 |old(~methAndRunningLastTime~0)|) (<= 0 (+ ~pumpRunning~0 2147483648)) (<= ~methaneLevelCritical~0 2147483647) (<= 0 (+ ~methaneLevelCritical~0 2147483648)) (not (= ~methAndRunningLastTime~0 0)))' at error location [2024-11-14 02:43:07,334 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2024-11-14 02:43:07,335 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-11-14 02:43:07,335 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 14, 14] total 29 [2024-11-14 02:43:07,335 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [771647441] [2024-11-14 02:43:07,335 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-11-14 02:43:07,336 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2024-11-14 02:43:07,336 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-14 02:43:07,337 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2024-11-14 02:43:07,338 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=420, Invalid=4136, Unknown=0, NotChecked=0, Total=4556 [2024-11-14 02:43:07,339 INFO L87 Difference]: Start difference. First operand 581 states and 690 transitions. Second operand has 29 states, 26 states have (on average 5.961538461538462) internal successors, (155), 25 states have internal predecessors, (155), 14 states have call successors, (46), 9 states have call predecessors, (46), 13 states have return successors, (45), 13 states have call predecessors, (45), 14 states have call successors, (45) [2024-11-14 02:43:12,751 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-14 02:43:12,752 INFO L93 Difference]: Finished difference Result 2820 states and 3536 transitions. [2024-11-14 02:43:12,752 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 103 states. [2024-11-14 02:43:12,753 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 26 states have (on average 5.961538461538462) internal successors, (155), 25 states have internal predecessors, (155), 14 states have call successors, (46), 9 states have call predecessors, (46), 13 states have return successors, (45), 13 states have call predecessors, (45), 14 states have call successors, (45) Word has length 139 [2024-11-14 02:43:12,754 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-14 02:43:12,776 INFO L225 Difference]: With dead ends: 2820 [2024-11-14 02:43:12,776 INFO L226 Difference]: Without dead ends: 2295 [2024-11-14 02:43:12,787 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 560 GetRequests, 382 SyntacticMatches, 13 SemanticMatches, 165 ConstructedPredicates, 0 IntricatePredicates, 1 DeprecatedPredicates, 10867 ImplicationChecksByTransitivity, 5.4s TimeCoverageRelationStatistics Valid=2320, Invalid=25402, Unknown=0, NotChecked=0, Total=27722 [2024-11-14 02:43:12,791 INFO L432 NwaCegarLoop]: 158 mSDtfsCounter, 1038 mSDsluCounter, 1281 mSDsCounter, 0 mSdLazyCounter, 3480 mSolverCounterSat, 947 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1042 SdHoareTripleChecker+Valid, 1439 SdHoareTripleChecker+Invalid, 4427 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 947 IncrementalHoareTripleChecker+Valid, 3480 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.6s IncrementalHoareTripleChecker+Time [2024-11-14 02:43:12,791 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [1042 Valid, 1439 Invalid, 4427 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [947 Valid, 3480 Invalid, 0 Unknown, 0 Unchecked, 2.6s Time] [2024-11-14 02:43:12,796 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2295 states. [2024-11-14 02:43:13,205 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2295 to 2221. [2024-11-14 02:43:13,209 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2221 states, 1478 states have (on average 1.1495263870094723) internal successors, (1699), 1562 states have internal predecessors, (1699), 381 states have call successors, (381), 321 states have call predecessors, (381), 361 states have return successors, (556), 370 states have call predecessors, (556), 381 states have call successors, (556) [2024-11-14 02:43:13,219 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2221 states to 2221 states and 2636 transitions. [2024-11-14 02:43:13,221 INFO L78 Accepts]: Start accepts. Automaton has 2221 states and 2636 transitions. Word has length 139 [2024-11-14 02:43:13,222 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-14 02:43:13,222 INFO L471 AbstractCegarLoop]: Abstraction has 2221 states and 2636 transitions. [2024-11-14 02:43:13,222 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 26 states have (on average 5.961538461538462) internal successors, (155), 25 states have internal predecessors, (155), 14 states have call successors, (46), 9 states have call predecessors, (46), 13 states have return successors, (45), 13 states have call predecessors, (45), 14 states have call successors, (45) [2024-11-14 02:43:13,222 INFO L276 IsEmpty]: Start isEmpty. Operand 2221 states and 2636 transitions. [2024-11-14 02:43:13,231 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 208 [2024-11-14 02:43:13,232 INFO L207 NwaCegarLoop]: Found error trace [2024-11-14 02:43:13,232 INFO L215 NwaCegarLoop]: trace histogram [10, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-14 02:43:13,253 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2024-11-14 02:43:13,436 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-14 02:43:13,436 INFO L396 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-14 02:43:13,437 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-14 02:43:13,437 INFO L85 PathProgramCache]: Analyzing trace with hash 557192344, now seen corresponding path program 1 times [2024-11-14 02:43:13,437 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-14 02:43:13,437 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [345490246] [2024-11-14 02:43:13,437 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-14 02:43:13,437 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-14 02:43:13,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-14 02:43:13,757 INFO L134 CoverageAnalysis]: Checked inductivity of 372 backedges. 