/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data -s ../../../trunk/examples/settings/default/taipan/svcomp-Reach-32bit-Taipan_Default.epf -tc ../../../trunk/examples/toolchains/AutomizerC.xml --sifa.abstract.domain OctagonDomain -i ../sv-benchmarks/c/product-lines/minepump_spec4_product27.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.3-dev-f954360 [2023-04-03 01:03:55,990 INFO L177 SettingsManager]: Resetting all preferences to default values... [2023-04-03 01:03:55,992 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2023-04-03 01:03:56,015 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2023-04-03 01:03:56,015 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2023-04-03 01:03:56,016 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2023-04-03 01:03:56,017 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2023-04-03 01:03:56,018 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2023-04-03 01:03:56,019 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2023-04-03 01:03:56,020 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2023-04-03 01:03:56,021 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2023-04-03 01:03:56,022 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2023-04-03 01:03:56,022 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2023-04-03 01:03:56,023 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2023-04-03 01:03:56,024 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2023-04-03 01:03:56,024 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2023-04-03 01:03:56,025 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2023-04-03 01:03:56,026 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2023-04-03 01:03:56,027 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2023-04-03 01:03:56,028 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2023-04-03 01:03:56,029 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2023-04-03 01:03:56,030 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2023-04-03 01:03:56,031 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2023-04-03 01:03:56,032 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2023-04-03 01:03:56,034 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2023-04-03 01:03:56,034 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2023-04-03 01:03:56,035 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2023-04-03 01:03:56,035 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2023-04-03 01:03:56,036 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2023-04-03 01:03:56,036 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2023-04-03 01:03:56,036 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2023-04-03 01:03:56,037 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2023-04-03 01:03:56,037 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2023-04-03 01:03:56,038 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2023-04-03 01:03:56,039 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2023-04-03 01:03:56,039 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2023-04-03 01:03:56,040 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2023-04-03 01:03:56,040 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2023-04-03 01:03:56,040 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2023-04-03 01:03:56,041 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2023-04-03 01:03:56,041 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2023-04-03 01:03:56,046 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/taipan/svcomp-Reach-32bit-Taipan_Default.epf [2023-04-03 01:03:56,074 INFO L113 SettingsManager]: Loading preferences was successful [2023-04-03 01:03:56,075 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2023-04-03 01:03:56,076 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-04-03 01:03:56,076 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-04-03 01:03:56,076 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-04-03 01:03:56,077 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-04-03 01:03:56,077 INFO L138 SettingsManager]: * User list type=DISABLED [2023-04-03 01:03:56,077 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-04-03 01:03:56,077 INFO L138 SettingsManager]: * Explicit value domain=true [2023-04-03 01:03:56,077 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-04-03 01:03:56,078 INFO L138 SettingsManager]: * Octagon Domain=false [2023-04-03 01:03:56,078 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2023-04-03 01:03:56,078 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-04-03 01:03:56,078 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-04-03 01:03:56,078 INFO L138 SettingsManager]: * Interval Domain=false [2023-04-03 01:03:56,078 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-04-03 01:03:56,079 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-04-03 01:03:56,079 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2023-04-03 01:03:56,079 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-04-03 01:03:56,079 INFO L138 SettingsManager]: * sizeof long=4 [2023-04-03 01:03:56,079 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2023-04-03 01:03:56,079 INFO L138 SettingsManager]: * sizeof POINTER=4 [2023-04-03 01:03:56,079 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2023-04-03 01:03:56,080 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-04-03 01:03:56,080 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-04-03 01:03:56,080 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-04-03 01:03:56,080 INFO L138 SettingsManager]: * sizeof long double=12 [2023-04-03 01:03:56,080 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2023-04-03 01:03:56,080 INFO L138 SettingsManager]: * Use constant arrays=true [2023-04-03 01:03:56,081 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-04-03 01:03:56,081 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-04-03 01:03:56,081 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2023-04-03 01:03:56,081 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-04-03 01:03:56,081 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-04-03 01:03:56,081 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2023-04-03 01:03:56,081 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-04-03 01:03:56,082 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-04-03 01:03:56,082 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-04-03 01:03:56,082 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-04-03 01:03:56,082 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-04-03 01:03:56,082 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-04-03 01:03:56,082 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.sifa: Abstract Domain -> OctagonDomain [2023-04-03 01:03:56,302 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-04-03 01:03:56,320 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-04-03 01:03:56,322 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-04-03 01:03:56,323 INFO L271 PluginConnector]: Initializing CDTParser... [2023-04-03 01:03:56,324 INFO L275 PluginConnector]: CDTParser initialized [2023-04-03 01:03:56,325 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_product27.cil.c [2023-04-03 01:03:57,489 INFO L500 CDTParser]: Created temporary CDT project at NULL [2023-04-03 01:03:57,762 INFO L351 CDTParser]: Found 1 translation units. [2023-04-03 01:03:57,763 INFO L172 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product27.cil.c [2023-04-03 01:03:57,775 INFO L394 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1a40a8ea3/541d63401d8e4dac9059d49890acaf4d/FLAGfda2b0c76 [2023-04-03 01:03:57,788 INFO L402 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1a40a8ea3/541d63401d8e4dac9059d49890acaf4d [2023-04-03 01:03:57,791 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-04-03 01:03:57,792 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2023-04-03 01:03:57,793 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-04-03 01:03:57,793 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-04-03 01:03:57,797 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2023-04-03 01:03:57,797 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.04 01:03:57" (1/1) ... [2023-04-03 01:03:57,799 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2980fec3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.04 01:03:57, skipping insertion in model container [2023-04-03 01:03:57,799 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.04 01:03:57" (1/1) ... [2023-04-03 01:03:57,806 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2023-04-03 01:03:57,852 INFO L178 MainTranslator]: Built tables and reachable declarations [2023-04-03 01:03:57,987 WARN L247 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product27.cil.c[2897,2910] [2023-04-03 01:03:58,051 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-04-03 01:03:58,060 INFO L203 MainTranslator]: Completed pre-run [2023-04-03 01:03:58,074 WARN L247 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product27.cil.c[2897,2910] [2023-04-03 01:03:58,111 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-04-03 01:03:58,126 INFO L208 MainTranslator]: Completed translation [2023-04-03 01:03:58,126 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.04 01:03:58 WrapperNode [2023-04-03 01:03:58,126 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-04-03 01:03:58,127 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-04-03 01:03:58,127 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2023-04-03 01:03:58,127 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2023-04-03 01:03:58,145 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.04 01:03:58" (1/1) ... [2023-04-03 01:03:58,145 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.04 01:03:58" (1/1) ... [2023-04-03 01:03:58,156 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.04 01:03:58" (1/1) ... [2023-04-03 01:03:58,156 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.04 01:03:58" (1/1) ... [2023-04-03 01:03:58,186 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.04 01:03:58" (1/1) ... [2023-04-03 01:03:58,191 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.04 01:03:58" (1/1) ... [2023-04-03 01:03:58,197 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.04 01:03:58" (1/1) ... [2023-04-03 01:03:58,199 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.04 01:03:58" (1/1) ... [2023-04-03 01:03:58,204 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-04-03 01:03:58,204 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-04-03 01:03:58,205 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2023-04-03 01:03:58,205 INFO L275 PluginConnector]: RCFGBuilder initialized [2023-04-03 01:03:58,209 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.04 01:03:58" (1/1) ... [2023-04-03 01:03:58,218 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-04-03 01:03:58,228 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2023-04-03 01:03:58,239 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-04-03 01:03:58,240 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-04-03 01:03:58,274 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2023-04-03 01:03:58,274 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-04-03 01:03:58,274 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~int~X~int~TO~int [2023-04-03 01:03:58,274 INFO L138 BoogieDeclarations]: Found implementation of procedure reach_error [2023-04-03 01:03:58,274 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-04-03 01:03:58,274 INFO L138 BoogieDeclarations]: Found implementation of procedure Specification2 [2023-04-03 01:03:58,275 INFO L138 BoogieDeclarations]: Found implementation of procedure setup [2023-04-03 01:03:58,275 INFO L138 BoogieDeclarations]: Found implementation of procedure runTest [2023-04-03 01:03:58,275 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2023-04-03 01:03:58,275 INFO L138 BoogieDeclarations]: Found implementation of procedure __automaton_fail [2023-04-03 01:03:58,275 INFO L138 BoogieDeclarations]: Found implementation of procedure __utac_acc__Specification4_spec__1 [2023-04-03 01:03:58,275 INFO L138 BoogieDeclarations]: Found implementation of procedure lowerWaterLevel [2023-04-03 01:03:58,275 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-04-03 01:03:58,275 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-04-03 01:03:58,275 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-04-03 01:03:58,275 INFO L138 BoogieDeclarations]: Found implementation of procedure printEnvironment [2023-04-03 01:03:58,275 INFO L138 BoogieDeclarations]: Found implementation of procedure getWaterLevel [2023-04-03 01:03:58,275 INFO L138 BoogieDeclarations]: Found implementation of procedure isLowWaterSensorDry [2023-04-03 01:03:58,276 INFO L138 BoogieDeclarations]: Found implementation of procedure test [2023-04-03 01:03:58,276 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-04-03 01:03:58,276 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-04-03 01:03:58,276 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment [2023-04-03 01:03:58,276 INFO L138 BoogieDeclarations]: Found implementation of procedure activatePump__wrappee__lowWaterSensor [2023-04-03 01:03:58,276 INFO L138 BoogieDeclarations]: Found implementation of procedure activatePump [2023-04-03 01:03:58,276 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-04-03 01:03:58,280 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-04-03 01:03:58,280 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-04-03 01:03:58,280 INFO L138 BoogieDeclarations]: Found implementation of procedure printPump [2023-04-03 01:03:58,280 INFO L138 BoogieDeclarations]: Found implementation of procedure isLowWaterLevel [2023-04-03 01:03:58,280 INFO L138 BoogieDeclarations]: Found implementation of procedure stopSystem [2023-04-03 01:03:58,280 INFO L138 BoogieDeclarations]: Found implementation of procedure select_one [2023-04-03 01:03:58,281 INFO L138 BoogieDeclarations]: Found implementation of procedure select_features [2023-04-03 01:03:58,281 INFO L138 BoogieDeclarations]: Found implementation of procedure select_helpers [2023-04-03 01:03:58,281 INFO L138 BoogieDeclarations]: Found implementation of procedure valid_product [2023-04-03 01:03:58,281 INFO L138 BoogieDeclarations]: Found implementation of procedure __utac__exception__cf_handler_set [2023-04-03 01:03:58,281 INFO L138 BoogieDeclarations]: Found implementation of procedure __utac__exception__cf_handler_free [2023-04-03 01:03:58,281 INFO L138 BoogieDeclarations]: Found implementation of procedure __utac__exception__cf_handler_reset [2023-04-03 01:03:58,281 INFO L138 BoogieDeclarations]: Found implementation of procedure __utac__error_stack_mgt [2023-04-03 01:03:58,281 INFO L138 BoogieDeclarations]: Found implementation of procedure __utac__get_this_arg [2023-04-03 01:03:58,281 INFO L138 BoogieDeclarations]: Found implementation of procedure __utac__get_this_argtype [2023-04-03 01:03:58,281 INFO L130 BoogieDeclarations]: Found specification of procedure abort [2023-04-03 01:03:58,282 INFO L130 BoogieDeclarations]: Found specification of procedure __assert_fail [2023-04-03 01:03:58,282 INFO L130 BoogieDeclarations]: Found specification of procedure reach_error [2023-04-03 01:03:58,282 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-04-03 01:03:58,282 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2023-04-03 01:03:58,282 INFO L130 BoogieDeclarations]: Found specification of procedure printf [2023-04-03 01:03:58,282 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-04-03 01:03:58,282 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-04-03 01:03:58,282 INFO L130 BoogieDeclarations]: Found specification of procedure printPump [2023-04-03 01:03:58,282 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-04-03 01:03:58,282 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-04-03 01:03:58,283 INFO L130 BoogieDeclarations]: Found specification of procedure Specification2 [2023-04-03 01:03:58,283 INFO L130 BoogieDeclarations]: Found specification of procedure setup [2023-04-03 01:03:58,283 INFO L130 BoogieDeclarations]: Found specification of procedure test [2023-04-03 01:03:58,283 INFO L130 BoogieDeclarations]: Found specification of procedure runTest [2023-04-03 01:03:58,283 INFO L130 BoogieDeclarations]: Found specification of procedure select_helpers [2023-04-03 01:03:58,283 INFO L130 BoogieDeclarations]: Found specification of procedure select_features [2023-04-03 01:03:58,283 INFO L130 BoogieDeclarations]: Found specification of procedure valid_product [2023-04-03 01:03:58,283 INFO L130 BoogieDeclarations]: Found specification of procedure main [2023-04-03 01:03:58,283 INFO L130 BoogieDeclarations]: Found specification of procedure __automaton_fail [2023-04-03 01:03:58,283 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-04-03 01:03:58,284 INFO L130 BoogieDeclarations]: Found specification of procedure getWaterLevel [2023-04-03 01:03:58,284 INFO L130 BoogieDeclarations]: Found specification of procedure __utac_acc__Specification4_spec__1 [2023-04-03 01:03:58,284 INFO L130 BoogieDeclarations]: Found specification of procedure lowerWaterLevel [2023-04-03 01:03:58,284 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-04-03 01:03:58,284 INFO L130 BoogieDeclarations]: Found specification of procedure printEnvironment [2023-04-03 01:03:58,284 INFO L130 BoogieDeclarations]: Found specification of procedure isLowWaterSensorDry [2023-04-03 01:03:58,284 INFO L130 BoogieDeclarations]: Found specification of procedure stopSystem [2023-04-03 01:03:58,284 INFO L130 BoogieDeclarations]: Found specification of procedure activatePump [2023-04-03 01:03:58,284 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-04-03 01:03:58,284 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment [2023-04-03 01:03:58,285 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-04-03 01:03:58,285 INFO L130 BoogieDeclarations]: Found specification of procedure isLowWaterLevel [2023-04-03 01:03:58,285 INFO L130 BoogieDeclarations]: Found specification of procedure activatePump__wrappee__lowWaterSensor [2023-04-03 01:03:58,285 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-04-03 01:03:58,285 INFO L130 BoogieDeclarations]: Found specification of procedure select_one [2023-04-03 01:03:58,285 INFO L130 BoogieDeclarations]: Found specification of procedure malloc [2023-04-03 01:03:58,285 INFO L130 BoogieDeclarations]: Found specification of procedure free [2023-04-03 01:03:58,285 INFO L130 BoogieDeclarations]: Found specification of procedure __utac__exception__cf_handler_set [2023-04-03 01:03:58,285 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2023-04-03 01:03:58,285 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2023-04-03 01:03:58,285 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2023-04-03 01:03:58,285 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2023-04-03 01:03:58,286 INFO L130 BoogieDeclarations]: Found specification of procedure __utac__exception__cf_handler_free [2023-04-03 01:03:58,286 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2023-04-03 01:03:58,286 INFO L130 BoogieDeclarations]: Found specification of procedure __utac__exception__cf_handler_reset [2023-04-03 01:03:58,286 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~int~X~int~TO~int [2023-04-03 01:03:58,286 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2023-04-03 01:03:58,286 INFO L130 BoogieDeclarations]: Found specification of procedure __utac__error_stack_mgt [2023-04-03 01:03:58,286 INFO L130 BoogieDeclarations]: Found specification of procedure __utac__get_this_arg [2023-04-03 01:03:58,286 INFO L130 BoogieDeclarations]: Found specification of procedure __utac__get_this_argtype [2023-04-03 01:03:58,286 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2023-04-03 01:03:58,286 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-04-03 01:03:58,286 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-04-03 01:03:58,487 INFO L236 CfgBuilder]: Building ICFG [2023-04-03 01:03:58,489 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-04-03 01:03:59,072 INFO L277 CfgBuilder]: Performing block encoding [2023-04-03 01:03:59,165 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-04-03 01:03:59,165 INFO L302 CfgBuilder]: Removed 5 assume(true) statements. [2023-04-03 01:03:59,168 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.04 01:03:59 BoogieIcfgContainer [2023-04-03 01:03:59,168 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-04-03 01:03:59,169 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-04-03 01:03:59,169 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2023-04-03 01:03:59,172 INFO L275 PluginConnector]: TraceAbstraction initialized [2023-04-03 01:03:59,172 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.04 01:03:57" (1/3) ... [2023-04-03 01:03:59,173 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2e93a055 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.04 01:03:59, skipping insertion in model container [2023-04-03 01:03:59,173 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.04 01:03:58" (2/3) ... [2023-04-03 01:03:59,173 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2e93a055 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.04 01:03:59, skipping insertion in model container [2023-04-03 01:03:59,173 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.04 01:03:59" (3/3) ... [2023-04-03 01:03:59,174 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product27.cil.c [2023-04-03 01:03:59,189 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-04-03 01:03:59,189 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-04-03 01:03:59,230 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-04-03 01:03:59,239 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3a623bc1, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-04-03 01:03:59,240 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-04-03 01:03:59,244 INFO L276 IsEmpty]: Start isEmpty. Operand has 128 states, 58 states have (on average 1.293103448275862) internal successors, (75), 70 states have internal predecessors, (75), 42 states have call successors, (42), 25 states have call predecessors, (42), 25 states have return successors, (42), 40 states have call predecessors, (42), 42 states have call successors, (42) [2023-04-03 01:03:59,251 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2023-04-03 01:03:59,251 INFO L187 NwaCegarLoop]: Found error trace [2023-04-03 01:03:59,252 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-04-03 01:03:59,252 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting __automaton_failErr0ASSERT_VIOLATIONERROR_FUNCTION === [__automaton_failErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-04-03 01:03:59,256 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-04-03 01:03:59,257 INFO L85 PathProgramCache]: Analyzing trace with hash -610680499, now seen corresponding path program 1 times [2023-04-03 01:03:59,268 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-04-03 01:03:59,268 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1994978072] [2023-04-03 01:03:59,268 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-04-03 01:03:59,269 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-04-03 01:03:59,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-04-03 01:03:59,496 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-04-03 01:03:59,496 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-04-03 01:03:59,497 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1994978072] [2023-04-03 01:03:59,498 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1994978072] provided 1 perfect and 0 imperfect interpolant sequences [2023-04-03 01:03:59,498 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-04-03 01:03:59,498 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-04-03 01:03:59,499 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1293486902] [2023-04-03 01:03:59,500 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-04-03 01:03:59,504 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-04-03 01:03:59,504 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-04-03 01:03:59,537 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-04-03 01:03:59,537 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-04-03 01:03:59,539 INFO L87 Difference]: Start difference. First operand has 128 states, 58 states have (on average 1.293103448275862) internal successors, (75), 70 states have internal predecessors, (75), 42 states have call successors, (42), 25 states have call predecessors, (42), 25 states have return successors, (42), 40 states have call predecessors, (42), 42 states have call successors, (42) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 2 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2023-04-03 01:03:59,591 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-04-03 01:03:59,591 INFO L93 Difference]: Finished difference Result 189 states and 232 transitions. [2023-04-03 01:03:59,595 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-04-03 01:03:59,596 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 2 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 42 [2023-04-03 01:03:59,596 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-04-03 01:03:59,603 INFO L225 Difference]: With dead ends: 189 [2023-04-03 01:03:59,604 INFO L226 Difference]: Without dead ends: 95 [2023-04-03 01:03:59,607 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-04-03 01:03:59,615 INFO L413 NwaCegarLoop]: 107 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 107 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-04-03 01:03:59,616 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 107 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-04-03 01:03:59,632 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95 states. [2023-04-03 01:03:59,659 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95 to 95. [2023-04-03 01:03:59,660 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 95 states, 49 states have (on average 1.2448979591836735) internal successors, (61), 58 states have internal predecessors, (61), 27 states have call successors, (27), 23 states have call predecessors, (27), 18 states have return successors, (22), 20 states have call predecessors, (22), 22 states have call successors, (22) [2023-04-03 01:03:59,663 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95 states to 95 states and 110 transitions. [2023-04-03 01:03:59,664 INFO L78 Accepts]: Start accepts. Automaton has 95 states and 110 transitions. Word has length 42 [2023-04-03 01:03:59,664 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-04-03 01:03:59,665 INFO L495 AbstractCegarLoop]: Abstraction has 95 states and 110 transitions. [2023-04-03 01:03:59,665 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 2 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2023-04-03 01:03:59,665 INFO L276 IsEmpty]: Start isEmpty. Operand 95 states and 110 transitions. [2023-04-03 01:03:59,667 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2023-04-03 01:03:59,668 INFO L187 NwaCegarLoop]: Found error trace [2023-04-03 01:03:59,668 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-04-03 01:03:59,668 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-04-03 01:03:59,668 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting __automaton_failErr0ASSERT_VIOLATIONERROR_FUNCTION === [__automaton_failErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-04-03 01:03:59,669 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-04-03 01:03:59,669 INFO L85 PathProgramCache]: Analyzing trace with hash -647744489, now seen corresponding path program 1 times [2023-04-03 01:03:59,669 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-04-03 01:03:59,669 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1495682296] [2023-04-03 01:03:59,669 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-04-03 01:03:59,669 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-04-03 01:03:59,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-04-03 01:03:59,752 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-04-03 01:03:59,752 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-04-03 01:03:59,752 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1495682296] [2023-04-03 01:03:59,752 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1495682296] provided 1 perfect and 0 imperfect interpolant sequences [2023-04-03 01:03:59,753 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-04-03 01:03:59,753 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-04-03 01:03:59,753 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [845739218] [2023-04-03 01:03:59,753 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-04-03 01:03:59,754 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-04-03 01:03:59,754 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-04-03 01:03:59,755 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-04-03 01:03:59,755 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-04-03 01:03:59,755 INFO L87 Difference]: Start difference. First operand 95 states and 110 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 2 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2023-04-03 01:03:59,789 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-04-03 01:03:59,789 INFO L93 Difference]: Finished difference Result 140 states and 160 transitions. [2023-04-03 01:03:59,790 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-04-03 01:03:59,790 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 2 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 43 [2023-04-03 01:03:59,790 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-04-03 01:03:59,792 INFO L225 Difference]: With dead ends: 140 [2023-04-03 01:03:59,792 INFO L226 Difference]: Without dead ends: 87 [2023-04-03 01:03:59,792 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-04-03 01:03:59,793 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 11 mSDsluCounter, 71 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 158 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-04-03 01:03:59,794 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 158 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-04-03 01:03:59,795 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2023-04-03 01:03:59,803 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 87. [2023-04-03 01:03:59,803 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 44 states have (on average 1.25) internal successors, (55), 53 states have internal predecessors, (55), 24 states have call successors, (24), 22 states have call predecessors, (24), 18 states have return successors, (20), 18 states have call predecessors, (20), 20 states have call successors, (20) [2023-04-03 01:03:59,804 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 99 transitions. [2023-04-03 01:03:59,805 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 99 transitions. Word has length 43 [2023-04-03 01:03:59,805 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-04-03 01:03:59,805 INFO L495 AbstractCegarLoop]: Abstraction has 87 states and 99 transitions. [2023-04-03 01:03:59,805 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 2 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2023-04-03 01:03:59,805 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 99 transitions. [2023-04-03 01:03:59,807 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2023-04-03 01:03:59,807 INFO L187 NwaCegarLoop]: Found error trace [2023-04-03 01:03:59,807 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-04-03 01:03:59,807 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-04-03 01:03:59,808 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting __automaton_failErr0ASSERT_VIOLATIONERROR_FUNCTION === [__automaton_failErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-04-03 01:03:59,808 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-04-03 01:03:59,808 INFO L85 PathProgramCache]: Analyzing trace with hash 1518613189, now seen corresponding path program 1 times [2023-04-03 01:03:59,808 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-04-03 01:03:59,809 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [995608375] [2023-04-03 01:03:59,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-04-03 01:03:59,809 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-04-03 01:03:59,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-04-03 01:04:00,027 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-04-03 01:04:00,027 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-04-03 01:04:00,028 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [995608375] [2023-04-03 01:04:00,028 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [995608375] provided 1 perfect and 0 imperfect interpolant sequences [2023-04-03 01:04:00,028 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-04-03 01:04:00,028 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-04-03 01:04:00,028 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [224362494] [2023-04-03 01:04:00,029 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-04-03 01:04:00,029 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-04-03 01:04:00,029 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-04-03 01:04:00,030 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-04-03 01:04:00,030 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2023-04-03 01:04:00,030 INFO L87 Difference]: Start difference. First operand 87 states and 99 transitions. Second operand has 7 states, 6 states have (on average 4.333333333333333) internal successors, (26), 6 states have internal predecessors, (26), 4 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (7), 4 states have call predecessors, (7), 4 states have call successors, (7) [2023-04-03 01:04:00,382 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-04-03 01:04:00,383 INFO L93 Difference]: Finished difference Result 261 states and 310 transitions. [2023-04-03 01:04:00,383 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-04-03 01:04:00,384 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 4.333333333333333) internal successors, (26), 6 states have internal predecessors, (26), 4 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (7), 4 states have call predecessors, (7), 4 states have call successors, (7) Word has length 46 [2023-04-03 01:04:00,384 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-04-03 01:04:00,387 INFO L225 Difference]: With dead ends: 261 [2023-04-03 01:04:00,387 INFO L226 Difference]: Without dead ends: 196 [2023-04-03 01:04:00,388 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2023-04-03 01:04:00,389 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 151 mSDsluCounter, 342 mSDsCounter, 0 mSdLazyCounter, 214 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 152 SdHoareTripleChecker+Valid, 444 SdHoareTripleChecker+Invalid, 218 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 214 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-04-03 01:04:00,389 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [152 Valid, 444 Invalid, 218 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 214 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-04-03 01:04:00,390 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 196 states. [2023-04-03 01:04:00,437 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 196 to 188. [2023-04-03 01:04:00,438 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 188 states, 101 states have (on average 1.2871287128712872) internal