112 proven. 6 refuted. 0 times theorem prover too weak. 254 trivial. 0 not checked. [2024-11-14 02:43:13,758 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-14 02:43:13,758 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [345490246] [2024-11-14 02:43:13,758 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [345490246] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-14 02:43:13,758 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1610546421] [2024-11-14 02:43:13,758 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-14 02:43:13,758 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-14 02:43:13,758 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 [2024-11-14 02:43:13,760 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-14 02:43:13,763 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-11-14 02:43:13,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-14 02:43:13,910 INFO L255 TraceCheckSpWp]: Trace formula consists of 586 conjuncts, 28 conjuncts are in the unsatisfiable core [2024-11-14 02:43:13,916 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-14 02:43:14,505 INFO L134 CoverageAnalysis]: Checked inductivity of 372 backedges. 243 proven. 44 refuted. 0 times theorem prover too weak. 85 trivial. 0 not checked. [2024-11-14 02:43:14,505 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-14 02:43:15,273 INFO L134 CoverageAnalysis]: Checked inductivity of 372 backedges. 119 proven. 64 refuted. 0 times theorem prover too weak. 189 trivial. 0 not checked. [2024-11-14 02:43:15,273 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1610546421] provided 0 perfect and 2 imperfect interpolant sequences [2024-11-14 02:43:15,273 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1138739152] [2024-11-14 02:43:15,280 INFO L159 IcfgInterpreter]: Started Sifa with 61 locations of interest [2024-11-14 02:43:15,280 INFO L166 IcfgInterpreter]: Building call graph [2024-11-14 02:43:15,281 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-14 02:43:15,281 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-14 02:43:15,281 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-14 02:43:16,881 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 15 for LOIs [2024-11-14 02:43:16,883 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 31 for LOIs [2024-11-14 02:43:17,023 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 3 for LOIs [2024-11-14 02:43:17,041 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 17 for LOIs [2024-11-14 02:43:17,067 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 3 for LOIs [2024-11-14 02:43:17,071 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 3 for LOIs [2024-11-14 02:43:17,072 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 22 for LOIs [2024-11-14 02:43:17,075 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 9 for LOIs [2024-11-14 02:43:17,076 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 21 for LOIs [2024-11-14 02:43:17,078 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-14 02:43:20,305 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21536#(and (not (= ~pumpRunning~0 0)) (<= ~pumpRunning~0 2147483647) (not (= ~methaneLevelCritical~0 0)) (<= 0 ~methAndRunningLastTime~0) (<= 0 |old(~methAndRunningLastTime~0)|) (<= 0 (+ ~pumpRunning~0 2147483648)) (<= ~methaneLevelCritical~0 2147483647) (<= 0 (+ ~methaneLevelCritical~0 2147483648)) (not (= ~methAndRunningLastTime~0 0)))' at error location [2024-11-14 02:43:20,305 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2024-11-14 02:43:20,305 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-11-14 02:43:20,305 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 13, 13] total 31 [2024-11-14 02:43:20,305 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [761631606] [2024-11-14 02:43:20,305 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-11-14 02:43:20,306 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2024-11-14 02:43:20,306 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-14 02:43:20,307 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2024-11-14 02:43:20,309 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=429, Invalid=4827, Unknown=0, NotChecked=0, Total=5256 [2024-11-14 02:43:20,309 INFO L87 Difference]: Start difference. First operand 2221 states and 2636 transitions. Second operand has 31 states, 28 states have (on average 6.5) internal successors, (182), 28 states have internal predecessors, (182), 16 states have call successors, (51), 7 states have call predecessors, (51), 12 states have return successors, (57), 17 states have call predecessors, (57), 16 states have call successors, (57) [2024-11-14 02:43:22,898 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-14 02:43:22,899 INFO L93 Difference]: Finished difference Result 2955 states and 3483 transitions. [2024-11-14 02:43:22,899 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 63 states. [2024-11-14 02:43:22,900 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 28 states have (on average 6.5) internal successors, (182), 28 states have internal predecessors, (182), 16 states have call successors, (51), 7 states have call predecessors, (51), 12 states have return successors, (57), 17 states have call predecessors, (57), 16 states have call successors, (57) Word has length 