successors, (130), 119 states have internal predecessors, (130), 48 states have call successors, (48), 44 states have call predecessors, (48), 38 states have return successors, (45), 36 states have call predecessors, (45), 44 states have call successors, (45) [2023-04-03 01:04:00,440 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 188 states and 223 transitions. [2023-04-03 01:04:00,440 INFO L78 Accepts]: Start accepts. Automaton has 188 states and 223 transitions. Word has length 46 [2023-04-03 01:04:00,441 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-04-03 01:04:00,441 INFO L495 AbstractCegarLoop]: Abstraction has 188 states and 223 transitions. [2023-04-03 01:04:00,441 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 4.333333333333333) internal successors, (26), 6 states have internal predecessors, (26), 4 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (7), 4 states have call predecessors, (7), 4 states have call successors, (7) [2023-04-03 01:04:00,441 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 223 transitions. [2023-04-03 01:04:00,443 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2023-04-03 01:04:00,443 INFO L187 NwaCegarLoop]: Found error trace [2023-04-03 01:04:00,443 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-04-03 01:04:00,443 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-04-03 01:04:00,443 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting __automaton_failErr0ASSERT_VIOLATIONERROR_FUNCTION === [__automaton_failErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-04-03 01:04:00,444 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-04-03 01:04:00,444 INFO L85 PathProgramCache]: Analyzing trace with hash 923526847, now seen corresponding path program 1 times [2023-04-03 01:04:00,444 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-04-03 01:04:00,444 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2114055883] [2023-04-03 01:04:00,447 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-04-03 01:04:00,447 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-04-03 01:04:00,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-04-03 01:04:00,742 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-04-03 01:04:00,742 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-04-03 01:04:00,743 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2114055883] [2023-04-03 01:04:00,743 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2114055883] provided 1 perfect and 0 imperfect interpolant sequences [2023-04-03 01:04:00,743 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-04-03 01:04:00,743 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2023-04-03 01:04:00,743 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1795539787] [2023-04-03 01:04:00,743 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-04-03 01:04:00,744 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2023-04-03 01:04:00,744 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-04-03 01:04:00,744 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2023-04-03 01:04:00,745 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2023-04-03 01:04:00,745 INFO L87 Difference]: Start difference. First operand 188 states and 223 transitions. Second operand has 10 states, 8 states have (on average 3.625) internal successors, (29), 8 states have internal predecessors, (29), 4 states have call successors, (14), 4 states have call predecessors, (14), 4 states have return successors, (8), 5 states have call predecessors, (8), 4 states have call successors, (8) [2023-04-03 01:04:01,062 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-04-03 01:04:01,062 INFO L93 Difference]: Finished difference Result 647 states and 814 transitions. [2023-04-03 01:04:01,063 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2023-04-03 01:04:01,063 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 8 states have (on average 3.625) internal successors, (29), 8 states have internal predecessors, (29), 4 states have call successors, (14), 4 states have call predecessors, (14), 4 states have return successors, (8), 5 states have call predecessors, (8), 4 states have call successors, (8) Word has length 51 [2023-04-03 01:04:01,063 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-04-03 01:04:01,073 INFO L225 Difference]: With dead ends: 647 [2023-04-03 01:04:01,073 INFO L226 Difference]: Without dead ends: 481 [2023-04-03 01:04:01,077 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=63, Invalid=279, Unknown=0, NotChecked=0, Total=342 [2023-04-03 01:04:01,085 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 129 mSDsluCounter, 487 mSDsCounter, 0 mSdLazyCounter, 281 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 570 SdHoareTripleChecker+Invalid, 286 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 281 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-04-03 01:04:01,085 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [134 Valid, 570 Invalid, 286 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 281 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-04-03 01:04:01,086 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 481 states. [2023-04-03 01:04:01,129 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 481 to 457. [2023-04-03 01:04:01,156 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 457 states, 256 states have (on average 1.29296875) internal successors, (331), 299 states have internal predecessors, (331), 111 states have call successors, (111), 99 states have call predecessors, (111), 89 states have return successors, (118), 83 states have call predecessors, (118), 107 states have call successors, (118) [2023-04-03 01:04:01,161 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 457 states to 457 states and 560 transitions. [2023-04-03 01:04:01,162 INFO L78 Accepts]: Start accepts. Automaton has 457 states and 560 transitions. Word has length 51 [2023-04-03 01:04:01,162 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-04-03 01:04:01,162 INFO L495 AbstractCegarLoop]: Abstraction has 457 states and 560 transitions. [2023-04-03 01:04:01,162 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 8 states have (on average 3.625) internal successors, (29), 8 states have internal predecessors, (29), 4 states have call successors, (14), 4 states have call predecessors, (14), 4 states have return successors, (8), 5 states have call predecessors, (8), 4 states have call successors, (8) [2023-04-03 01:04:01,163 INFO L276 IsEmpty]: Start isEmpty. Operand 457 states and 560 transitions. [2023-04-03 01:04:01,165 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2023-04-03 01:04:01,166 INFO L187 NwaCegarLoop]: Found error trace [2023-04-03 01:04:01,166 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-04-03 01:04:01,166 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-04-03 01:04:01,166 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting __automaton_failErr0ASSERT_VIOLATIONERROR_FUNCTION === [__automaton_failErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-04-03 01:04:01,167 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-04-03 01:04:01,167 INFO L85 PathProgramCache]: Analyzing trace with hash 306034753, now seen corresponding path program 1 times [2023-04-03 01:04:01,167 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-04-03 01:04:01,167 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [115535344] [2023-04-03 01:04:01,167 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-04-03 01:04:01,167 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-04-03 01:04:01,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-04-03 01:04:01,313 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-04-03 01:04:01,313 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-04-03 01:04:01,313 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [115535344] [2023-04-03 01:04:01,313 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [115535344] provided 1 perfect and 0 imperfect interpolant sequences [2023-04-03 01:04:01,314 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-04-03 01:04:01,314 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-04-03 01:04:01,315 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1217549153] [2023-04-03 01:04:01,315 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-04-03 01:04:01,315 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-04-03 01:04:01,315 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-04-03 01:04:01,316 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-04-03 01:04:01,316 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-04-03 01:04:01,316 INFO L87 Difference]: Start difference. First operand 457 states and 560 transitions. Second operand has 4 states, 4 states have (on average 7.75) internal successors, (31), 4 states have internal predecessors, (31), 3 states have call successors, (16), 4 states have call predecessors, (16), 3 states have return successors, (10), 2 states have call predecessors, (10), 3 states have call successors, (10) [2023-04-03 01:04:01,423 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-04-03 01:04:01,423 INFO L93 Difference]: Finished difference Result 790 states and 1003 transitions. [2023-04-03 01:04:01,424 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-04-03 01:04:01,424 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.75) internal successors, (31), 4 states have internal predecessors, (31), 3 states have call successors, (16), 4 states have call predecessors, (16), 3 states have return successors, (10), 2 states have call predecessors, (10), 3 states have call successors, (10) Word has length 57 [2023-04-03 01:04:01,425 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-04-03 01:04:01,427 INFO L225 Difference]: With dead ends: 790 [2023-04-03 01:04:01,427 INFO L226 Difference]: Without dead ends: 355 [2023-04-03 01:04:01,429 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-04-03 01:04:01,434 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 72 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 37 SdHoareTripleChecker+Invalid, 94 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-04-03 01:04:01,434 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 37 Invalid, 94 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-04-03 01:04:01,436 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 355 states. [2023-04-03 01:04:01,473 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 355 to 343. [2023-04-03 01:04:01,476 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 208 states have (on average 1.2163461538461537) internal successors, (253), 227 states have internal predecessors, (253), 69 states have call successors, (69), 69 states have call predecessors, (69), 65 states have return successors, (68), 65 states have call predecessors, (68), 65 states have call successors, (68) [2023-04-03 01:04:01,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 390 transitions. [2023-04-03 01:04:01,479 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 390 transitions. Word has length 57 [2023-04-03 01:04:01,480 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-04-03 01:04:01,480 INFO L495 AbstractCegarLoop]: Abstraction has 343 states and 390 transitions. [2023-04-03 01:04:01,480 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.75) internal successors, (31), 4 states have internal predecessors, (31), 3 states have call successors, (16), 4 states have call predecessors, (16), 3 states have return successors, (10), 2 states have call predecessors, (10), 3 states have call successors, (10) [2023-04-03 01:04:01,480 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 390 transitions. [2023-04-03 01:04:01,488 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2023-04-03 01:04:01,489 INFO L187 NwaCegarLoop]: Found error trace [2023-04-03 01:04:01,489 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-04-03 01:04:01,489 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-04-03 01:04:01,490 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting __automaton_failErr0ASSERT_VIOLATIONERROR_FUNCTION === [__automaton_failErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-04-03 01:04:01,490 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-04-03 01:04:01,490 INFO L85 PathProgramCache]: Analyzing trace with hash -448661890, now seen corresponding path program 1 times [2023-04-03 01:04:01,491 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-04-03 01:04:01,491 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1514723646] [2023-04-03 01:04:01,491 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-04-03 01:04:01,491 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-04-03 01:04:01,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-04-03 01:04:01,691 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 4 proven. 3 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-04-03 01:04:01,692 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-04-03 01:04:01,692 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1514723646] [2023-04-03 01:04:01,693 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1514723646] provided 0 perfect and 1 imperfect interpolant sequences [2023-04-03 01:04:01,693 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [856813459] [2023-04-03 01:04:01,693 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-04-03 01:04:01,693 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-04-03 01:04:01,693 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2023-04-03 01:04:01,697 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-04-03 01:04:01,721 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-04-03 01:04:01,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-04-03 01:04:01,842 INFO L262 TraceCheckSpWp]: Trace formula consists of 357 conjuncts, 51 conjunts are in the unsatisfiable core [2023-04-03 01:04:01,851 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-04-03 01:04:02,246 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 4 proven. 9 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-04-03 01:04:02,247 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-04-03 01:04:02,759 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 5 proven. 14 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-04-03 01:04:02,760 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [856813459] provided 0 perfect and 2 imperfect interpolant sequences [2023-04-03 01:04:02,760 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1483611672] [2023-04-03 01:04:02,777 INFO L159 IcfgInterpreter]: Started Sifa with 59 locations of interest [2023-04-03 01:04:02,778 INFO L166 IcfgInterpreter]: Building call graph [2023-04-03 01:04:02,781 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-04-03 01:04:02,785 INFO L176 IcfgInterpreter]: Starting interpretation [2023-04-03 01:04:02,785 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-04-03 01:04:02,989 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.init with input of size 28 for LOIs [2023-04-03 01:04:03,029 INFO L197 IcfgInterpreter]: Interpreting procedure main with input of size 32 for LOIs [2023-04-03 01:04:03,201 INFO L197 IcfgInterpreter]: Interpreting procedure runTest with input of size 32 for LOIs [2023-04-03 01:04:03,215 INFO L197 IcfgInterpreter]: Interpreting procedure setup with input of size 24 for LOIs [2023-04-03 01:04:03,217 INFO L197 IcfgInterpreter]: Interpreting procedure select_features with input of size 24 for LOIs [2023-04-03 01:04:03,220 INFO L197 IcfgInterpreter]: Interpreting procedure test with input of size 32 for LOIs [2023-04-03 01:04:08,358 INFO L197 IcfgInterpreter]: Interpreting procedure stopSystem with input of size 37 for LOIs [2023-04-03 01:04:08,378 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 46 for LOIs [2023-04-03 01:04:08,392 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 28 for LOIs [2023-04-03 01:04:08,497 INFO L197 IcfgInterpreter]: Interpreting procedure __utac_acc__Specification4_spec__1 with input of size 22 for LOIs [2023-04-03 01:04:08,536 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 24 for LOIs [2023-04-03 01:04:08,540 INFO L197 IcfgInterpreter]: Interpreting procedure getWaterLevel with input of size 22 for LOIs [2023-04-03 01:04:08,541 INFO L197 IcfgInterpreter]: Interpreting procedure valid_product with input of size 24 for LOIs [2023-04-03 01:04:08,544 INFO L197 IcfgInterpreter]: Interpreting procedure select_helpers with input of size 24 for LOIs [2023-04-03 01:04:08,546 INFO L180 IcfgInterpreter]: Interpretation finished [2023-04-03 01:04:10,931 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSifa [1483611672] provided 1 perfect and 0 imperfect interpolant sequences [2023-04-03 01:04:10,931 INFO L185 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2023-04-03 01:04:10,931 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [33] imperfect sequences [7, 14, 12] total 60 [2023-04-03 01:04:10,932 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [494549653] [2023-04-03 01:04:10,932 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-04-03 01:04:10,932 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2023-04-03 01:04:10,933 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-04-03 01:04:10,933 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2023-04-03 01:04:10,935 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=381, Invalid=3159, Unknown=0, NotChecked=0, Total=3540 [2023-04-03 01:04:10,935 INFO L87 Difference]: Start difference. First operand 343 states and 390 transitions. Second operand has 34 states, 23 states have (on average 1.4782608695652173) internal successors, (34), 27 states have internal predecessors, (34), 11 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (11), 10 states have call predecessors, (11), 9 states