207 [2024-11-14 02:43:22,900 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-14 02:43:22,903 INFO L225 Difference]: With dead ends: 2955 [2024-11-14 02:43:22,903 INFO L226 Difference]: Without dead ends: 0 [2024-11-14 02:43:22,914 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 697 GetRequests, 550 SyntacticMatches, 17 SemanticMatches, 130 ConstructedPredicates, 0 IntricatePredicates, 2 DeprecatedPredicates, 6688 ImplicationChecksByTransitivity, 5.1s TimeCoverageRelationStatistics Valid=1584, Invalid=15708, Unknown=0, NotChecked=0, Total=17292 [2024-11-14 02:43:22,914 INFO L432 NwaCegarLoop]: 52 mSDtfsCounter, 677 mSDsluCounter, 546 mSDsCounter, 0 mSdLazyCounter, 1475 mSolverCounterSat, 446 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 679 SdHoareTripleChecker+Valid, 598 SdHoareTripleChecker+Invalid, 1921 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 446 IncrementalHoareTripleChecker+Valid, 1475 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2024-11-14 02:43:22,915 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [679 Valid, 598 Invalid, 1921 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [446 Valid, 1475 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2024-11-14 02:43:22,915 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-11-14 02:43:22,915 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-11-14 02:43:22,916 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-14 02:43:22,916 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-11-14 02:43:22,918 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 207 [2024-11-14 02:43:22,918 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-14 02:43:22,918 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-11-14 02:43:22,918 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 28 states have (on average 6.5) internal successors, (182), 28 states have internal predecessors, (182), 16 states have call successors, (51), 7 states have call predecessors, (51), 12 states have return successors, (57), 17 states have call predecessors, (57), 16 states have call successors, (57) [2024-11-14 02:43:22,918 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-11-14 02:43:22,919 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-11-14 02:43:22,921 INFO L782 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-11-14 02:43:22,943 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2024-11-14 02:43:23,126 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-14 02:43:23,129 INFO L407 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-14 02:43:23,130 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2024-11-14 02:43:39,529 INFO L173 ceAbstractionStarter]: Computing trace abstraction results [2024-11-14 02:43:39,562 WARN L162 FloydHoareUtils]: Requires clause for deactivatePump contained old-variable. Original clause: (and (= 1 ~systemActive~0) (or (< 2 ~waterLevel~0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (< ~waterLevel~0 1) (< 1 ~methaneLevelCritical~0) (and (<= 2 ~waterLevel~0) (= |old(~pumpRunning~0)| 0)) (not (= ~methAndRunningLastTime~0 0)) (< ~methaneLevelCritical~0 0))) Eliminated clause: (= 1 ~systemActive~0) [2024-11-14 02:43:39,575 WARN L162 FloydHoareUtils]: Requires clause for changeMethaneLevel contained old-variable. Original clause: (let ((.cse7 (= 1 ~systemActive~0))) (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (not .cse7)) (.cse0 (= |old(~methaneLevelCritical~0)| 0))) (and (or (not .cse0) .cse1 .cse2) (let ((.cse3 (<= |old(~methaneLevelCritical~0)| 1)) (.cse8 (<= 0 |old(~methaneLevelCritical~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse6 (= 2 ~waterLevel~0))) (or (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse3 .cse4 .cse5 .cse7 .cse8 (= ~waterLevel~0 1)) (and .cse4 .cse5 (= 0 ~systemActive~0)) (and .cse5 .cse6 .cse0 .cse7))) (or (and (<= ~methaneLevelCritical~0 1) (not .cse1) (<= 0 ~methaneLevelCritical~0)) .cse2 .cse0)))) Eliminated clause: (exists ((|old(~methaneLevelCritical~0)| Int)) (let ((.cse7 (= 1 ~systemActive~0))) (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (not .cse7)) (.cse0 (= |old(~methaneLevelCritical~0)| 0))) (and (or (not .cse0) .cse1 .cse2) (let ((.cse3 (<= |old(~methaneLevelCritical~0)| 1)) (.cse8 (<= 0 |old(~methaneLevelCritical~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse6 (= 2 ~waterLevel~0))) (or (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse3 .cse4 .cse5 .cse7 .cse8 (= ~waterLevel~0 1)) (and .cse4 .cse5 (= 0 ~systemActive~0)) (and .cse5 .cse6 .cse0 .cse7))) (or (and (<= ~methaneLevelCritical~0 1) (not .cse1) (<= 0 ~methaneLevelCritical~0)) .cse2 .cse0))))) [2024-11-14 02:43:39,583 WARN L976 BoogieBacktranslator]: Unfinished Backtranslation: Expression type not yet supported in backtranslation: QuantifierExpression [2024-11-14 02:43:39,604 WARN L162 FloydHoareUtils]: Requires clause for timeShift contained old-variable. Original clause: (let ((.cse4 (= 1 ~systemActive~0))) (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0)) (.cse0 (= |old(~methAndRunningLastTime~0)| 0)) (.cse3 (not .cse4)) (.cse6 (= |old(~waterLevel~0)| 2))) (and (or (not .cse0) (= ~methAndRunningLastTime~0 0)) (or .cse1 (not .cse2)) (or .cse2 (and (<= ~methaneLevelCritical~0 1) (<= 0 ~methaneLevelCritical~0))) (or (< 1 |old(~waterLevel~0)|) .cse3 (and .cse1 (= ~waterLevel~0 1))) (let ((.cse5 (= |old(~pumpRunning~0)| 0))) (or (and (= |old(~waterLevel~0)| 1) .cse0 .cse4 .cse5) (and .cse5 .cse2) (and .cse0 .cse4 .cse6))) (or .cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= 2 ~waterLevel~0)) (not .cse6))))) Eliminated clause: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse5 (= 0 ~systemActive~0))) (and (exists ((|old(~methAndRunningLastTime~0)| Int) (|old(~pumpRunning~0)| Int) (|old(~waterLevel~0)| Int)) (let ((.cse3 (= 1 ~systemActive~0))) (let ((.cse0 (= |old(~methAndRunningLastTime~0)| 0)) (.cse1 (not .cse3)) (.cse6 (= |old(~waterLevel~0)| 2))) (and (or (not .cse0) (= ~methAndRunningLastTime~0 0)) (or (< 1 |old(~waterLevel~0)|) .cse1 (and .cse2 (= ~waterLevel~0 1))) (let ((.cse4 (= |old(~pumpRunning~0)| 0))) (or (and (= |old(~waterLevel~0)| 1) .cse0 .cse3 .cse4) (and .cse4 .cse5) (and .cse0 .cse3 .cse6))) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= 2 ~waterLevel~0)) (not .cse6)))))) (or .cse2 (not .cse5)) (or .cse5 (and (<= ~methaneLevelCritical~0 1) (<= 0 ~methaneLevelCritical~0))))) [2024-11-14 02:43:39,626 WARN L976 BoogieBacktranslator]: Unfinished Backtranslation: Expression type not yet supported in backtranslation: QuantifierExpression [2024-11-14 02:43:39,631 WARN L162 FloydHoareUtils]: Requires clause for processEnvironment__wrappee__highWaterSensor contained old-variable. Original clause: (and (= ~pumpRunning~0 0) (let ((.cse0 (<= ~methaneLevelCritical~0 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |old(~pumpRunning~0)| 0)) (.cse3 (<= 0 ~methaneLevelCritical~0))) (or (and .cse0 (= ~methAndRunningLastTime~0 0) (= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse0 (<= ~waterLevel~0 1) .cse1 .cse2 .cse3)))) Eliminated clause: (and (= ~pumpRunning~0 0) (let ((.cse0 (<= ~methaneLevelCritical~0 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (<= 0 ~methaneLevelCritical~0))) (or (and .cse0 (= ~methAndRunningLastTime~0 0) (= 2 ~waterLevel~0) .cse1 .cse2) (and .cse0 (<= ~waterLevel~0 1) .cse1 .cse2)))) [2024-11-14 02:43:39,641 WARN L162 FloydHoareUtils]: Requires clause for waterRise contained old-variable. Original clause: (let ((.cse0 (= 0 ~systemActive~0)) (.cse7 (= |old(~waterLevel~0)| 1)) (.cse4 (= 1 ~systemActive~0))) (and (or (= 2 ~waterLevel~0) (< |old(~waterLevel~0)| 2) .cse0) (let ((.cse2 (<= ~methaneLevelCritical~0 1)) (.cse5 (<= 0 ~methaneLevelCritical~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse6 (= |old(~waterLevel~0)| 2))) (or (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse1 .cse2 .cse3 .cse7 .cse4 .cse5) (and .cse1 .cse3 .cse0) (and .cse3 (= ~methaneLevelCritical~0 0) .cse4 .cse6))) (or (not .cse7) (not .cse4) (= ~waterLevel~0 1)))) Eliminated clause: (exists ((|old(~waterLevel~0)| Int)) (let ((.cse0 (= 0 ~systemActive~0)) (.cse7 (= |old(~waterLevel~0)| 1)) (.cse4 (= 1 ~systemActive~0))) (and (or (= 2 ~waterLevel~0) (< |old(~waterLevel~0)| 2) .cse0) (let ((.cse2 (<= ~methaneLevelCritical~0 1)) (.cse5 (<= 0 ~methaneLevelCritical~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse6 (= |old(~waterLevel~0)| 2))) (or (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse1 .cse2 .cse3 .cse7 .cse4 .cse5) (and .cse1 .cse3 .cse0) (and .cse3 (= ~methaneLevelCritical~0 0) .cse4 .cse6))) (or (not .cse7) (not .cse4) (= ~waterLevel~0 1))))) [2024-11-14 02:43:39,646 WARN L976 BoogieBacktranslator]: Unfinished Backtranslation: Expression type not yet supported in backtranslation: QuantifierExpression [2024-11-14 02:43:39,652 WARN L162 FloydHoareUtils]: Requires clause for processEnvironment__wrappee__methaneQuery contained old-variable. Original clause: (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (let ((.cse0 (= ~methAndRunningLastTime~0 0)) (.cse2 (<= ~methaneLevelCritical~0 1)) (.cse1 (= 1 ~systemActive~0)) (.cse3 (= |old(~pumpRunning~0)| 0)) (.cse4 (<= 0 ~methaneLevelCritical~0))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 (<= ~waterLevel~0 2)) (and .cse2 .cse0 (= 2 ~waterLevel~0) .cse1 .cse3 .cse4) (and .cse2 (<= ~waterLevel~0 1) .cse1 .cse3 .cse4))) (or (= ~pumpRunning~0 0) (<= 1 ~waterLevel~0))) Eliminated clause: (let ((.cse0 (= ~pumpRunning~0 0))) (and (let ((.cse1 (<= ~methaneLevelCritical~0 1)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (<= 0 ~methaneLevelCritical~0))) (or (and .cse0 .cse1 (<= ~waterLevel~0 1) .cse2 .cse3) (and .cse4 (= ~methaneLevelCritical~0 0) .cse2 (<= ~waterLevel~0 2)) (and .cse0 .cse1 .cse4 (= 2 ~waterLevel~0) .cse2 .cse3))) (or .cse0 (< 0 ~waterLevel~0)))) [2024-11-14 02:43:39,659 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 14.11 02:43:39 BoogieIcfgContainer [2024-11-14 02:43:39,659 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-11-14 02:43:39,660 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2024-11-14 02:43:39,660 INFO L270 PluginConnector]: Initializing Witness Printer... [2024-11-14 02:43:39,661 INFO L274 PluginConnector]: Witness Printer initialized [2024-11-14 02:43:39,661 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.11 02:42:25" (3/4) ... [2024-11-14 02:43:39,663 INFO L142 WitnessPrinter]: Generating witness for correct program [2024-11-14 02:43:39,667 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2024-11-14 02:43:39,667 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2024-11-14 02:43:39,667 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2024-11-14 02:43:39,667 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2024-11-14 02:43:39,667 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2024-11-14 02:43:39,667 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2024-11-14 02:43:39,668 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2024-11-14 02:43:39,668 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2024-11-14 02:43:39,668 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2024-11-14 02:43:39,668 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2024-11-14 02:43:39,674 INFO L925 BoogieBacktranslator]: Reduced CFG by removing 46 nodes and edges [2024-11-14 02:43:39,675 INFO L925 