have call successors, (11) [2023-04-03 01:04:21,507 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-04-03 01:04:21,507 INFO L93 Difference]: Finished difference Result 887 states and 1080 transitions. [2023-04-03 01:04:21,508 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 61 states. [2023-04-03 01:04:21,508 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 23 states have (on average 1.4782608695652173) internal successors, (34), 27 states have internal predecessors, (34), 11 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (11), 10 states have call predecessors, (11), 9 states have call successors, (11) Word has length 78 [2023-04-03 01:04:21,508 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-04-03 01:04:21,511 INFO L225 Difference]: With dead ends: 887 [2023-04-03 01:04:21,511 INFO L226 Difference]: Without dead ends: 676 [2023-04-03 01:04:21,515 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 304 GetRequests, 187 SyntacticMatches, 2 SemanticMatches, 115 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3830 ImplicationChecksByTransitivity, 10.9s TimeCoverageRelationStatistics Valid=1841, Invalid=11731, Unknown=0, NotChecked=0, Total=13572 [2023-04-03 01:04:21,515 INFO L413 NwaCegarLoop]: 41 mSDtfsCounter, 610 mSDsluCounter, 266 mSDsCounter, 0 mSdLazyCounter, 3623 mSolverCounterSat, 416 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 614 SdHoareTripleChecker+Valid, 307 SdHoareTripleChecker+Invalid, 4039 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 416 IncrementalHoareTripleChecker+Valid, 3623 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2023-04-03 01:04:21,516 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [614 Valid, 307 Invalid, 4039 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [416 Valid, 3623 Invalid, 0 Unknown, 0 Unchecked, 2.2s Time] [2023-04-03 01:04:21,517 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 676 states. [2023-04-03 01:04:21,594 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 676 to 528. [2023-04-03 01:04:21,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 528 states, 329 states have (on average 1.21580547112462) internal successors, (400), 355 states have internal predecessors, (400), 101 states have call successors, (101), 101 states have call predecessors, (101), 97 states have return successors, (100), 97 states have call predecessors, (100), 97 states have call successors, (100) [2023-04-03 01:04:21,599 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 528 states to 528 states and 601 transitions. [2023-04-03 01:04:21,600 INFO L78 Accepts]: Start accepts. Automaton has 528 states and 601 transitions. Word has length 78 [2023-04-03 01:04:21,601 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-04-03 01:04:21,601 INFO L495 AbstractCegarLoop]: Abstraction has 528 states and 601 transitions. [2023-04-03 01:04:21,601 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 23 states have (on average 1.4782608695652173) internal successors, (34), 27 states have internal predecessors, (34), 11 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (11), 10 states have call predecessors, (11), 9 states have call successors, (11) [2023-04-03 01:04:21,601 INFO L276 IsEmpty]: Start isEmpty. Operand 528 states and 601 transitions. [2023-04-03 01:04:21,606 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2023-04-03 01:04:21,606 INFO L187 NwaCegarLoop]: Found error trace [2023-04-03 01:04:21,606 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-04-03 01:04:21,613 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-04-03 01:04:21,812 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2023-04-03 01:04:21,812 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting __automaton_failErr0ASSERT_VIOLATIONERROR_FUNCTION === [__automaton_failErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-04-03 01:04:21,813 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-04-03 01:04:21,813 INFO L85 PathProgramCache]: Analyzing trace with hash 1230911382, now seen corresponding path program 1 times [2023-04-03 01:04:21,813 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-04-03 01:04:21,813 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1412574224] [2023-04-03 01:04:21,813 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-04-03 01:04:21,814 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-04-03 01:04:21,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-04-03 01:04:22,013 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 4 proven. 3 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-04-03 01:04:22,013 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-04-03 01:04:22,013 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1412574224] [2023-04-03 01:04:22,013 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1412574224] provided 0 perfect and 1 imperfect interpolant sequences [2023-04-03 01:04:22,013 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1943651420] [2023-04-03 01:04:22,013 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-04-03 01:04:22,013 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-04-03 01:04:22,014 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2023-04-03 01:04:22,015 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-04-03 01:04:22,040 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-04-03 01:04:22,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-04-03 01:04:22,129 INFO L262 TraceCheckSpWp]: Trace formula consists of 363 conjuncts, 51 conjunts are in the unsatisfiable core [2023-04-03 01:04:22,134 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-04-03 01:04:22,328 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 4 proven. 9 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-04-03 01:04:22,329 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-04-03 01:04:22,777 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 5 proven. 14 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-04-03 01:04:22,777 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1943651420] provided 0 perfect and 2 imperfect interpolant sequences [2023-04-03 01:04:22,777 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [949955303] [2023-04-03 01:04:22,779 INFO L159 IcfgInterpreter]: Started Sifa with 62 locations of interest [2023-04-03 01:04:22,779 INFO L166 IcfgInterpreter]: Building call graph [2023-04-03 01:04:22,780 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-04-03 01:04:22,780 INFO L176 IcfgInterpreter]: Starting interpretation [2023-04-03 01:04:22,780 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-04-03 01:04:22,877 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.init with input of size 28 for LOIs [2023-04-03 01:04:22,901 INFO L197 IcfgInterpreter]: Interpreting procedure main with input of size 32 for LOIs [2023-04-03 01:04:23,027 INFO L197 IcfgInterpreter]: Interpreting procedure runTest with input of size 32 for LOIs [2023-04-03 01:04:23,037 INFO L197 IcfgInterpreter]: Interpreting procedure setup with input of size 24 for LOIs [2023-04-03 01:04:23,039 INFO L197 IcfgInterpreter]: Interpreting procedure select_features with input of size 24 for LOIs [2023-04-03 01:04:23,040 INFO L197 IcfgInterpreter]: Interpreting procedure test with input of size 32 for LOIs [2023-04-03 01:04:28,799 INFO L197 IcfgInterpreter]: Interpreting procedure stopSystem with input of size 49 for LOIs [2023-04-03 01:04:28,813 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 54 for LOIs [2023-04-03 01:04:28,818 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 32 for LOIs [2023-04-03 01:04:28,894 INFO L197 IcfgInterpreter]: Interpreting procedure __utac_acc__Specification4_spec__1 with input of size 24 for LOIs [2023-04-03 01:04:28,928 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 26 for LOIs [2023-04-03 01:04:28,930 INFO L197 IcfgInterpreter]: Interpreting procedure getWaterLevel with input of size 24 for LOIs [2023-04-03 01:04:28,932 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 39 for LOIs [2023-04-03 01:04:28,938 INFO L197 IcfgInterpreter]: Interpreting procedure valid_product with input of size 24 for LOIs [2023-04-03 01:04:28,940 INFO L197 IcfgInterpreter]: Interpreting procedure select_helpers with input of size 24 for LOIs [2023-04-03 01:04:28,942 INFO L180 IcfgInterpreter]: Interpretation finished [2023-04-03 01:04:32,486 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSifa [949955303] provided 1 perfect and 0 imperfect interpolant sequences [2023-04-03 01:04:32,486 INFO L185 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2023-04-03 01:04:32,486 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [37] imperfect sequences [7, 14, 12] total 64 [2023-04-03 01:04:32,487 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1372156701] [2023-04-03 01:04:32,487 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-04-03 01:04:32,487 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2023-04-03 01:04:32,487 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-04-03 01:04:32,488 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2023-04-03 01:04:32,489 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=405, Invalid=3627, Unknown=0, NotChecked=0, Total=4032 [2023-04-03 01:04:32,489 INFO L87 Difference]: Start difference. First operand 528 states and 601 transitions. Second operand has 38 states, 24 states have (on average 1.5) internal successors, (36), 30 states have internal predecessors, (36), 12 states have call successors, (16), 10 states have call predecessors, (16), 10 states have return successors, (12), 11 states have call predecessors, (12), 10 states have call successors, (12) [2023-04-03 01:04:59,117 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-04-03 01:04:59,117 INFO L93 Difference]: Finished difference Result 1582 states and 2200 transitions. [2023-04-03 01:04:59,117 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 138 states. [2023-04-03 01:04:59,118 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 24 states have (on average 1.5) internal successors, (36), 30 states have internal predecessors, (36), 12 states have call successors, (16), 10 states have call predecessors, (16), 10 states have return successors, (12), 11 states have call predecessors, (12), 10 states have call successors, (12) Word has length 81 [2023-04-03 01:04:59,118 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-04-03 01:04:59,121 INFO L225 Difference]: With dead ends: 1582 [2023-04-03 01:04:59,121 INFO L226 Difference]: Without dead ends: 615 [2023-04-03 01:04:59,131 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 390 GetRequests, 193 SyntacticMatches, 1 SemanticMatches, 196 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12932 ImplicationChecksByTransitivity, 25.7s TimeCoverageRelationStatistics Valid=4319, Invalid=34687, Unknown=0, NotChecked=0, Total=39006 [2023-04-03 01:04:59,132 INFO L413 NwaCegarLoop]: 141 mSDtfsCounter, 2007 mSDsluCounter, 795 mSDsCounter, 0 mSdLazyCounter, 6725 mSolverCounterSat, 1518 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2007 SdHoareTripleChecker+Valid, 936 SdHoareTripleChecker+Invalid, 8243 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1518 IncrementalHoareTripleChecker+Valid, 6725 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.3s IncrementalHoareTripleChecker+Time [2023-04-03 01:04:59,132 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2007 Valid, 936 Invalid, 8243 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1518 Valid, 6725 Invalid, 0 Unknown, 0 Unchecked, 4.3s Time] [2023-04-03 01:04:59,137 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 615 states. [2023-04-03 01:04:59,192 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 615 to 135. [2023-04-03 01:04:59,193 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 135 states, 78 states have (on average 1.141025641025641) internal successors, (89), 84 states have internal predecessors, (89), 30 states have call successors, (30), 30 states have call predecessors, (30), 26 states have return successors, (26), 26 states have call predecessors, (26), 26 states have call successors, (26) [2023-04-03 01:04:59,195 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 135 states to 135 states and 145 transitions. [2023-04-03 01:04:59,195 INFO L78 Accepts]: Start accepts. Automaton has 135 states and 145 transitions. Word has length 81 [2023-04-03 01:04:59,197 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-04-03 01:04:59,197 INFO L495 AbstractCegarLoop]: Abstraction has 135 states and 145 transitions. [2023-04-03 01:04:59,197 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 24 states have (on average 1.5) internal successors, (36), 30 states have internal predecessors, (36), 12 states have call successors, (16), 10 states have call predecessors, (16), 10 states have return successors, (12), 11 states have call predecessors, (12), 10 states have call successors, (12) [2023-04-03 01:04:59,197 INFO L276 IsEmpty]: Start isEmpty. Operand 135 states and 145 transitions. [2023-04-03 01:04:59,198 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2023-04-03 01:04:59,198 INFO L187 NwaCegarLoop]: Found error trace [2023-04-03 01:04:59,198 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-04-03 01:04:59,205 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2023-04-03 01:04:59,404 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2023-04-03 01:04:59,405 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting __automaton_failErr0ASSERT_VIOLATIONERROR_FUNCTION === [__automaton_failErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-04-03 01:04:59,405 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-04-03 01:04:59,405 INFO L85 PathProgramCache]: Analyzing trace with hash -252895606, now seen corresponding path program 1 times [2023-04-03 01:04:59,405 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-04-03 01:04:59,405 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1026816955] [2023-04-03 01:04:59,405 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-04-03 01:04:59,406 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-04-03 01:04:59,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-04-03 01:04:59,607 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 4 proven. 4 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2023-04-03 01:04:59,607 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-04-03 01:04:59,607 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1026816955] [2023-04-03 01:04:59,607 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1026816955] provided 0 perfect and 1 imperfect interpolant sequences [2023-04-03 01:04:59,607 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [35483730] [2023-04-03 01:04:59,608 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-04-03 01:04:59,608 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-04-03 01:04:59,608 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2023-04-03 01:04:59,609 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-04-03 01:04:59,612 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-04-03 01:04:59,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-04-03 01:04:59,724 INFO L262 TraceCheckSpWp]: Trace formula consists of 367 conjuncts, 51 conjunts are in the unsatisfiable core [2023-04-03 01:04:59,727 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-04-03 01:04:59,929 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 11 proven. 10 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-04-03 01:04:59,930 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-04-03 01:05:00,304 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 5 proven. 15 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-04-03 01:05:00,304 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [35483730] provided 0 perfect and 2 imperfect interpolant sequences [2023-04-03 01:05:00,304 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1761976573] [2023-04-03 01:05:00,306 INFO L159 IcfgInterpreter]: Started Sifa with 62 locations of interest [2023-04-03 01:05:00,307 INFO L166 IcfgInterpreter]: Building call graph [2023-04-03 01:05:00,307 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-04-03 01:05:00,307 INFO L176 IcfgInterpreter]: Starting interpretation [2023-04-03 01:05:00,307 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-04-03 01:05:00,383 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.init with input of size 28 for LOIs [2023-04-03 01:05:00,398 INFO L197 IcfgInterpreter]: Interpreting procedure main with input of size 32 for LOIs [2023-04-03 01:05:00,485 INFO L197 IcfgInterpreter]: Interpreting procedure runTest with input of size 32 for LOIs [2023-04-03 01:05:00,493 INFO L197 IcfgInterpreter]: Interpreting procedure setup with input of size 24 for LOIs [2023-04-03 01:05:00,494 INFO L197 IcfgInterpreter]: Interpreting procedure select_features with input of size 24 for LOIs [2023-04-03 01:05:00,496 INFO L197 IcfgInterpreter]: Interpreting procedure test with input of size 32 for LOIs [2023-04-03 01:05:01,884 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 40 for LOIs [2023-04-03 01:05:01,888 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 37 for LOIs [2023-04-03 01:05:01,987 INFO L197 IcfgInterpreter]: Interpreting procedure __utac_acc__Specification4_spec__1 with input of size 22 for LOIs [2023-04-03 01:05:02,014 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 24 for LOIs [2023-04-03 01:05:02,017 INFO L197 IcfgInterpreter]: Interpreting procedure getWaterLevel with input of size 22 for LOIs [2023-04-03 01:05:02,018 INFO L197 IcfgInterpreter]: Interpreting procedure valid_product with input of size 24 for LOIs [2023-04-03 01:05:02,019 INFO L197 IcfgInterpreter]: Interpreting procedure select_helpers with input of size 24 for LOIs [2023-04-03 01:05:02,020 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment with input of size 34 for LOIs [2023-04-03 01:05:02,035 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 32 for LOIs [2023-04-03 01:05:02,036 INFO L180 IcfgInterpreter]: Interpretation finished [2023-04-03 01:05:03,617 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSifa [1761976573] provided 1 perfect and 0 imperfect interpolant sequences [2023-04-03 01:05:03,617 INFO L185 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2023-04-03 01:05:03,617 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [30] imperfect sequences [7, 14, 12] total 57 [2023-04-03 01:05:03,617 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [528226182] [2023-04-03 01:05:03,617 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-04-03 01:05:03,618 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2023-04-03 01:05:03,618 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-04-03 01:05:03,618 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2023-04-03 01:05:03,619 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=385, Invalid=2807, Unknown=0, NotChecked=0, Total=3192 [2023-04-03 01:05:03,619 INFO L87 Difference]: Start difference. First operand 135 states and 145 transitions. Second operand has 31 states, 22 states have (on average 1.5454545454545454) internal successors, (34), 24 states have internal predecessors, (34), 11 states have call successors, (16), 9 states have call predecessors, (16), 10 states have return successors, (12), 11 states have call predecessors, (12), 9 states have call successors, (12) [2023-04-03 01:05:10,419 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-04-03 01:05:10,419 INFO L93 Difference]: Finished difference Result 330 states and 382 transitions. [2023-04-03 01:05:10,420 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2023-04-03 01:05:10,420 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 22 states have (on average 1.5454545454545454) internal successors, (34), 24 states have internal predecessors, (34), 11 states have call successors, (16), 9 states have call predecessors, (16), 10 states have return successors, (12), 11 states have call predecessors, (12), 9 states have call successors, (12) Word has length 89 [2023-04-03 01:05:10,420 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-04-03 01:05:10,422 INFO L225 Difference]: With dead ends: 330 [2023-04-03 01:05:10,422 INFO L226 Difference]: Without dead ends: 286 [2023-04-03 01:05:10,424 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 312 GetRequests, 227 SyntacticMatches, 0 SemanticMatches, 85 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1859 ImplicationChecksByTransitivity, 7.7s TimeCoverageRelationStatistics Valid=1182, Invalid=6300, Unknown=0, NotChecked=0, Total=7482 [2023-04-03 01:05:10,424 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 317 mSDsluCounter, 94 mSDsCounter, 0 mSdLazyCounter, 1285 mSolverCounterSat, 201 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 321 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 1486 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 201 IncrementalHoareTripleChecker+Valid, 1285 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2023-04-03 01:05:10,424 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [321 Valid, 108 Invalid, 1486 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [201 Valid, 1285 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2023-04-03 01:05:10,425 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 286 states. [2023-04-03 01:05:10,495 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 286 to 231. [2023-04-03 01:05:10,496 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 140 states have (on average 1.1428571428571428) internal successors, (160), 148 states have internal predecessors, (160), 47 states have call successors, (47), 47 states have call predecessors, (47), 43 states have return successors, (43), 43 states have call predecessors, (43), 43 states have call successors, (43) [2023-04-03 01:05:10,496 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 250 transitions. [2023-04-03 01:05:10,497 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 250 transitions. Word has length 89 [2023-04-03 01:05:10,497 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-04-03 01:05:10,497 INFO L495 AbstractCegarLoop]: Abstraction has 231 states and 250 transitions. [2023-04-03 01:05:10,497 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 22 states have (on average 1.5454545454545454) internal successors, (34), 24 states have internal predecessors, (34), 11 states have call successors, (16), 9 states have call predecessors, (16), 10 states have return successors, (12), 11 states have call predecessors, (12), 9 states have call successors, (12) [2023-04-03 01:05:10,497 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 250 transitions. [2023-04-03 01:05:10,498 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 93 [2023-04-03 01:05:10,498 INFO L187 NwaCegarLoop]: Found error trace [2023-04-03 01:05:10,498 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-04-03 01:05:10,504 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-04-03 01:05:10,701 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-04-03 01:05:10,701 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting __automaton_failErr0ASSERT_VIOLATIONERROR_FUNCTION === [__automaton_failErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-04-03 01:05:10,701 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-04-03 01:05:10,701 INFO L85 PathProgramCache]: Analyzing trace with hash -151667086, now seen corresponding path program 1 times [2023-04-03 01:05:10,701 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-04-03 01:05:10,702 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [430569053] [2023-04-03 01:05:10,702 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-04-03 01:05:10,702 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-04-03 01:05:10,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-04-03 01:05:10,896 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 4 proven. 4 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2023-04-03 01:05:10,897 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-04-03 01:05:10,897 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [430569053] [2023-04-03 01:05:10,897 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [430569053] provided 0 perfect and 1 imperfect interpolant sequences [2023-04-03 01:05:10,897 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2072776397] [2023-04-03 01:05:10,897 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-04-03 01:05:10,897 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-04-03 01:05:10,897 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2023-04-03 01:05:10,898 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-04-03 01:05:10,924 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-04-03 01:05:11,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-04-03 01:05:11,012 INFO L262 TraceCheckSpWp]: Trace formula consists of 373 conjuncts, 51 conjunts are in the unsatisfiable core [2023-04-03 01:05:11,016 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-04-03 01:05:11,250 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 11 proven. 10 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-04-03 01:05:11,250 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-04-03 01:05:11,630 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 5 proven. 15 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-04-03 01:05:11,630 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2072776397] provided 0 perfect and 2 imperfect interpolant sequences [2023-04-03 01:05:11,630 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [614829399] [2023-04-03 01:05:11,633 INFO L159 IcfgInterpreter]: Started Sifa with 65 locations of interest [2023-04-03 01:05:11,633 INFO L166 IcfgInterpreter]: Building call graph [2023-04-03 01:05:11,634 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-04-03 01:05:11,634 INFO L176 IcfgInterpreter]: Starting interpretation [2023-04-03 01:05:11,634 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-04-03 01:05:11,725 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.init with input of size 28 for LOIs [2023-04-03 01:05:11,749 INFO L197 IcfgInterpreter]: Interpreting procedure main with input of size 32 for LOIs [2023-04-03 01:05:11,831 INFO L197 IcfgInterpreter]: Interpreting procedure runTest with input of size 32 for LOIs [2023-04-03 01:05:11,840 INFO L197 IcfgInterpreter]: Interpreting procedure setup with input of size 24 for LOIs [2023-04-03 01:05:11,841 INFO L197 IcfgInterpreter]: Interpreting procedure select_features with input of size 24 for LOIs [2023-04-03 01:05:11,842 INFO L197 IcfgInterpreter]: Interpreting procedure test with input of size 32 for LOIs [2023-04-03 01:05:13,954 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 46 for LOIs [2023-04-03 01:05:13,960 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 39 for LOIs [2023-04-03 01:05:14,083 INFO L197 IcfgInterpreter]: Interpreting procedure __utac_acc__Specification4_spec__1 with input of size 24 for LOIs [2023-04-03 01:05:14,112 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 26 for LOIs [2023-04-03 01:05:14,114 INFO L197 IcfgInterpreter]: Interpreting procedure getWaterLevel with input of size 24 for LOIs [2023-04-03 01:05:14,116 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 36 for LOIs [2023-04-03 01:05:14,121 INFO L197 IcfgInterpreter]: Interpreting procedure valid_product with input of size 24 for LOIs [2023-04-03 01:05:14,124 INFO L197 IcfgInterpreter]: Interpreting procedure select_helpers with input of size 24 for LOIs [2023-04-03 01:05:14,125 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment with input of size 36 for LOIs [2023-04-03 01:05:14,143 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 34 for LOIs [2023-04-03 01:05:14,145 INFO L180 IcfgInterpreter]: Interpretation finished [2023-04-03 01:05:16,567 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSifa [614829399] provided 1 perfect and 0 imperfect interpolant sequences [2023-04-03 01:05:16,567 INFO L185 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2023-04-03 01:05:16,567 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [32] imperfect sequences [7, 14, 12] total 59 [2023-04-03 01:05:16,568 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1308833319] [2023-04-03 01:05:16,568 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-04-03 01:05:16,568 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2023-04-03 01:05:16,568 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-04-03 01:05:16,569 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2023-04-03 01:05:16,570 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=394, Invalid=3028, Unknown=0, NotChecked=0, Total=3422 [2023-04-03 01:05:16,570 INFO L87 Difference]: Start difference. First operand 231 states and 250 transitions. Second operand has 33 states, 22 states have (on average 1.6363636363636365) internal successors, (36), 25 states have internal predecessors, (36), 12 states have call successors, (17), 10 states have call predecessors, (17), 11 states have return successors, (13), 12 states have call predecessors, (13), 10 states have call successors, (13) [2023-04-03 01:05:28,629 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-04-03 01:05:28,630 INFO L93 Difference]: Finished difference Result 646 states and 837 transitions. [2023-04-03 01:05:28,630 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 75 states. [2023-04-03 01:05:28,630 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 22 states have (on average 1.6363636363636365) internal successors, (36), 25 states have internal predecessors, (36), 12 states have call successors, (17), 10 states have call predecessors, (17), 11 states have return successors, (13), 12 states have call predecessors, (13), 10 states have call successors, (13) Word has length 92 [2023-04-03 01:05:28,630 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-04-03 01:05:28,630 INFO L225 Difference]: With dead ends: 646 [2023-04-03 01:05:28,631 INFO L226 Difference]: Without dead ends: 0 [2023-04-03 01:05:28,633 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 362 GetRequests, 220 SyntacticMatches, 14 SemanticMatches, 128 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5289 ImplicationChecksByTransitivity, 13.0s TimeCoverageRelationStatistics Valid=2390, Invalid=14380, Unknown=0, NotChecked=0, Total=16770 [2023-04-03 01:05:28,633 INFO L413 NwaCegarLoop]: 45 mSDtfsCounter, 1082 mSDsluCounter, 303 mSDsCounter, 0 mSdLazyCounter, 2490 mSolverCounterSat, 771 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1082 SdHoareTripleChecker+Valid, 348 SdHoareTripleChecker+Invalid, 3261 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 771 IncrementalHoareTripleChecker+Valid, 2490 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2023-04-03 01:05:28,633 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1082 Valid, 348 Invalid, 3261 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [771 Valid, 2490 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2023-04-03 01:05:28,634 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-04-03 01:05:28,635 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-04-03 01:05:28,635 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-04-03 01:05:28,635 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-04-03 01:05:28,635 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 92 [2023-04-03 01:05:28,635 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-04-03 01:05:28,635 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-04-03 01:05:28,635 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 22 states have (on average 1.6363636363636365) internal successors, (36), 25 states have internal predecessors, (36), 12 states have call successors, (17), 10 states have call predecessors, (17), 11 states have return successors, (13), 12 states have call predecessors, (13), 10 states have call successors, (13) [2023-04-03 01:05:28,635 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-04-03 01:05:28,636 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-04-03 01:05:28,638 INFO L805 garLoopResultBuilder]: Registering result SAFE for location __automaton_failErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-04-03 01:05:28,644 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2023-04-03 01:05:28,841 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-04-03 01:05:28,842 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-04-03 01:05:37,628 WARN L223 SmtUtils]: Spent 8.58s on a formula simplification. DAG size of input: 398 DAG size of output: 238 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2023-04-03 01:05:45,836 WARN L223 SmtUtils]: Spent 6.43s on a formula simplification. DAG size of input: 394 DAG size of output: 237 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2023-04-03 01:06:08,266 INFO L899 garLoopResultBuilder]: For program point reach_errorEXIT(line 11) no Hoare annotation was computed. [2023-04-03 01:06:08,266 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line 11) no Hoare annotation was computed. [2023-04-03 01:06:08,266 INFO L899 garLoopResultBuilder]: For program point L673(lines 650 674) no Hoare annotation was computed. [2023-04-03 01:06:08,266 INFO L899 garLoopResultBuilder]: For program point L657(lines 657 661) no Hoare annotation was computed. [2023-04-03 01:06:08,267 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(lines 626 681) no Hoare annotation was computed. [2023-04-03 01:06:08,267 INFO L899 garLoopResultBuilder]: For program point L651-2(lines 651 672) no Hoare annotation was computed. [2023-04-03 01:06:08,267 INFO L899 garLoopResultBuilder]: For program point __utac__exception__cf_handler_freeEXIT(lines 626 681) no Hoare annotation was computed. [2023-04-03 01:06:08,267 INFO L899 garLoopResultBuilder]: For program point L734(lines 707 735) no Hoare annotation was computed. [2023-04-03 01:06:08,267 INFO L899 garLoopResultBuilder]: For program point L727(line 727) no Hoare annotation was computed. [2023-04-03 01:06:08,267 INFO L899 garLoopResultBuilder]: For program point L727-1(line 727) no Hoare annotation was computed. [2023-04-03 01:06:08,267 INFO L899 garLoopResultBuilder]: For program point __utac__exception__cf_handler_resetFINAL(lines 682 741) no Hoare annotation was computed. [2023-04-03 01:06:08,267 INFO L899 garLoopResultBuilder]: For program point L714(lines 714 718) no Hoare annotation was computed. [2023-04-03 01:06:08,267 INFO L899 garLoopResultBuilder]: For program point __utac__exception__cf_handler_resetEXIT(lines 682 741) no Hoare annotation was computed. [2023-04-03 01:06:08,267 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(lines 682 741) no Hoare annotation was computed. [2023-04-03 01:06:08,267 INFO L899 garLoopResultBuilder]: For program point L708-2(lines 708 733) no Hoare annotation was computed. [2023-04-03 01:06:08,267 INFO L899 garLoopResultBuilder]: For program point valid_productEXIT(lines 564 572) no Hoare annotation was computed. [2023-04-03 01:06:08,268 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 564 572) the Hoare annotation is: true [2023-04-03 01:06:08,268 INFO L895 garLoopResultBuilder]: At program point L179(line 179) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse10 (not (= 1 ~systemActive~0))) (.cse1 (not (= |#NULL.offset| 0))) (.cse2 (not (= ~pumpRunning~0 0))) (.cse3 (not (= ~head~0.offset 0))) (.cse4 (not (= |#NULL.base| 0))) (.cse11 (< 2147483647 ~waterLevel~0)) (.cse12 (< ~waterLevel~0 2)) (.cse5 (< |#StackHeapBarrier| 1)) (.cse6 (< ~methaneLevelCritical~0 0)) (.cse7 (not (= ~head~0.base 0))) (.cse8 (not (= 0 ~systemActive~0))) (.cse9 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (or .cse1 .cse2 .cse10 .cse3 .cse4 .cse11 .cse12 .cse5 .cse6 .cse7 .cse9) (or .cse0 .cse1 .cse2 .cse10 .cse3 .cse4 .cse5 .cse6 .cse7 .cse9) (or .cse1 .cse2 .cse3 .cse4 .cse11 .cse12 .cse5 .cse6 .cse7 .cse8 .cse9))) [2023-04-03 01:06:08,268 INFO L899 garLoopResultBuilder]: For program point __utac_acc__Specification4_spec__1EXIT(lines 165 189) no Hoare annotation was computed. [2023-04-03 01:06:08,268 INFO L899 garLoopResultBuilder]: For program point L177(lines 177 183) no Hoare annotation was computed. [2023-04-03 01:06:08,268 INFO L895 garLoopResultBuilder]: At program point L175(line 175) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse10 (not (= 1 ~systemActive~0))) (.cse1 (not (= |#NULL.offset| 0))) (.cse2 (not (= ~pumpRunning~0 0))) (.cse3 (not (= ~head~0.offset 0))) (.cse4 (not (= |#NULL.base| 0))) (.cse11 (< 2147483647 ~waterLevel~0)) (.cse12 (< ~waterLevel~0 2)) (.cse5 (< |#StackHeapBarrier| 1)) (.cse6 (< ~methaneLevelCritical~0 0)) (.cse7 (not (= ~head~0.base 0))) (.cse8 (not (= 0 ~systemActive~0))) (.cse9 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (or .cse1 .cse2 .cse10 .cse3 .cse4 .cse11 .cse12 .cse5 .cse6 .cse7 .cse9) (or .cse0 .cse1 .cse2 .cse10 .cse3 .cse4 .cse5 .cse6 .cse7 .cse9) (or .cse1 .cse2 .cse3 .cse4 .cse11 .cse12 .cse5 .cse6 .cse7 .cse8 .cse9))) [2023-04-03 01:06:08,268 INFO L899 garLoopResultBuilder]: For program point L175-1(line 175) no Hoare annotation was computed. [2023-04-03 01:06:08,268 INFO L899 garLoopResultBuilder]: For program point L173(lines 173 186) no Hoare annotation was computed. [2023-04-03 01:06:08,268 INFO L899 garLoopResultBuilder]: For program point L173-1(lines 165 189) no Hoare annotation was computed. [2023-04-03 01:06:08,268 INFO L902 garLoopResultBuilder]: At program point L171(line 171) the Hoare annotation is: true [2023-04-03 01:06:08,269 INFO L899 garLoopResultBuilder]: For program point L171-1(line 171) no Hoare annotation was computed. [2023-04-03 01:06:08,269 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 165 189) the Hoare annotation is: true [2023-04-03 01:06:08,269 INFO L899 garLoopResultBuilder]: For program point mainEXIT(lines 130 152) no Hoare annotation was computed. [2023-04-03 01:06:08,269 INFO L895 garLoopResultBuilder]: At program point L142(line 142) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= |old(~pumpRunning~0)| 0)) (not (= (select .cse0 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= |old(~methaneLevelCritical~0)| 0)) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= main_~tmp~0 1) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= (select .cse0 1) 0)) (not (= (select |#valid| 1) 1)) (not (= |old(~systemActive~0)| 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (<= |#StackHeapBarrier| 0) (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) [2023-04-03 01:06:08,269 INFO L895 garLoopResultBuilder]: At program point L142-1(line 142) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= |old(~pumpRunning~0)| 0)) (not (= (select .cse0 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= |old(~methaneLevelCritical~0)| 0)) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= main_~tmp~0 1) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= (select .cse0 1) 0)) (not (= (select |#valid| 1) 1)) (not (= |old(~systemActive~0)| 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (<= |#StackHeapBarrier| 0) (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) [2023-04-03 01:06:08,270 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2023-04-03 01:06:08,270 INFO L899 garLoopResultBuilder]: For program point L140-1(lines 140 147) no Hoare annotation was computed. [2023-04-03 01:06:08,270 INFO L899 garLoopResultBuilder]: For program point L138(line 138) no Hoare annotation was computed. [2023-04-03 01:06:08,270 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 130 152) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= |old(~pumpRunning~0)| 0)) (not (= (select .cse0 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= |old(~methaneLevelCritical~0)| 0)) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= (select .cse0 1) 0)) (not (= (select |#valid| 1) 1)) (not (= |old(~systemActive~0)| 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (<= |#StackHeapBarrier| 0) (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) [2023-04-03 01:06:08,270 INFO L895 garLoopResultBuilder]: At program point L137(line 137) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= |old(~pumpRunning~0)| 0)) (not (= (select .cse0 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= |old(~methaneLevelCritical~0)| 0)) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= (select .cse0 1) 0)) (not (= (select |#valid| 1) 1)) (not (= |old(~systemActive~0)| 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (<= |#StackHeapBarrier| 0) (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) [2023-04-03 01:06:08,270 INFO L895 garLoopResultBuilder]: At program point L136(line 136) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= |old(~pumpRunning~0)| 0)) (not (= (select .cse0 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= |old(~methaneLevelCritical~0)| 0)) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= (select .cse0 1) 0)) (not (= (select |#valid| 1) 1)) (not (= |old(~systemActive~0)| 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (<= |#StackHeapBarrier| 0) (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) [2023-04-03 01:06:08,271 INFO L895 garLoopResultBuilder]: At program point L136-1(line 136) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= |old(~pumpRunning~0)| 0)) (not (= (select .cse0 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= |old(~methaneLevelCritical~0)| 0)) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= (select .cse0 1) 0)) (not (= (select |#valid| 1) 1)) (not (= |old(~systemActive~0)| 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (<= |#StackHeapBarrier| 0) (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) [2023-04-03 01:06:08,271 INFO L899 garLoopResultBuilder]: For program point L97(line 97) no Hoare annotation was computed. [2023-04-03 01:06:08,271 INFO L899 garLoopResultBuilder]: For program point L96(line 96) no Hoare annotation was computed. [2023-04-03 01:06:08,271 INFO L899 garLoopResultBuilder]: For program point Specification2EXIT(lines 85 108) no Hoare annotation was computed. [2023-04-03 01:06:08,271 INFO L899 garLoopResultBuilder]: For program point L95(line 95) no Hoare annotation was computed. [2023-04-03 01:06:08,271 INFO L899 garLoopResultBuilder]: For program point L94(line 94) no Hoare annotation was computed. [2023-04-03 01:06:08,271 INFO L899 garLoopResultBuilder]: For program point L93(line 93) no Hoare annotation was computed. [2023-04-03 01:06:08,271 INFO L899 garLoopResultBuilder]: For program point L92(line 92) no Hoare annotation was computed. [2023-04-03 01:06:08,271 INFO L899 garLoopResultBuilder]: For program point Specification2FINAL(lines 85 108) no Hoare annotation was computed. [2023-04-03 01:06:08,271 INFO L899 garLoopResultBuilder]: For program point L91(line 91) no Hoare annotation was computed. [2023-04-03 01:06:08,271 INFO L899 garLoopResultBuilder]: For program point L90(line 90) no Hoare annotation was computed. [2023-04-03 01:06:08,271 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(lines 85 108) no Hoare annotation was computed. [2023-04-03 01:06:08,271 INFO L899 garLoopResultBuilder]: For program point L103(line 103) no Hoare annotation was computed. [2023-04-03 01:06:08,271 INFO L899 garLoopResultBuilder]: For program point L102(line 102) no Hoare annotation was computed. [2023-04-03 01:06:08,272 INFO L899 garLoopResultBuilder]: For program point L101(line 101) no Hoare annotation was computed. [2023-04-03 01:06:08,272 INFO L899 garLoopResultBuilder]: For program point L100(line 100) no Hoare annotation was computed. [2023-04-03 01:06:08,272 INFO L899 garLoopResultBuilder]: For program point L99(line 99) no Hoare annotation was computed. [2023-04-03 01:06:08,272 INFO L899 garLoopResultBuilder]: For program point L98(line 98) no Hoare annotation was computed. [2023-04-03 01:06:08,272 INFO L895 garLoopResultBuilder]: At program point L529(line 529) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |#NULL.offset| 0))) (.cse2 (not (= ~head~0.offset 0))) (.cse3 (< 1 |old(~systemActive~0)|)) (.cse4 (not (= |#NULL.base| 0))) (.cse5 (< |#StackHeapBarrier| 1)) (.cse6 (< ~methaneLevelCritical~0 0)) (.cse7 (not (= ~head~0.base 0))) (.cse8 (not (= ~cleanupTimeShifts~0 4)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse4 (< ~waterLevel~0 2) .cse5 .cse6 .cse7 .cse8))) [2023-04-03 01:06:08,272 INFO L899 garLoopResultBuilder]: For program point stopSystemEXIT(lines 523 537) no Hoare annotation was computed. [2023-04-03 01:06:08,272 INFO L899 garLoopResultBuilder]: For program point L527(lines 527 533) no Hoare annotation was computed. [2023-04-03 01:06:08,272 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 523 537) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |#NULL.offset| 0))) (.cse2 (and (= ~pumpRunning~0 0) (= |old(~systemActive~0)| ~systemActive~0))) (.cse3 (not (= ~head~0.offset 0))) (.cse4 (< 1 |old(~systemActive~0)|)) (.cse5 (not (= |#NULL.base| 0))) (.cse6 (< |#StackHeapBarrier| 1)) (.cse7 (< ~methaneLevelCritical~0 0)) (.cse8 (not (= ~head~0.base 0))) (.cse9 (not (= ~cleanupTimeShifts~0 4)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (< ~waterLevel~0 2) .cse6 .cse7 .cse8 .cse9))) [2023-04-03 01:06:08,272 INFO L902 garLoopResultBuilder]: At program point L511(line 511) the Hoare annotation is: true [2023-04-03 01:06:08,272 INFO L899 garLoopResultBuilder]: For program point L511-1(line 511) no Hoare annotation was computed. [2023-04-03 01:06:08,272 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 504 522) the Hoare annotation is: true [2023-04-03 01:06:08,273 INFO L899 garLoopResultBuilder]: For program point isLowWaterLevelEXIT(lines 504 522) no Hoare annotation was computed. [2023-04-03 01:06:08,273 INFO L899 garLoopResultBuilder]: For program point select_featuresEXIT(lines 550 556) no Hoare annotation was computed. [2023-04-03 01:06:08,273 INFO L902 garLoopResultBuilder]: At program point select_featuresFINAL(lines 550 556) the Hoare annotation is: true [2023-04-03 01:06:08,273 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(lines 893 938) no Hoare annotation was computed. [2023-04-03 01:06:08,273 INFO L899 garLoopResultBuilder]: For program point __utac__get_this_argtypeEXIT(lines 893 938) no Hoare annotation was computed. [2023-04-03 01:06:08,273 INFO L895 garLoopResultBuilder]: At program point L408(line 408) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= |#NULL.offset| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~head~0.offset 0))) (.cse5 (not (= |#NULL.base| 0))) (.cse6 (< |#StackHeapBarrier| 1)) (.cse7 (< ~methaneLevelCritical~0 0)) (.cse8 (not (= ~head~0.base 0))) (.cse9 (not (= ~cleanupTimeShifts~0 4)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (< 2147483647 ~waterLevel~0) (< ~waterLevel~0 2) .cse6 .cse7 .cse8 .cse9))) [2023-04-03 01:06:08,273 INFO L899 garLoopResultBuilder]: For program point L408-1(lines 389 413) no Hoare annotation was computed. [2023-04-03 01:06:08,273 INFO L899 garLoopResultBuilder]: For program point processEnvironmentEXIT(lines 389 413) no Hoare annotation was computed. [2023-04-03 01:06:08,273 INFO L895 garLoopResultBuilder]: At program point L403(line 403) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |#NULL.offset| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~head~0.offset 0))) (.cse4 (not (= |#NULL.base| 0))) (.cse5 (< |#StackHeapBarrier| 1)) (.cse6 (< ~methaneLevelCritical~0 0)) (.cse7 (not (= ~head~0.base 0))) (.cse8 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (< 2147483647 ~waterLevel~0) (< ~waterLevel~0 2) .cse5 .cse6 .cse7 .cse8) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8))) [2023-04-03 01:06:08,273 INFO L895 garLoopResultBuilder]: At program point L399(line 399) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |#NULL.offset| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~head~0.offset 0))) (.cse4 (not (= |#NULL.base| 0))) (.cse5 (< |#StackHeapBarrier| 1)) (.cse6 (< ~methaneLevelCritical~0 0)) (.cse7 (not (= ~head~0.base 0))) (.cse8 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (< 2147483647 ~waterLevel~0) (< ~waterLevel~0 2) .cse5 .cse6 .cse7 .cse8) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8))) [2023-04-03 01:06:08,274 INFO L899 garLoopResultBuilder]: For program point L397(lines 397 405) no Hoare annotation was computed. [2023-04-03 01:06:08,274 INFO L895 garLoopResultBuilder]: At program point L395(line 395) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |#NULL.offset| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~head~0.offset 0))) (.cse4 (not (= |#NULL.base| 0))) (.cse5 (< |#StackHeapBarrier| 1)) (.cse6 (< ~methaneLevelCritical~0 0)) (.cse7 (not (= ~head~0.base 0))) (.cse8 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (< 2147483647 ~waterLevel~0) (< ~waterLevel~0 2) .cse5 .cse6 .cse7 .cse8) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8))) [2023-04-03 01:06:08,274 INFO L899 garLoopResultBuilder]: For program point L395-1(line 395) no Hoare annotation was computed. [2023-04-03 01:06:08,274 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 389 413) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= |#NULL.offset| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~head~0.offset 0))) (.cse5 (not (= |#NULL.base| 0))) (.cse6 (< |#StackHeapBarrier| 1)) (.cse7 (< ~methaneLevelCritical~0 0)) (.cse8 (not (= ~head~0.base 0))) (.cse9 (not (= ~cleanupTimeShifts~0 4)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (< 2147483647 ~waterLevel~0) (< ~waterLevel~0 2) .cse6 .cse7 .cse8 .cse9))) [2023-04-03 01:06:08,274 INFO L899 garLoopResultBuilder]: For program point L393(lines 393 410) no Hoare annotation was computed. [2023-04-03 01:06:08,274 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 381 387) no Hoare annotation was computed. [2023-04-03 01:06:08,274 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 381 387) the Hoare annotation is: true [2023-04-03 01:06:08,275 INFO L895 garLoopResultBuilder]: At program point L343(lines 294 344) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= |old(~pumpRunning~0)| 0)) (not (= (select .cse0 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= |old(~methaneLevelCritical~0)| 0)) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= (select .cse0 1) 0)) (not (= (select |#valid| 1) 1)) (not (= |old(~systemActive~0)| 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (<= |#StackHeapBarrier| 0) (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) [2023-04-03 01:06:08,275 INFO L899 garLoopResultBuilder]: For program point testFINAL(lines 285 350) no Hoare annotation was computed. [2023-04-03 01:06:08,275 INFO L895 garLoopResultBuilder]: At program point L333(line 333) the Hoare annotation is: (let ((.cse13 (select |#memory_int| 1)) (.cse16 (= 1 ~systemActive~0)) (.cse14 (= 2 ~waterLevel~0)) (.cse6 (= ~methaneLevelCritical~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= test_~tmp___2~0 0)) (.cse2 (<= 0 (+ test_~tmp___1~0 2147483648))) (.cse3 (= test_~splverifierCounter~0 0)) (.cse15 (= ~methaneLevelCritical~0 0)) (.cse4 (<= test_~tmp~2 2147483647)) (.cse5 (<= 0 (+ test_~tmp___0~1 2147483648))) (.cse7 (<= test_~tmp___1~0 2147483647)) (.cse8 (<= 0 (+ test_~tmp~2 2147483648))) (.cse9 (= 0 ~systemActive~0)) (.cse10 (= ~waterLevel~0 1)) (.cse11 (not (= test_~tmp___1~0 0))) (.cse12 (<= test_~tmp___0~1 2147483647))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (not (= (select |#length| 12) 25)) (not (= |old(~pumpRunning~0)| 0)) (not (= (select .cse13 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= |old(~methaneLevelCritical~0)| 0)) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) (not (= (select |#length| 15) 25)) (and .cse0 .cse1 .cse2 .cse14 .cse3 .cse15 .cse4 .cse5 .cse7 .cse8 .cse9 .cse11 .cse12) (not (= (select |#valid| 6) 1)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= (select .cse13 1) 0)) (not (= (select |#valid| 1) 1)) (not (= |old(~systemActive~0)| 1)) (not (= (select |#valid| 8) 1)) (and .cse0 .cse1 .cse2 .cse14 .cse3 .cse4 .cse5 .cse16 .cse6 .cse7 .cse8 .cse11 .cse12) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (and .cse0 .cse1 .cse2 .cse14 .cse3 .cse15 .cse4 .cse5 .cse16 .cse7 .cse8 .cse11 .cse12) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse16 .cse6 .cse7 .cse8 .cse10 .cse11 .cse12) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (and .cse0 .cse1 .cse2 .cse3 .cse15 .cse4 .cse5 .cse16 .cse7 .cse8 .cse10 .cse11 .cse12) (<= |#StackHeapBarrier| 0) (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)) (and .cse0 .cse1 .cse2 .cse14 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse11 .cse12) (and .cse0 .cse1 .cse2 .cse3 .cse15 .cse4 .cse5 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12))) [2023-04-03 01:06:08,275 INFO L899 garLoopResultBuilder]: For program point L331(lines 331 337) no Hoare annotation was computed. [2023-04-03 01:06:08,276 INFO L895 garLoopResultBuilder]: At program point L331-1(lines 325 338) the Hoare annotation is: (let ((.cse11 (select |#memory_int| 1)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse13 (= 1 ~systemActive~0)) (.cse12 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= test_~splverifierCounter~0 0)) (.cse3 (<= test_~tmp~2 2147483647)) (.cse4 (<= 0 (+ test_~tmp___0~1 2147483648))) (.cse14 (= ~methaneLevelCritical~0 1)) (.cse5 (<= 0 (+ test_~tmp~2 2147483648))) (.cse6 (= 0 ~systemActive~0)) (.cse7 (= ~waterLevel~0 1)) (.cse8 (<= 0 (+ test_~tmp___2~0 2147483648))) (.cse9 (<= test_~tmp___0~1 2147483647)) (.cse10 (<= test_~tmp___2~0 2147483647))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (not (= (select |#length| 12) 25)) (not (= |old(~pumpRunning~0)| 0)) (not (= (select .cse11 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= |old(~methaneLevelCritical~0)| 0)) (and .cse0 .cse12 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse8 .cse9 .cse10) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (and .cse0 .cse12 .cse1 .cse2 .cse3 .cse4 .cse13 .cse5 .cse8 .cse9 .cse10) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (and .cse0 .cse12 .cse1 .cse3 .cse4 .cse13 .cse14 .cse5 .cse8 .cse9 .cse10) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= (select .cse11 1) 0)) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse13 .cse5 .cse7 .cse8 .cse9 .cse10) (not (= (select |#valid| 1) 1)) (not (= |old(~systemActive~0)| 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (and .cse0 .cse1 .cse3 .cse4 .cse13 .cse14 .cse5 .cse7 .cse8 .cse9 .cse10) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (and .cse0 .cse12 .cse1 .cse3 .cse4 .cse14 .cse5 .cse6 .cse8 .cse9 .cse10) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (and .cse0 .cse1 .cse3 .cse4 .cse14 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (<= |#StackHeapBarrier| 0) (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) [2023-04-03 01:06:08,276 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 285 350) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= |old(~pumpRunning~0)| 0)) (not (= (select .cse0 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= |old(~methaneLevelCritical~0)| 0)) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= (select .cse0 1) 0)) (not (= (select |#valid| 1) 1)) (not (= |old(~systemActive~0)| 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (<= |#StackHeapBarrier| 0) (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) [2023-04-03 01:06:08,276 INFO L899 garLoopResultBuilder]: For program point L296(lines 295 342) no Hoare annotation was computed. [2023-04-03 01:06:08,276 INFO L899 garLoopResultBuilder]: For program point L325(lines 325 338) no Hoare annotation was computed. [2023-04-03 01:06:08,277 INFO L895 garLoopResultBuilder]: At program point L317(line 317) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1)) (.cse6 (= ~methaneLevelCritical~0 1)) (.cse2 (= 2 ~waterLevel~0)) (.cse13 (= 1 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (= test_~splverifierCounter~0 0)) (.cse14 (= ~methaneLevelCritical~0 0)) (.cse4 (<= test_~tmp~2 2147483647)) (.cse5 (<= 0 (+ test_~tmp___0~1 2147483648))) (.cse7 (not (= test_~tmp___0~1 0))) (.cse8 (<= 0 (+ test_~tmp~2 2147483648))) (.cse9 (= 0 ~systemActive~0)) (.cse15 (= ~waterLevel~0 1)) (.cse10 (<= 0 (+ test_~tmp___2~0 2147483648))) (.cse11 (<= test_~tmp___0~1 2147483647)) (.cse12 (<= test_~tmp___2~0 2147483647))) (or (not (= (select |#length| 12) 25)) (not (= |old(~pumpRunning~0)| 0)) (not (= (select .cse0 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= |old(~methaneLevelCritical~0)| 0)) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= (select .cse0 1) 0)) (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse13 .cse6 .cse7 .cse8 .cse10 .cse11 .cse12) (not (= (select |#valid| 1) 1)) (not (= |old(~systemActive~0)| 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (and .cse1 .cse2 .cse3 .cse14 .cse4 .cse5 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (and .cse1 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse15 .cse10 .cse11 .cse12) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (and .cse1 .cse3 .cse4 .cse5 .cse13 .cse6 .cse7 .cse8 .cse15 .cse10 .cse11 .cse12) (and .cse1 .cse2 .cse3 .cse14 .cse4 .cse5 .cse13 .cse7 .cse8 .cse10 .cse11 .cse12) (<= |#StackHeapBarrier| 0) (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (and .cse1 .cse3 .cse14 .cse4 .cse5 .cse13 .cse7 .cse8 .cse15 .cse11) (and .cse1 .cse2 .cse3 .cse14 .cse4 .cse5 .cse13 .cse7 .cse8 .cse11 (not (= test_~tmp~2 0))) (not (= ~cleanupTimeShifts~0 4)) (and .cse1 .cse3 .cse14 .cse4 .cse5 .cse7 .cse8 .cse9 .cse15 .cse10 .cse11 .cse12))) [2023-04-03 01:06:08,277 INFO L899 garLoopResultBuilder]: For program point L315(lines 315 321) no Hoare annotation was computed. [2023-04-03 01:06:08,277 INFO L899 garLoopResultBuilder]: For program point L315-1(lines 315 321) no Hoare annotation was computed. [2023-04-03 01:06:08,277 INFO L895 garLoopResultBuilder]: At program point L340(lines 295 342) the Hoare annotation is: (let ((.cse11 (select |#memory_int| 1)) (.cse12 (= 2 ~waterLevel~0)) (.cse3 (<= test_~tmp~2 2147483647)) (.cse4 (<= 0 (+ test_~tmp___0~1 2147483648))) (.cse14 (= ~methaneLevelCritical~0 1)) (.cse5 (<= 0 (+ test_~tmp~2 2147483648))) (.cse6 (= 0 ~systemActive~0)) (.cse8 (<= 0 (+ test_~tmp___2~0 2147483648))) (.cse9 (<= test_~tmp___0~1 2147483647)) (.cse10 (<= test_~tmp___2~0 2147483647)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= test_~splverifierCounter~0 0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse13 (= 1 ~systemActive~0)) (.cse7 (= ~waterLevel~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (not (= (select |#length| 12) 25)) (not (= |old(~pumpRunning~0)| 0)) (not (= (select .cse11 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= |old(~methaneLevelCritical~0)| 0)) (and .cse0 .cse12 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse8 .cse9 .cse10) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (and .cse0 .cse12 .cse1 .cse2 .cse3 .cse4 .cse13 .cse5 .cse8 .cse9 .cse10) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (and .cse0 .cse12 .cse1 .cse3 .cse4 .cse13 .cse14 .cse5 .cse8 .cse9 .cse10) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= (select .cse11 1) 0)) (not (= (select |#valid| 1) 1)) (not (= |old(~systemActive~0)| 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (and .cse0 .cse1 .cse3 .cse4 .cse13 .cse14 .cse5 .cse7 .cse8 .cse9 .cse10) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (and .cse0 .cse12 .cse1 .cse3 .cse4 .cse14 .cse5 .cse6 .cse8 .cse9 .cse10) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (and .cse0 .cse1 .cse3 .cse4 .cse14 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (<= |#StackHeapBarrier| 0) (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (and .cse0 .cse1 .cse2 .cse13 .cse7) (not (= ~cleanupTimeShifts~0 4)))) [2023-04-03 01:06:08,278 INFO L895 garLoopResultBuilder]: At program point L307(line 307) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1)) (.cse10 (= 0 ~systemActive~0)) (.cse14 (= 2 ~waterLevel~0)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= test_~splverifierCounter~0 0)) (.cse4 (<= test_~tmp~2 2147483647)) (.cse9 (<= 0 (+ test_~tmp___0~1 2147483648))) (.cse5 (= 1 ~systemActive~0)) (.cse15 (= ~methaneLevelCritical~0 1)) (.cse6 (<= 0 (+ test_~tmp~2 2147483648))) (.cse7 (= ~waterLevel~0 1)) (.cse11 (<= 0 (+ test_~tmp___2~0 2147483648))) (.cse12 (<= test_~tmp___0~1 2147483647)) (.cse8 (not (= test_~tmp~2 0))) (.cse13 (<= test_~tmp___2~0 2147483647))) (or (not (= (select |#length| 12) 25)) (not (= |old(~pumpRunning~0)| 0)) (not (= (select .cse0 0) 48)) (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= |old(~methaneLevelCritical~0)| 0)) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (and .cse1 .cse2 .cse3 .cse4 .cse9 .cse6 .cse10 .cse7 .cse11 .cse12 .cse8 .cse13) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (and .cse1 .cse14 .cse2 .cse3 .cse4 .cse9 .cse6 .cse10 .cse11 .cse12 .cse8 .cse13) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) (not (= (select |#length| 15) 25)) (and .cse1 .cse2 .cse4 .cse9 .cse15 .cse6 .cse10 .cse7 .cse11 .cse12 .cse8 .cse13) (not (= (select |#valid| 6) 1)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= (select .cse0 1) 0)) (not (= (select |#valid| 1) 1)) (not (= |old(~systemActive~0)| 1)) (not (= (select |#valid| 8) 1)) (and .cse1 .cse14 .cse2 .cse4 .cse9 .cse15 .cse6 .cse10 .cse11 .cse12 .cse8 .cse13) (and .cse1 .cse14 .cse2 .cse4 .cse9 .cse5 .cse15 .cse6 .cse11 .cse12 .cse8 .cse13) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (and .cse1 .cse14 .cse2 .cse3 .cse4 .cse9 .cse5 .cse6 .cse11 .cse12 .cse8 .cse13) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (<= |#StackHeapBarrier| 0) (not (= (select |#valid| 9) 1)) (and .cse1 .cse2 .cse4 .cse9 .cse5 .cse15 .cse6 .cse7 .cse11 .cse12 .cse8 .cse13) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) [2023-04-03 01:06:08,278 INFO L899 garLoopResultBuilder]: For program point L305(lines 305 311) no Hoare annotation was computed. [2023-04-03 01:06:08,278 INFO L899 garLoopResultBuilder]: For program point L305-1(lines 305 311) no Hoare annotation was computed. [2023-04-03 01:06:08,278 INFO L899 garLoopResultBuilder]: For program point testEXIT(lines 285 350) no Hoare annotation was computed. [2023-04-03 01:06:08,278 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(lines 414 421) no Hoare annotation was computed. [2023-04-03 01:06:08,278 INFO L899 garLoopResultBuilder]: For program point activatePump__wrappee__lowWaterSensorEXIT(lines 414 421) no Hoare annotation was computed. [2023-04-03 01:06:08,278 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 274 282) the Hoare annotation is: true [2023-04-03 01:06:08,278 INFO L899 garLoopResultBuilder]: For program point isLowWaterSensorDryEXIT(lines 274 282) no Hoare annotation was computed. [2023-04-03 01:06:08,278 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(lines 242 264) no Hoare annotation was computed. [2023-04-03 01:06:08,278 INFO L899 garLoopResultBuilder]: For program point printEnvironmentEXIT(lines 242 264) no Hoare annotation was computed. [2023-04-03 01:06:08,278 INFO L899 garLoopResultBuilder]: For program point L434-1(lines 423 439) no Hoare annotation was computed. [2023-04-03 01:06:08,278 INFO L899 garLoopResultBuilder]: For program point L430(lines 430 436) no Hoare annotation was computed. [2023-04-03 01:06:08,279 INFO L899 garLoopResultBuilder]: For program point L428(line 428) no Hoare annotation was computed. [2023-04-03 01:06:08,279 INFO L899 garLoopResultBuilder]: For program point activatePumpEXIT(lines 423 439) no Hoare annotation was computed. [2023-04-03 01:06:08,279 INFO L899 garLoopResultBuilder]: For program point L428-1(line 428) no Hoare annotation was computed. [2023-04-03 01:06:08,279 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(lines 423 439) no Hoare annotation was computed. [2023-04-03 01:06:08,279 INFO L899 garLoopResultBuilder]: For program point L434(line 434) no Hoare annotation was computed. [2023-04-03 01:06:08,279 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 265 273) the Hoare annotation is: true [2023-04-03 01:06:08,279 INFO L899 garLoopResultBuilder]: For program point getWaterLevelEXIT(lines 265 273) no Hoare annotation was computed. [2023-04-03 01:06:08,279 INFO L895 garLoopResultBuilder]: At program point L370(line 370) the Hoare annotation is: (let ((.cse2 (< 2147483647 |old(~waterLevel~0)|)) (.cse4 (< |old(~waterLevel~0)| 2)) (.cse11 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse12 (not (= 1 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |#NULL.offset| 0))) (.cse13 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (= ~head~0.offset 0))) (.cse5 (not (= |#NULL.base| 0))) (.cse6 (< |#StackHeapBarrier| 1)) (.cse7 (< ~methaneLevelCritical~0 0)) (.cse8 (not (= ~head~0.base 0))) (.cse9 (not (= 0 ~systemActive~0))) (.cse10 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (or .cse0 .cse1 .cse11 .cse12 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse10) (or .cse0 .cse1 .cse11 .cse13 .cse12 .cse3 .cse5 .cse6 .cse7 .cse8 .cse10) (or .cse0 .cse1 .cse13 .cse3 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10))) [2023-04-03 01:06:08,279 INFO L895 garLoopResultBuilder]: At program point L368(lines 368 374) the Hoare annotation is: (let ((.cse13 (= ~pumpRunning~0 0))) (let ((.cse10 (not (= 0 ~systemActive~0))) (.cse3 (< 2147483647 |old(~waterLevel~0)|)) (.cse5 (< |old(~waterLevel~0)| 2)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |#NULL.offset| 0))) (.cse2 (and .cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse12 (not (= |old(~waterLevel~0)| 1))) (.cse14 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~head~0.offset 0))) (.cse6 (not (= |#NULL.base| 0))) (.cse7 (< |#StackHeapBarrier| 1)) (.cse8 (< ~methaneLevelCritical~0 0)) (.cse9 (not (= ~head~0.base 0))) (.cse11 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (or .cse0 .cse1 .cse12 .cse4 .cse6 (and .cse13 (= ~waterLevel~0 1)) .cse7 .cse8 .cse9 .cse10 .cse11) (or .cse0 .cse1 .cse2 .cse14 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse11) (or .cse0 .cse1 .cse2 .cse12 .cse14 .cse4 .cse6 .cse7 .cse8 .cse9 .cse11)))) [2023-04-03 01:06:08,279 INFO L895 garLoopResultBuilder]: At program point L363(line 363) the Hoare annotation is: (let ((.cse12 (not (= 1 ~systemActive~0))) (.cse2 (< 2147483647 |old(~waterLevel~0)|)) (.cse4 (< |old(~waterLevel~0)| 2)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |#NULL.offset| 0))) (.cse11 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (= ~head~0.offset 0))) (.cse5 (not (= |#NULL.base| 0))) (.cse6 (< |#StackHeapBarrier| 1)) (.cse7 (< ~methaneLevelCritical~0 0)) (.cse8 (not (= ~head~0.base 0))) (.cse9 (not (= 0 ~systemActive~0))) (.cse10 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (or .cse0 .cse1 .cse11 .cse12 .cse3 .cse5 .cse6 .cse7 .cse8 .cse10) (or .cse0 .cse1 .cse12 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse10) (or .cse0 .cse1 .cse11 .cse3 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10))) [2023-04-03 01:06:08,279 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 357 380) no Hoare annotation was computed. [2023-04-03 01:06:08,280 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 357 380) the Hoare annotation is: (let ((.cse13 (= ~pumpRunning~0 0))) (let ((.cse10 (not (= 0 ~systemActive~0))) (.cse3 (< 2147483647 |old(~waterLevel~0)|)) (.cse5 (< |old(~waterLevel~0)| 2)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |#NULL.offset| 0))) (.cse2 (and .cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse12 (not (= |old(~waterLevel~0)| 1))) (.cse14 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~head~0.offset 0))) (.cse6 (not (= |#NULL.base| 0))) (.cse7 (< |#StackHeapBarrier| 1)) (.cse8 (< ~methaneLevelCritical~0 0)) (.cse9 (not (= ~head~0.base 0))) (.cse11 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (or .cse0 .cse1 .cse12 .cse4 .cse6 (and .cse13 (= ~waterLevel~0 1)) .cse7 .cse8 .cse9 .cse10 .cse11) (or .cse0 .cse1 .cse2 .cse14 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse11) (or .cse0 .cse1 .cse2 .cse12 .cse14 .cse4 .cse6 .cse7 .cse8 .cse9 .cse11)))) [2023-04-03 01:06:08,280 INFO L899 garLoopResultBuilder]: For program point L361(lines 360 379) no Hoare annotation was computed. [2023-04-03 01:06:08,280 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 357 380) no Hoare annotation was computed. [2023-04-03 01:06:08,280 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2023-04-03 01:06:08,280 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2023-04-03 01:06:08,280 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2023-04-03 01:06:08,280 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2023-04-03 01:06:08,280 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2023-04-03 01:06:08,280 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2023-04-03 01:06:08,280 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 52 81) the Hoare annotation is: true [2023-04-03 01:06:08,280 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2023-04-03 01:06:08,280 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2023-04-03 01:06:08,281 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(lines 233 241) no Hoare annotation was computed. [2023-04-03 01:06:08,281 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 233 241) no Hoare annotation was computed. [2023-04-03 01:06:08,281 INFO L899 garLoopResultBuilder]: For program point lowerWaterLevelEXIT(lines 197 208) no Hoare annotation was computed. [2023-04-03 01:06:08,281 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 197 208) the Hoare annotation is: true [2023-04-03 01:06:08,281 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 209 220) no Hoare annotation was computed. [2023-04-03 01:06:08,281 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 209 220) the Hoare annotation is: (let ((.cse11 (< 2147483647 |old(~waterLevel~0)|)) (.cse12 (< |old(~waterLevel~0)| 2)) (.cse8 (not (= 0 ~systemActive~0))) (.cse0 (not (= |#NULL.offset| 0))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse2 (not (= |old(~waterLevel~0)| 1))) (.cse10 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~head~0.offset 0))) (.cse4 (not (= |#NULL.base| 0))) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (< |#StackHeapBarrier| 1)) (.cse6 (< ~methaneLevelCritical~0 0)) (.cse7 (not (= ~head~0.base 0))) (.cse9 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse5 .cse6 .cse7 .cse8 .cse9) (or .cse0 .cse1 .cse10 .cse11 .cse3 .cse12 .cse4 .cse13 .cse5 .cse6 .cse7 .cse9) (or .cse0 .cse1 .cse11 .cse3 .cse12 .cse4 .cse13 .cse5 .cse6 .cse7 .cse8 .cse9) (or .cse0 .cse1 .cse2 .cse10 .cse3 .cse4 .cse13 .cse5 .cse6 .cse7 .cse9))) [2023-04-03 01:06:08,281 INFO L902 garLoopResultBuilder]: At program point ERROR(lines 154 161) the Hoare annotation is: true [2023-04-03 01:06:08,281 INFO L899 garLoopResultBuilder]: For program point __automaton_failErr0ASSERT_VIOLATIONERROR_FUNCTION(line 158) no Hoare annotation was computed. [2023-04-03 01:06:08,281 INFO L899 garLoopResultBuilder]: For program point __automaton_failEXIT(lines 154 161) no Hoare annotation was computed. [2023-04-03 01:06:08,281 INFO L902 garLoopResultBuilder]: At program point select_helpersFINAL(lines 557 563) the Hoare annotation is: true [2023-04-03 01:06:08,282 INFO L899 garLoopResultBuilder]: For program point select_helpersEXIT(lines 