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2024-11-14 02:43:39,675 INFO L925 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2024-11-14 02:43:39,675 INFO L925 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-11-14 02:43:39,676 INFO L925 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-11-14 02:43:39,702 WARN L216 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\old(methAndRunningLastTime) != 0) || (methAndRunningLastTime == 0)) && ((pumpRunning == 0) || (0 != systemActive))) && ((0 == systemActive) || ((methaneLevelCritical <= 1) && (0 <= methaneLevelCritical)))) && (((1 < \old(waterLevel)) || (1 != systemActive)) || ((pumpRunning == 0) && (waterLevel == 1)))) && ((((((\old(waterLevel) == 1) && (\old(methAndRunningLastTime) == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) || ((\old(pumpRunning) == 0) && (0 == systemActive))) || (((\old(methAndRunningLastTime) == 0) && (1 == systemActive)) && (\old(waterLevel) == 2)))) && (((1 != systemActive) || ((pumpRunning == \old(pumpRunning)) && (2 == waterLevel))) || (\old(waterLevel) != 2))) [2024-11-14 02:43:39,727 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\old(methAndRunningLastTime) != 0) || (methAndRunningLastTime == 0)) && ((pumpRunning == 0) || (0 != systemActive))) && ((0 == systemActive) || ((methaneLevelCritical <= 1) && (0 <= methaneLevelCritical)))) && (((1 < \old(waterLevel)) || (1 != systemActive)) || ((pumpRunning == 0) && (waterLevel == 1)))) && ((((((\old(waterLevel) == 1) && (\old(methAndRunningLastTime) == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) || ((\old(pumpRunning) == 0) && (0 == systemActive))) || (((\old(methAndRunningLastTime) == 0) && (1 == systemActive)) && (\old(waterLevel) == 2)))) && (((1 != systemActive) || ((pumpRunning == \old(pumpRunning)) && (2 == waterLevel))) || (\old(waterLevel) != 2))) [2024-11-14 02:43:39,781 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/witness.graphml [2024-11-14 02:43:39,782 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/witness.yml [2024-11-14 02:43:39,782 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2024-11-14 02:43:39,784 INFO L158 Benchmark]: Toolchain (without parser) took 75419.03ms. Allocated memory was 142.6MB in the beginning and 1.3GB in the end (delta: 1.2GB). Free memory was 116.5MB in the beginning and 862.6MB in the end (delta: -746.1MB). Peak memory consumption was 445.5MB. Max. memory is 16.1GB. [2024-11-14 02:43:39,784 INFO L158 Benchmark]: CDTParser took 0.30ms. Allocated memory is still 117.4MB. Free memory is still 74.0MB. There was no memory consumed. Max. memory is 16.1GB. [2024-11-14 02:43:39,785 INFO L158 Benchmark]: CACSL2BoogieTranslator took 582.55ms. Allocated memory is still 142.6MB. Free memory was 116.2MB in the beginning and 97.3MB in the end (delta: 18.9MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-11-14 02:43:39,786 INFO L158 Benchmark]: Boogie Procedure Inliner took 50.51ms. Allocated memory is still 142.6MB. Free memory was 97.1MB in the beginning and 95.2MB in the end (delta: 1.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-11-14 02:43:39,786 INFO L158 Benchmark]: Boogie Preprocessor took 34.57ms. Allocated memory is still 142.6MB. Free memory was 95.2MB in the beginning and 94.0MB in the end (delta: 1.2MB). There was no memory consumed. Max. memory is 16.1GB. [2024-11-14 02:43:39,786 INFO L158 Benchmark]: RCFGBuilder took 838.12ms. Allocated memory is still 142.6MB. Free memory was 93.8MB in the beginning and 65.4MB in the end (delta: 28.4MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. [2024-11-14 02:43:39,787 INFO L158 Benchmark]: TraceAbstraction took 73779.29ms. Allocated memory was 142.6MB in the beginning and 1.3GB in the end (delta: 1.2GB). Free memory was 64.7MB in the beginning and 871.0MB in the end (delta: -806.3MB). Peak memory consumption was 762.0MB. Max. memory is 16.1GB. [2024-11-14 02:43:39,787 INFO L158 Benchmark]: Witness Printer took 121.60ms. Allocated memory is still 1.3GB. Free memory was 871.0MB in the beginning and 862.6MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-11-14 02:43:39,789 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30ms. Allocated memory is still 117.4MB. Free memory is still 74.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 582.55ms. Allocated memory is still 142.6MB. Free memory was 116.2MB in the beginning and 97.3MB in the end (delta: 18.9MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 50.51ms. Allocated memory is still 142.6MB. Free memory was 97.1MB in the beginning and 95.2MB in the end (delta: 1.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Preprocessor took 34.57ms. Allocated memory is still 142.6MB. Free memory was 95.2MB in the beginning and 94.0MB in the end (delta: 1.2MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 838.12ms. Allocated memory is still 142.6MB. Free memory was 93.8MB in the beginning and 65.4MB in the end (delta: 28.4MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. * TraceAbstraction took 73779.29ms. Allocated memory was 142.6MB in the beginning and 1.3GB in the end (delta: 1.2GB). Free memory was 64.7MB in the beginning and 871.0MB in the end (delta: -806.3MB). Peak memory consumption was 762.0MB. Max. memory is 16.1GB. * Witness Printer took 121.60ms. Allocated memory is still 1.3GB. Free memory was 871.0MB in the beginning and 862.6MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [49] - GenericResultAtLocation [Line: 155]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [155] - GenericResultAtLocation [Line: 164]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [164] - GenericResultAtLocation [Line: 