557 563) no Hoare annotation was computed. [2023-04-03 01:06:08,282 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 459 467) no Hoare annotation was computed. [2023-04-03 01:06:08,282 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 459 467) the Hoare annotation is: true [2023-04-03 01:06:08,282 INFO L899 garLoopResultBuilder]: For program point L498(line 498) no Hoare annotation was computed. [2023-04-03 01:06:08,282 INFO L899 garLoopResultBuilder]: For program point L498-1(line 498) no Hoare annotation was computed. [2023-04-03 01:06:08,282 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(lines 468 503) no Hoare annotation was computed. [2023-04-03 01:06:08,282 INFO L899 garLoopResultBuilder]: For program point printPumpEXIT(lines 468 503) no Hoare annotation was computed. [2023-04-03 01:06:08,282 INFO L899 garLoopResultBuilder]: For program point __utac__exception__cf_handler_setEXIT(lines 580 625) no Hoare annotation was computed. [2023-04-03 01:06:08,282 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(lines 580 625) no Hoare annotation was computed. [2023-04-03 01:06:08,282 INFO L899 garLoopResultBuilder]: For program point runTestEXIT(lines 117 126) no Hoare annotation was computed. [2023-04-03 01:06:08,283 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 117 126) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= |old(~pumpRunning~0)| 0)) (not (= (select .cse0 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= |old(~methaneLevelCritical~0)| 0)) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= (select .cse0 1) 0)) (not (= (select |#valid| 1) 1)) (not (= |old(~systemActive~0)| 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (<= |#StackHeapBarrier| 0) (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) [2023-04-03 01:06:08,283 INFO L899 garLoopResultBuilder]: For program point runTestFINAL(lines 117 126) no Hoare annotation was computed. [2023-04-03 01:06:08,283 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 448 458) no Hoare annotation was computed. [2023-04-03 01:06:08,283 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(lines 448 458) no Hoare annotation was computed. [2023-04-03 01:06:08,283 INFO L899 garLoopResultBuilder]: For program point L453(line 453) no Hoare annotation was computed. [2023-04-03 01:06:08,283 INFO L899 garLoopResultBuilder]: For program point L453-1(line 453) no Hoare annotation was computed. [2023-04-03 01:06:08,283 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 440 447) no Hoare annotation was computed. [2023-04-03 01:06:08,283 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 440 447) the Hoare annotation is: true [2023-04-03 01:06:08,283 INFO L899 garLoopResultBuilder]: For program point __utac__get_this_argEXIT(lines 847 892) no Hoare annotation was computed. [2023-04-03 01:06:08,283 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(lines 847 892) no Hoare annotation was computed. [2023-04-03 01:06:08,283 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(lines 540 549) no Hoare annotation was computed. [2023-04-03 01:06:08,283 INFO L899 garLoopResultBuilder]: For program point select_oneEXIT(lines 540 549) no Hoare annotation was computed. [2023-04-03 01:06:08,283 INFO L899 garLoopResultBuilder]: For program point L768(lines 768 772) no Hoare annotation was computed. [2023-04-03 01:06:08,283 INFO L899 garLoopResultBuilder]: For program point L793-2(lines 793 813) no Hoare annotation was computed. [2023-04-03 01:06:08,284 INFO L899 garLoopResultBuilder]: For program point L814(lines 792 815) no Hoare annotation was computed. [2023-04-03 01:06:08,284 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(lines 744 846) no Hoare annotation was computed. [2023-04-03 01:06:08,284 INFO L899 garLoopResultBuilder]: For program point __utac__error_stack_mgtFINAL(lines 744 846) no Hoare annotation was computed. [2023-04-03 01:06:08,284 INFO L899 garLoopResultBuilder]: For program point L773(lines 773 789) no Hoare annotation was computed. [2023-04-03 01:06:08,284 INFO L899 garLoopResultBuilder]: For program point L794(lines 793 813) no Hoare annotation was computed. [2023-04-03 01:06:08,284 INFO L899 garLoopResultBuilder]: For program point L825(line 825) no Hoare annotation was computed. [2023-04-03 01:06:08,284 INFO L899 garLoopResultBuilder]: For program point L825-1(line 825) no Hoare annotation was computed. [2023-04-03 01:06:08,284 INFO L899 garLoopResultBuilder]: For program point L790(lines 790 831) no Hoare annotation was computed. [2023-04-03 01:06:08,284 INFO L899 garLoopResultBuilder]: For program point __utac__error_stack_mgtEXIT(lines 744 846) no Hoare annotation was computed. [2023-04-03 01:06:08,284 INFO L899 garLoopResultBuilder]: For program point L809(line 809) no Hoare annotation was computed. [2023-04-03 01:06:08,284 INFO L899 garLoopResultBuilder]: For program point L809-1(line 809) no Hoare annotation was computed. [2023-04-03 01:06:08,284 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(line -1) the Hoare annotation is: (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~head~0.base)| ~head~0.base) (= ~head~0.offset |old(~head~0.offset)|) (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0) (= ~cleanupTimeShifts~0 |old(~cleanupTimeShifts~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |#NULL.offset| |old(#NULL.offset)|) (= |old(~systemActive~0)| ~systemActive~0) (= |old(#NULL.base)| |#NULL.base|)) [2023-04-03 01:06:08,284 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.initEXIT(line -1) no Hoare annotation was computed. [2023-04-03 01:06:08,285 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 221 232) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse11 (not (= 1 ~systemActive~0))) (.cse1 (not (= |#NULL.offset| 0))) (.cse2 (not (= ~pumpRunning~0 0))) (.cse3 (< |old(~methaneLevelCritical~0)| 0)) (.cse4 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse5 (not (= ~head~0.offset 0))) (.cse6 (not (= |#NULL.base| 0))) (.cse12 (< 2147483647 ~waterLevel~0)) (.cse13 (< ~waterLevel~0 2)) (.cse7 (< |#StackHeapBarrier| 1)) (.cse8 (not (= ~head~0.base 0))) (.cse9 (not (= 0 ~systemActive~0))) (.cse10 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (or .cse0 .cse1 .cse2 .cse3 .cse11 .cse4 .cse5 .cse6 .cse7 .cse8 .cse10) (or .cse1 .cse2 .cse3 .cse11 .cse4 .cse5 .cse6 .cse12 .cse13 .cse7 .cse8 .cse10) (or .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse12 .cse13 .cse7 .cse8 .cse9 .cse10))) [2023-04-03 01:06:08,285 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 221 232) no Hoare annotation was computed. [2023-04-03 01:06:08,285 INFO L899 garLoopResultBuilder]: For program point ##fun~int~X~int~TO~intEXIT(line -1) no Hoare annotation was computed. [2023-04-03 01:06:08,285 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-04-03 01:06:08,285 INFO L899 garLoopResultBuilder]: For program point setupEXIT(lines 109 115) no Hoare annotation was computed. [2023-04-03 01:06:08,285 INFO L902 garLoopResultBuilder]: At program point setupFINAL(lines 109 115) the Hoare annotation is: true [2023-04-03 01:06:08,285 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-04-03 01:06:08,285 INFO L895 garLoopResultBuilder]: At program point L-1(line -1) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (and (= (select |#length| 15) 25) (= 9 (select |#length| 5)) (= (select |#length| 9) 21) (= 30 (select |#length| 7)) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (= ~pumpRunning~0 0) (= (select |#valid| 9) 1) (= (select |#length| 12) 25) (= (select |#valid| 11) 1) (= ~methaneLevelCritical~0 0) (= 30 (select |#length| 4)) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= 2 (select |#length| 1)) (= (select |#length| 8) 9) (= (select |#valid| 3) 1) (= (select |#valid| 7) 1) (= 30 (select |#length| 13)) (= 1 ~systemActive~0) (= 30 (select |#length| 10)) (= (select |#valid| 12) 1) (= (select |#valid| 4) 1) (= (select |#valid| 1) 1) (= (select |#length| 6) 21) (= (select |#valid| 14) 1) (= 9 (select |#length| 14)) (= (select |#valid| 0) 0) (= ~head~0.base 0) (= (select |#valid| 2) 1) (= |#NULL.offset| 0) (= 9 (select |#length| 11)) (= ~waterLevel~0 1) (= (select .cse0 0) 48) (= (select |#valid| 6) 1) (= (select .cse0 1) 0) (= (select |#valid| 10) 1) (= (select |#valid| 8) 1) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))) [2023-04-03 01:06:08,285 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-04-03 01:06:08,285 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(line -1) the Hoare annotation is: true [2023-04-03 01:06:08,288 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-04-03 01:06:08,290 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-04-03 01:06:08,318 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 03.04 01:06:08 BoogieIcfgContainer [2023-04-03 01:06:08,319 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-04-03 01:06:08,319 INFO L158 Benchmark]: Toolchain (without parser) took 130526.99ms. Allocated memory was 177.2MB in the beginning and 749.7MB in the end (delta: 572.5MB). Free memory was 133.9MB in the beginning and 438.7MB in the end (delta: -304.8MB). Peak memory consumption was 460.0MB. Max. memory is 8.0GB. [2023-04-03 01:06:08,320 INFO L158 Benchmark]: CDTParser took 0.11ms. Allocated memory is still 177.2MB. Free memory is still 131.2MB. There was no memory consumed. Max. memory is 8.0GB. [2023-04-03 01:06:08,320 INFO L158 Benchmark]: CACSL2BoogieTranslator took 333.17ms. Allocated memory is still 177.2MB. Free memory was 133.9MB in the beginning and 115.4MB in the end (delta: 18.5MB). Peak memory consumption was 17.8MB. Max. memory is 8.0GB. [2023-04-03 01:06:08,320 INFO L158 Benchmark]: Boogie Preprocessor took 76.77ms. Allocated memory is still 177.2MB. Free memory was 115.4MB in the beginning and 112.2MB in the end (delta: 3.2MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2023-04-03 01:06:08,320 INFO L158 Benchmark]: RCFGBuilder took 963.22ms. Allocated memory is still 177.2MB. Free memory was 111.9MB in the beginning and 114.0MB in the end (delta: -2.1MB). Peak memory consumption was 34.4MB. Max. memory is 8.0GB. [2023-04-03 01:06:08,321 INFO L158 Benchmark]: TraceAbstraction took 129149.32ms. Allocated memory was 177.2MB in the beginning and 749.7MB in the end (delta: 572.5MB). Free memory was 113.5MB in the beginning and 438.7MB in the end (delta: -325.2MB). Peak memory consumption was 439.2MB. Max. memory is 8.0GB. [2023-04-03 01:06:08,322 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11ms. Allocated memory is still 177.2MB. Free memory is still 131.2MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 333.17ms. Allocated memory is still 177.2MB. Free memory was 133.9MB in the beginning and 115.4MB in the end (delta: 18.5MB). Peak memory consumption was 17.8MB. Max. memory is 8.0GB. * Boogie Preprocessor took 76.77ms. Allocated memory is still 177.2MB. Free memory was 115.4MB in the beginning and 112.2MB in the end (delta: 3.2MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * RCFGBuilder took 963.22ms. Allocated memory is still 177.2MB. Free memory was 111.9MB in the beginning and 114.0MB in the end (delta: -2.1MB). Peak memory consumption was 34.4MB. Max. memory is 8.0GB. * TraceAbstraction took 129149.32ms. Allocated memory was 177.2MB in the beginning and 749.7MB in the end (delta: 572.5MB). Free memory was 113.5MB in the beginning and 438.7MB in the end (delta: -325.2MB). Peak memory consumption was 439.2MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 158]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 40 procedures, 182 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 129.1s, OverallIterations: 9, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 57.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 39.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 4397 SdHoareTripleChecker+Valid, 9.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 4379 mSDsluCounter, 3015 SdHoareTripleChecker+Invalid, 8.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2359 mSDsCounter, 2968 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 14697 IncrementalHoareTripleChecker+Invalid, 17665 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 2968 mSolverCounterUnsat, 656 mSDtfsCounter, 14697 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1420 GetRequests, 850 SyntacticMatches, 17 SemanticMatches, 553 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23952 ImplicationChecksByTransitivity, 57.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=528occurred in iteration=6, InterpolantAutomatonStates: 340, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 9 MinimizatonAttempts, 727 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 52 LocationsWithAnnotation, 1421 PreInvPairs, 2003 NumberOfFragments, 7424 HoareAnnotationTreeSize, 1421 FomulaSimplifications, 819075 FormulaSimplificationTreeSizeReduction, 25.7s HoareSimplificationTime, 52 FomulaSimplificationsInter, 75121 FormulaSimplificationTreeSizeReductionInter, 13.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 4.2s InterpolantComputationTime, 919 NumberOfCodeBlocks, 919 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1242 ConstructedInterpolants, 0 QuantifiedInterpolants, 3733 SizeOfPredicates, 32 NumberOfNonLiveVariables, 1460 ConjunctsInSsa, 204 ConjunctsInUnsatCore, 17 InterpolantComputations, 5 PerfectInterpolantSequences, 178/288 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 16.2s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 64, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 306, DAG_INTERPRETER_EARLY_EXITS: 4, TOOLS_POST_APPLICATIONS: 292, TOOLS_POST_TIME: 1.3s, TOOLS_POST_CALL_APPLICATIONS: 236, TOOLS_POST_CALL_TIME: 1.6s, TOOLS_POST_RETURN_APPLICATIONS: 176, TOOLS_POST_RETURN_TIME: 1.2s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 704, TOOLS_QUANTIFIERELIM_TIME: 3.9s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.0s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 946, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 202, DOMAIN_JOIN_TIME: 11.1s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 5, DOMAIN_WIDEN_TIME: 0.5s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 9, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 306, DOMAIN_ISBOTTOM_TIME: 0.3s, LOOP_SUMMARIZER_APPLICATIONS: 4, LOOP_SUMMARIZER_CACHE_MISSES: 4, LOOP_SUMMARIZER_OVERALL_TIME: 9.4s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 9.4s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 9, CALL_SUMMARIZER_APPLICATIONS: 176, CALL_SUMMARIZER_CACHE_MISSES: 48, CALL_SUMMARIZER_OVERALL_TIME: 0.2s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.2s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 2642, DAG_COMPRESSION_RETAINED_NODES: 878, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 294]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methaneLevelCritical) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\old(systemActive) == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || unknown-#StackHeapBarrier-unknown <= 0) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((pumpRunning == 0 && splverifierCounter == 0) && methaneLevelCritical == 0) && tmp <= 2147483647) && 0 <= tmp___0 + 2147483648) && 0 <= tmp + 2147483648) && 0 == systemActive) && waterLevel == 1) && 0 <= tmp___2 + 2147483648) && tmp___0 <= 2147483647) && tmp___2 <= 2147483647) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methaneLevelCritical) == 0)) || ((((((((((pumpRunning == 0 && 2 == waterLevel) && splverifierCounter == 0) && methaneLevelCritical == 0) && tmp <= 2147483647) && 0 <= tmp___0 + 2147483648) && 0 <= tmp + 2147483648) && 0 == systemActive) && 0 <= tmp___2 + 2147483648) && tmp___0 <= 2147483647) && tmp___2 <= 2147483647)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || ((((((((((pumpRunning == 0 && 2 == waterLevel) && splverifierCounter == 0) && methaneLevelCritical == 0) && tmp <= 2147483647) && 0 <= tmp___0 + 2147483648) && 1 == systemActive) && 0 <= tmp + 2147483648) && 0 <= tmp___2 + 2147483648) && tmp___0 <= 2147483647) && tmp___2 <= 2147483647)) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || ((((((((((pumpRunning == 0 && 2 == waterLevel) && splverifierCounter == 0) && tmp <= 2147483647) && 0 <= tmp___0 + 2147483648) && 1 == systemActive) && methaneLevelCritical == 1) && 0 <= tmp + 2147483648) && 0 <= tmp___2 + 2147483648) && tmp___0 <= 2147483647) && tmp___2 <= 2147483647)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\old(systemActive) == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || ((((((((((pumpRunning == 0 && splverifierCounter == 0) && tmp <= 2147483647) && 0 <= tmp___0 + 2147483648) && 1 == systemActive) && methaneLevelCritical == 1) && 0 <= tmp + 2147483648) && waterLevel == 1) && 0 <= tmp___2 + 2147483648) && tmp___0 <= 2147483647) && tmp___2 <= 2147483647)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || ((((((((((pumpRunning == 0 && 2 == waterLevel) && splverifierCounter == 0) && tmp <= 2147483647) && 0 <= tmp___0 + 2147483648) && methaneLevelCritical == 1) && 0 <= tmp + 2147483648) && 0 == systemActive) && 0 <= tmp___2 + 2147483648) && tmp___0 <= 2147483647) && tmp___2 <= 2147483647)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || ((((((((((pumpRunning == 0 && splverifierCounter == 0) && tmp <= 2147483647) && 0 <= tmp___0 + 2147483648) && methaneLevelCritical == 1) && 0 <= tmp + 2147483648) && 0 == systemActive) && waterLevel == 1) && 0 <= tmp___2 + 2147483648) && tmp___0 <= 2147483647) && tmp___2 <= 2147483647)) || unknown-#StackHeapBarrier-unknown <= 0) || !(\valid[9] == 1)) || !(head == 0)) || ((((pumpRunning == 0 && splverifierCounter == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1)) || !(cleanupTimeShifts == 4) RESULT: Ultimate proved your program to be correct! [2023-04-03 01:06:08,349 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...