205]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [205] - GenericResultAtLocation [Line: 313]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [313] - GenericResultAtLocation [Line: 381]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [381] - GenericResultAtLocation [Line: 638]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [638] - GenericResultAtLocation [Line: 673]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [673] - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression type not yet supported in backtranslation: QuantifierExpression - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression type not yet supported in backtranslation: QuantifierExpression - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression type not yet supported in backtranslation: QuantifierExpression * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 160]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 80 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 57.2s, OverallIterations: 11, TraceHistogramMax: 10, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 21.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2739 SdHoareTripleChecker+Valid, 8.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2715 mSDsluCounter, 3787 SdHoareTripleChecker+Invalid, 7.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2903 mSDsCounter, 1827 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 7487 IncrementalHoareTripleChecker+Invalid, 9314 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1827 mSolverCounterUnsat, 884 mSDtfsCounter, 7487 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1964 GetRequests, 1484 SyntacticMatches, 49 SemanticMatches, 431 ConstructedPredicates, 0 IntricatePredicates, 3 DeprecatedPredicates, 20889 ImplicationChecksByTransitivity, 29.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2221occurred in iteration=10, InterpolantAutomatonStates: 250, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.9s AutomataMinimizationTime, 11 MinimizatonAttempts, 203 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 8.8s InterpolantComputationTime, 1395 NumberOfCodeBlocks, 1395 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 1978 ConstructedInterpolants, 0 QuantifiedInterpolants, 5632 SizeOfPredicates, 19 NumberOfNonLiveVariables, 1904 ConjunctsInSsa, 98 ConjunctsInUnsatCore, 21 InterpolantComputations, 8 PerfectInterpolantSequences, 1728/1953 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 4.6s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 8, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 67, DAG_INTERPRETER_EARLY_EXITS: 8, TOOLS_POST_APPLICATIONS: 79, TOOLS_POST_TIME: 1.6s, TOOLS_POST_CALL_APPLICATIONS: 48, TOOLS_POST_CALL_TIME: 1.8s, TOOLS_POST_RETURN_APPLICATIONS: 40, TOOLS_POST_RETURN_TIME: 0.6s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 155, TOOLS_QUANTIFIERELIM_TIME: 4.0s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.3s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 202, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 33, DOMAIN_JOIN_TIME: 0.4s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 0, DOMAIN_WIDEN_TIME: 0.0s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 4, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 67, DOMAIN_ISBOTTOM_TIME: 0.1s, LOOP_SUMMARIZER_APPLICATIONS: 4, LOOP_SUMMARIZER_CACHE_MISSES: 4, LOOP_SUMMARIZER_OVERALL_TIME: 1.5s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 1.5s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 4, CALL_SUMMARIZER_APPLICATIONS: 40, CALL_SUMMARIZER_CACHE_MISSES: 7, CALL_SUMMARIZER_OVERALL_TIME: 0.2s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.2s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 1269, DAG_COMPRESSION_RETAINED_NODES: 193, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 325]: Loop Invariant Derived loop invariant: (((((((((((methAndRunningLastTime == 0) && (pumpRunning <= 1)) && (2 == waterLevel)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) && (0 <= pumpRunning)) || ((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (methaneLevelCritical == 1)) && (splverifierCounter == 0)) && (waterLevel == 1))) || ((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel == 1))) || (((((((pumpRunning == 0) && (methaneLevelCritical <= 1)) && (methAndRunningLastTime == 0)) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0)) && (0 <= methaneLevelCritical))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (splverifierCounter == 0)) && (0 == systemActive))) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 387]: Location Invariant Derived location invariant: (((((((\old(methAndRunningLastTime) != 0) || (methAndRunningLastTime == 0)) && ((pumpRunning == 0) || (0 != systemActive))) && ((0 == systemActive) || ((methaneLevelCritical <= 1) && (0 <= methaneLevelCritical)))) && (((1 < \old(waterLevel)) || (1 != systemActive)) || ((pumpRunning == 0) && (waterLevel == 1)))) && ((((((\old(waterLevel) == 1) && (\old(methAndRunningLastTime) == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) || ((\old(pumpRunning) == 0) && (0 == systemActive))) || (((\old(methAndRunningLastTime) == 0) && (1 == systemActive)) && (\old(waterLevel) == 2)))) && (((1 != systemActive) || ((pumpRunning == \old(pumpRunning)) && (2 == waterLevel))) || (\old(waterLevel) != 2))) - InvariantResult [Line: 324]: Location Invariant Derived location invariant: 0 - ProcedureContractResult [Line: 521]: Procedure Contract for deactivatePump Derived contract for procedure deactivatePump. Requires: (1 == systemActive) Ensures: (((pumpRunning == 0) && (1 == systemActive)) && ((((((cleanupTimeShifts == \old(cleanupTimeShifts)) && (methAndRunningLastTime == \old(methAndRunningLastTime))) && (waterLevel == \old(waterLevel))) && (methaneLevelCritical == \old(methaneLevelCritical))) && (systemActive == \old(systemActive))) && (head == \old(head)))) - ProcedureContractResult [Line: 411]: Procedure Contract for processEnvironment__wrappee__base Derived contract for procedure processEnvironment__wrappee__base. Requires: (((((pumpRunning == 0) && (methaneLevelCritical <= 1)) && (waterLevel <= 1)) && (1 == systemActive)) && (0 <= methaneLevelCritical)) Ensures: ((((((pumpRunning == 0) && (methaneLevelCritical <= 1)) && (waterLevel <= 1)) && (1 == systemActive)) && (0 <= methaneLevelCritical)) && (((((((cleanupTimeShifts == \old(cleanupTimeShifts)) && (methAndRunningLastTime == \old(methAndRunningLastTime))) && (waterLevel == \old(waterLevel))) && (methaneLevelCritical == \old(methaneLevelCritical))) && (pumpRunning == \old(pumpRunning))) && (systemActive == \old(systemActive))) && (head == \old(head)))) - ProcedureContractResult [Line: 237]: Procedure Contract for changeMethaneLevel Derived contract for procedure changeMethaneLevel. Ensures: (((((((methaneLevelCritical == 0) || (1 != systemActive)) || (\old(methaneLevelCritical) == 0)) || (methAndRunningLastTime != 0)) && ((((((methaneLevelCritical <= 1) && (methaneLevelCritical != 0)) && (0 <= methaneLevelCritical)) || (\old(methaneLevelCritical) != 0)) || (1 != systemActive)) || (methAndRunningLastTime != 0))) && (((((((((\old(methaneLevelCritical) <= 1) && (pumpRunning == 0)) && (methAndRunningLastTime == 0)) && (2 == waterLevel)) && (1 == systemActive)) && (0 <= \old(methaneLevelCritical))) || ((((((\old(methaneLevelCritical) <= 1) && (pumpRunning == 0)) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (0 <= \old(methaneLevelCritical))) && (waterLevel == 1))) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (0 == systemActive))) || ((((methAndRunningLastTime == 0) && (2 == waterLevel)) && (\old(methaneLevelCritical) == 0)) && (1 == systemActive)))) && ((((((cleanupTimeShifts == \old(cleanupTimeShifts)) && (methAndRunningLastTime == \old(methAndRunningLastTime))) && (waterLevel == \old(waterLevel))) && (pumpRunning == \old(pumpRunning))) && (systemActive == \old(systemActive))) && (head == \old(head)))) - ProcedureContractResult [Line: 249]: Procedure Contract for isMethaneLevelCritical Derived contract for procedure isMethaneLevelCritical. Requires: ((((((((pumpRunning == 0) && (methaneLevelCritical <= 1)) && (waterLevel <= 1)) && (1 == systemActive)) && (0 <= methaneLevelCritical)) || (((((((methaneLevelCritical <= 1) && (pumpRunning <= 1)) && (2 == waterLevel)) && (1 == systemActive)) && (0 <= methaneLevelCritical)) && (0 <= pumpRunning)) && ((pumpRunning == 0) || (methaneLevelCritical == 0)))) || ((((((methaneLevelCritical <= 1) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (waterLevel <= 2)) && (1 <= waterLevel)) && (0 <= methaneLevelCritical))) || ((pumpRunning == 0) && (0 == systemActive))) Ensures: ((((\result == methaneLevelCritical) || (0 == systemActive)) && ((((((((pumpRunning == 0) && (methaneLevelCritical <= 1)) && (waterLevel <= 1)) && (1 == systemActive)) && (0 <= methaneLevelCritical)) || (((((((methaneLevelCritical <= 1) && (pumpRunning <= 1)) && (2 == waterLevel)) && (1 == systemActive)) && (0 <= methaneLevelCritical)) && (0 <= pumpRunning)) && ((pumpRunning == 0) || (methaneLevelCritical == 0)))) || ((((((methaneLevelCritical <= 1) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (waterLevel <= 2)) && (1 <= waterLevel)) && (0 <= methaneLevelCritical))) || ((pumpRunning == 0) && (0 == systemActive)))) && (((((((cleanupTimeShifts == \old(cleanupTimeShifts)) && (methAndRunningLastTime == \old(methAndRunningLastTime))) && (waterLevel == \old(waterLevel))) && (methaneLevelCritical == \old(methaneLevelCritical))) && (pumpRunning == \old(pumpRunning))) && (systemActive == \old(systemActive))) && (head == \old(head)))) - ProcedureContractResult [Line: 387]: Procedure Contract for timeShift Derived contract for procedure timeShift. Requires: (((pumpRunning == 0) || (0 != systemActive)) && ((0 == systemActive) || ((methaneLevelCritical <= 1) && (0 <= methaneLevelCritical)))) Ensures: ((((((((((\old(waterLevel) != 1) || (((((pumpRunning == 0) && (methaneLevelCritical <= 1)) && (methAndRunningLastTime == 0)) && (0 <= methaneLevelCritical)) && (waterLevel == 1))) || (0 == systemActive)) && (((((((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (2 == waterLevel)) && (\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (waterLevel == 1))) || (\old(methAndRunningLastTime) != 0)) || (methaneLevelCritical == 0)) || (1 != systemActive)) || (1 < methaneLevelCritical)) || (\old(waterLevel) != 2)) || (methaneLevelCritical < 0))) && ((((((\old(waterLevel) == 1) && (\old(methAndRunningLastTime) == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) || ((\old(pumpRunning) == 0) && (0 == systemActive))) || (((((methaneLevelCritical <= 1) && (\old(methAndRunningLastTime) == 0)) && (1 == systemActive)) && (0 <= methaneLevelCritical)) && (\old(waterLevel) == 2)))) && (((((\old(pumpRunning) != 0) || (methaneLevelCritical != 0)) || (\old(waterLevel) != 2)) || ((((methAndRunningLastTime == 0) && (2 == waterLevel)) && (1 == systemActive)) && (pumpRunning == 1))) || (0 == systemActive))) && ((((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (waterLevel == 1)) || (\old(methAndRunningLastTime) != 0)) || (1 != systemActive)) || (methaneLevelCritical != 0)) || ((((methAndRunningLastTime == 0) && (2 == waterLevel)) && (\old(pumpRunning) == 0)) && (pumpRunning == 1))) || (\old(waterLevel) != 2))) && ((((((\old(pumpRunning) != 0) || (\old(methAndRunningLastTime) != 0)) || (methaneLevelCritical == 0)) || (1 != systemActive)) || (((((pumpRunning == 0) && (methaneLevelCritical <= 1)) && (methAndRunningLastTime == 0)) && (2 == waterLevel)) && (0 <= methaneLevelCritical))) || (\old(waterLevel) != 2))) && ((0 != systemActive) || ((pumpRunning == 0) && (methAndRunningLastTime == 0)))) && ((((cleanupTimeShifts == \old(cleanupTimeShifts)) && (methaneLevelCritical == \old(methaneLevelCritical))) && (systemActive == \old(systemActive))) && (head == \old(head)))) - ProcedureContractResult [Line: 52]: Procedure Contract for cleanup Derived contract for procedure cleanup. Requires: 0 Ensures: (0 && ((((cleanupTimeShifts == \old(cleanupTimeShifts)) && (methaneLevelCritical == \old(methaneLevelCritical))) && (systemActive == \old(systemActive))) && (head == \old(head)))) - ProcedureContractResult [Line: 419]: Procedure Contract for processEnvironment__wrappee__highWaterSensor Derived contract for procedure processEnvironment__wrappee__highWaterSensor. Requires: ((pumpRunning == 0) && ((((((methaneLevelCritical <= 1) && (methAndRunningLastTime == 0)) && (2 == waterLevel)) && (1 == systemActive)) && (0 <= methaneLevelCritical)) || ((((methaneLevelCritical <= 1) && (waterLevel <= 1)) && (1 == systemActive)) && (0 <= methaneLevelCritical)))) Ensures: ((((((methaneLevelCritical == 0) || ((pumpRunning == 0) && (\old(pumpRunning) == 0))) && (((2 != waterLevel) || ((\old(pumpRunning) == 0) && (pumpRunning == 1))) || (methaneLevelCritical != 0))) && ((((((methaneLevelCritical <= 1) && (methAndRunningLastTime == 0)) && (2 == waterLevel)) && (1 == systemActive)) && (0 <= methaneLevelCritical)) || (((((methaneLevelCritical <= 1) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (0 <= methaneLevelCritical)))) && ((pumpRunning == 0) || (1 < waterLevel))) && ((((((cleanupTimeShifts == \old(cleanupTimeShifts)) && (methAndRunningLastTime == \old(methAndRunningLastTime))) && (waterLevel == \old(waterLevel))) && (methaneLevelCritical == \old(methaneLevelCritical))) && (systemActive == \old(systemActive))) && (head == \old(head)))) - ProcedureContractResult [Line: 225]: Procedure Contract for waterRise Derived contract for procedure waterRise. Ensures: (((((((((((pumpRunning == 0) && (methaneLevelCritical <= 1)) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (0 <= methaneLevelCritical)) && (\old(waterLevel) == 2)) || ((((((pumpRunning == 0) && (methaneLevelCritical <= 1)) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == 1)) && (1 == systemActive)) && (0 <= methaneLevelCritical))) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (0 == systemActive))) || ((((methAndRunningLastTime == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (\old(waterLevel) == 2))) && ((2 == waterLevel) || (1 != systemActive))) && ((((((cleanupTimeShifts == \old(cleanupTimeShifts)) && (methAndRunningLastTime == \old(methAndRunningLastTime))) && (methaneLevelCritical == \old(methaneLevelCritical))) && (pumpRunning == \old(pumpRunning))) && (systemActive == \old(systemActive))) && (head == \old(head)))) - ProcedureContractResult [Line: 445]: Procedure Contract for processEnvironment__wrappee__methaneQuery Derived contract for procedure processEnvironment__wrappee__methaneQuery. Requires: ((((((((pumpRunning == 0) && (methaneLevelCritical <= 1)) && (waterLevel <= 1)) && (1 == systemActive)) && (0 <= methaneLevelCritical)) || ((((methAndRunningLastTime == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel <= 2))) || ((((((pumpRunning == 0) && (methaneLevelCritical <= 1)) && (methAndRunningLastTime == 0)) && (2 == waterLevel)) && (1 == systemActive)) && (0 <= methaneLevelCritical))) && ((pumpRunning == 0) || (0 < waterLevel))) Ensures: (((((((pumpRunning == 0) || (\old(pumpRunning) == 0)) && ((methaneLevelCritical == 0) || ((pumpRunning == 0) && (\old(pumpRunning) == 0)))) && (((((((methAndRunningLastTime == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel <= 2)) && (1 <= waterLevel)) || (((((methaneLevelCritical <= 1) && (methAndRunningLastTime == 0)) && (2 == waterLevel)) && (1 == systemActive)) && (0 <= methaneLevelCritical))) || (((((methaneLevelCritical <= 1) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (0 <= methaneLevelCritical)))) && ((((\old(pumpRunning) != 0) || (2 != waterLevel)) || (methaneLevelCritical != 0)) || (pumpRunning == 1))) && ((pumpRunning == 0) || (1 < waterLevel))) && ((((((cleanupTimeShifts == \old(cleanupTimeShifts)) && (methAndRunningLastTime == \old(methAndRunningLastTime))) && (waterLevel == \old(waterLevel))) && (methaneLevelCritical == \old(methaneLevelCritical))) && (systemActive == \old(systemActive))) && (head == \old(head)))) - ProcedureContractResult [Line: 529]: Procedure Contract for isMethaneAlarm Derived contract for procedure isMethaneAlarm. Requires: ((((((methaneLevelCritical <= 1) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (waterLevel <= 2)) && (1 <= waterLevel)) && (0 <= methaneLevelCritical)) Ensures: ((((((((methaneLevelCritical <= 1) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (waterLevel <= 2)) && (1 <= waterLevel)) && (0 <= methaneLevelCritical)) && (\result == methaneLevelCritical)) && (((((((cleanupTimeShifts == \old(cleanupTimeShifts)) && (methAndRunningLastTime == \old(methAndRunningLastTime))) && (waterLevel == \old(waterLevel))) && (methaneLevelCritical == \old(methaneLevelCritical))) && (pumpRunning == \old(pumpRunning))) && (systemActive == \old(systemActive))) && (head == \old(head)))) RESULT: Ultimate proved your program to be correct! [2024-11-14 02:43:39,831 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27a0c1e8-149d-4377-bfbd-6c3eaa4eea9a/bin/utaipan-verify-sOmjnqqW8E/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE