./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 9bd2c7ff Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1f55fffdfb523946c08e4798dfd7a981dcf70594f408e958cce4b1b6e97bd924 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-9bd2c7f [2023-11-19 04:57:33,601 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-19 04:57:33,689 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/config/svcomp-Reach-32bit-Taipan_Default.epf [2023-11-19 04:57:33,696 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-19 04:57:33,697 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-19 04:57:33,729 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-19 04:57:33,730 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-19 04:57:33,731 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-19 04:57:33,732 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-19 04:57:33,733 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-19 04:57:33,734 INFO L153 SettingsManager]: * User list type=DISABLED [2023-11-19 04:57:33,734 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-11-19 04:57:33,735 INFO L153 SettingsManager]: * Explicit value domain=true [2023-11-19 04:57:33,736 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-11-19 04:57:33,736 INFO L153 SettingsManager]: * Octagon Domain=false [2023-11-19 04:57:33,737 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-11-19 04:57:33,738 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-11-19 04:57:33,739 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-11-19 04:57:33,739 INFO L153 SettingsManager]: * Interval Domain=false [2023-11-19 04:57:33,740 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-11-19 04:57:33,741 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-11-19 04:57:33,742 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-11-19 04:57:33,743 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-19 04:57:33,744 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-19 04:57:33,744 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-19 04:57:33,745 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-19 04:57:33,746 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-19 04:57:33,746 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-19 04:57:33,747 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-19 04:57:33,748 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-19 04:57:33,748 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-19 04:57:33,749 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-19 04:57:33,750 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-19 04:57:33,750 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-19 04:57:33,751 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-19 04:57:33,751 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-19 04:57:33,752 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-19 04:57:33,752 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-19 04:57:33,753 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-19 04:57:33,753 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-19 04:57:33,754 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-11-19 04:57:33,756 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-19 04:57:33,758 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-19 04:57:33,758 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-11-19 04:57:33,760 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-19 04:57:33,760 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1f55fffdfb523946c08e4798dfd7a981dcf70594f408e958cce4b1b6e97bd924 [2023-11-19 04:57:34,109 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-19 04:57:34,146 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-19 04:57:34,150 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-19 04:57:34,152 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-19 04:57:34,152 INFO L274 PluginConnector]: CDTParser initialized [2023-11-19 04:57:34,154 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/../../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c [2023-11-19 04:57:37,990 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-19 04:57:38,357 INFO L384 CDTParser]: Found 1 translation units. [2023-11-19 04:57:38,358 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c [2023-11-19 04:57:38,377 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/data/644c5bd29/c2ebd96ba21443d49407e03f56b8f2cc/FLAGbc30826c8 [2023-11-19 04:57:38,397 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/data/644c5bd29/c2ebd96ba21443d49407e03f56b8f2cc [2023-11-19 04:57:38,401 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-19 04:57:38,403 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-19 04:57:38,405 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-19 04:57:38,405 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-19 04:57:38,413 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-19 04:57:38,414 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 04:57:38" (1/1) ... [2023-11-19 04:57:38,415 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2fbafa1f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:57:38, skipping insertion in model container [2023-11-19 04:57:38,416 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 04:57:38" (1/1) ... [2023-11-19 04:57:38,507 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-19 04:57:38,738 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c[1605,1618] [2023-11-19 04:57:38,954 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-19 04:57:38,972 INFO L202 MainTranslator]: Completed pre-run [2023-11-19 04:57:38,985 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] [2023-11-19 04:57:38,987 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [58] [2023-11-19 04:57:38,988 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [127] [2023-11-19 04:57:38,988 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [493] [2023-11-19 04:57:38,989 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [726] [2023-11-19 04:57:38,989 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [765] [2023-11-19 04:57:38,989 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [865] [2023-11-19 04:57:38,990 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [969] [2023-11-19 04:57:38,995 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c[1605,1618] [2023-11-19 04:57:39,067 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-19 04:57:39,094 INFO L206 MainTranslator]: Completed translation [2023-11-19 04:57:39,095 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:57:39 WrapperNode [2023-11-19 04:57:39,095 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-19 04:57:39,097 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-19 04:57:39,097 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-19 04:57:39,098 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-19 04:57:39,107 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:57:39" (1/1) ... [2023-11-19 04:57:39,125 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:57:39" (1/1) ... [2023-11-19 04:57:39,179 INFO L138 Inliner]: procedures = 57, calls = 103, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 224 [2023-11-19 04:57:39,184 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-19 04:57:39,185 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-19 04:57:39,185 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-19 04:57:39,185 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-19 04:57:39,207 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:57:39" (1/1) ... [2023-11-19 04:57:39,207 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:57:39" (1/1) ... [2023-11-19 04:57:39,212 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:57:39" (1/1) ... [2023-11-19 04:57:39,212 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:57:39" (1/1) ... [2023-11-19 04:57:39,221 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:57:39" (1/1) ... [2023-11-19 04:57:39,232 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:57:39" (1/1) ... [2023-11-19 04:57:39,249 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:57:39" (1/1) ... [2023-11-19 04:57:39,251 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:57:39" (1/1) ... [2023-11-19 04:57:39,263 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-19 04:57:39,264 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-19 04:57:39,265 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-19 04:57:39,265 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-19 04:57:39,266 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:57:39" (1/1) ... [2023-11-19 04:57:39,295 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-19 04:57:39,319 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/z3 [2023-11-19 04:57:39,335 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-19 04:57:39,375 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-19 04:57:39,395 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-19 04:57:39,396 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-19 04:57:39,396 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-19 04:57:39,396 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-19 04:57:39,397 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-19 04:57:39,397 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-19 04:57:39,397 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-19 04:57:39,397 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-19 04:57:39,398 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-19 04:57:39,400 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-19 04:57:39,401 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-19 04:57:39,401 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-19 04:57:39,401 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-19 04:57:39,402 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-19 04:57:39,402 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-19 04:57:39,403 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-19 04:57:39,405 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-19 04:57:39,405 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-19 04:57:39,405 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-19 04:57:39,406 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-19 04:57:39,409 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-19 04:57:39,410 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-19 04:57:39,522 INFO L236 CfgBuilder]: Building ICFG [2023-11-19 04:57:39,526 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-19 04:57:40,015 INFO L277 CfgBuilder]: Performing block encoding [2023-11-19 04:57:40,198 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-19 04:57:40,198 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-19 04:57:40,204 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 04:57:40 BoogieIcfgContainer [2023-11-19 04:57:40,205 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-19 04:57:40,209 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-19 04:57:40,210 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-19 04:57:40,213 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-19 04:57:40,213 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 04:57:38" (1/3) ... [2023-11-19 04:57:40,214 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6556b21e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 04:57:40, skipping insertion in model container [2023-11-19 04:57:40,214 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 04:57:39" (2/3) ... [2023-11-19 04:57:40,217 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6556b21e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 04:57:40, skipping insertion in model container [2023-11-19 04:57:40,217 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 04:57:40" (3/3) ... [2023-11-19 04:57:40,219 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product53.cil.c [2023-11-19 04:57:40,239 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-19 04:57:40,239 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-19 04:57:40,308 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-19 04:57:40,317 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@16d1302f, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-19 04:57:40,318 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-19 04:57:40,324 INFO L276 IsEmpty]: Start isEmpty. Operand has 69 states, 42 states have (on average 1.4285714285714286) internal successors, (60), 52 states have internal predecessors, (60), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-19 04:57:40,335 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-19 04:57:40,336 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:57:40,336 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:57:40,337 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:57:40,346 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:57:40,346 INFO L85 PathProgramCache]: Analyzing trace with hash 996103182, now seen corresponding path program 1 times [2023-11-19 04:57:40,357 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:57:40,357 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1612685490] [2023-11-19 04:57:40,358 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:57:40,358 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:57:40,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:57:40,602 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 04:57:40,603 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:57:40,603 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1612685490] [2023-11-19 04:57:40,604 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1612685490] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 04:57:40,604 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 04:57:40,604 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-19 04:57:40,605 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1491430566] [2023-11-19 04:57:40,606 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 04:57:40,610 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-19 04:57:40,611 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:57:40,640 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-19 04:57:40,641 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-19 04:57:40,643 INFO L87 Difference]: Start difference. First operand has 69 states, 42 states have (on average 1.4285714285714286) internal successors, (60), 52 states have internal predecessors, (60), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 04:57:40,709 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:57:40,710 INFO L93 Difference]: Finished difference Result 136 states and 185 transitions. [2023-11-19 04:57:40,711 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-19 04:57:40,712 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-19 04:57:40,713 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:57:40,722 INFO L225 Difference]: With dead ends: 136 [2023-11-19 04:57:40,722 INFO L226 Difference]: Without dead ends: 64 [2023-11-19 04:57:40,726 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-19 04:57:40,730 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 71 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-19 04:57:40,732 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 71 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-19 04:57:40,749 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2023-11-19 04:57:40,771 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 64. [2023-11-19 04:57:40,773 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 39 states have (on average 1.3333333333333333) internal successors, (52), 48 states have internal predecessors, (52), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-19 04:57:40,775 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 83 transitions. [2023-11-19 04:57:40,777 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 83 transitions. Word has length 17 [2023-11-19 04:57:40,777 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:57:40,777 INFO L495 AbstractCegarLoop]: Abstraction has 64 states and 83 transitions. [2023-11-19 04:57:40,778 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 04:57:40,778 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 83 transitions. [2023-11-19 04:57:40,780 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-11-19 04:57:40,780 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:57:40,781 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:57:40,781 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-19 04:57:40,781 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:57:40,782 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:57:40,782 INFO L85 PathProgramCache]: Analyzing trace with hash 1657805293, now seen corresponding path program 1 times [2023-11-19 04:57:40,782 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:57:40,783 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [628280692] [2023-11-19 04:57:40,783 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:57:40,783 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:57:40,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:57:40,878 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 04:57:40,879 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:57:40,879 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [628280692] [2023-11-19 04:57:40,879 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [628280692] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 04:57:40,879 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 04:57:40,880 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-19 04:57:40,880 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2082302979] [2023-11-19 04:57:40,880 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 04:57:40,881 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-19 04:57:40,882 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:57:40,882 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-19 04:57:40,883 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 04:57:40,883 INFO L87 Difference]: Start difference. First operand 64 states and 83 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 04:57:40,928 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:57:40,928 INFO L93 Difference]: Finished difference Result 105 states and 137 transitions. [2023-11-19 04:57:40,929 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-19 04:57:40,929 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2023-11-19 04:57:40,929 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:57:40,931 INFO L225 Difference]: With dead ends: 105 [2023-11-19 04:57:40,931 INFO L226 Difference]: Without dead ends: 56 [2023-11-19 04:57:40,932 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 04:57:40,933 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 7 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-19 04:57:40,934 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 105 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-19 04:57:40,935 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2023-11-19 04:57:40,943 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 56. [2023-11-19 04:57:40,943 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 34 states have (on average 1.3529411764705883) internal successors, (46), 43 states have internal predecessors, (46), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-19 04:57:40,945 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 72 transitions. [2023-11-19 04:57:40,945 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 72 transitions. Word has length 18 [2023-11-19 04:57:40,945 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:57:40,946 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 72 transitions. [2023-11-19 04:57:40,946 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 04:57:40,946 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 72 transitions. [2023-11-19 04:57:40,947 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-19 04:57:40,948 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:57:40,948 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:57:40,948 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-19 04:57:40,948 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:57:40,949 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:57:40,949 INFO L85 PathProgramCache]: Analyzing trace with hash 1649027138, now seen corresponding path program 1 times [2023-11-19 04:57:40,949 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:57:40,949 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1346133374] [2023-11-19 04:57:40,950 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:57:40,950 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:57:40,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:57:41,146 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 04:57:41,147 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:57:41,147 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1346133374] [2023-11-19 04:57:41,147 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1346133374] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 04:57:41,148 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 04:57:41,148 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-19 04:57:41,148 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1345348121] [2023-11-19 04:57:41,148 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 04:57:41,149 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-19 04:57:41,149 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:57:41,150 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-19 04:57:41,150 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-19 04:57:41,150 INFO L87 Difference]: Start difference. First operand 56 states and 72 transitions. Second operand has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 04:57:41,256 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:57:41,257 INFO L93 Difference]: Finished difference Result 110 states and 143 transitions. [2023-11-19 04:57:41,257 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-19 04:57:41,257 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2023-11-19 04:57:41,258 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:57:41,262 INFO L225 Difference]: With dead ends: 110 [2023-11-19 04:57:41,262 INFO L226 Difference]: Without dead ends: 56 [2023-11-19 04:57:41,271 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-19 04:57:41,273 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 68 mSDsluCounter, 23 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 75 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-19 04:57:41,276 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 75 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-19 04:57:41,277 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2023-11-19 04:57:41,290 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 56. [2023-11-19 04:57:41,293 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 43 states have internal predecessors, (45), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-19 04:57:41,298 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 71 transitions. [2023-11-19 04:57:41,300 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 71 transitions. Word has length 20 [2023-11-19 04:57:41,300 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:57:41,300 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 71 transitions. [2023-11-19 04:57:41,301 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 04:57:41,301 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 71 transitions. [2023-11-19 04:57:41,304 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2023-11-19 04:57:41,305 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:57:41,306 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:57:41,306 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-19 04:57:41,306 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:57:41,307 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:57:41,307 INFO L85 PathProgramCache]: Analyzing trace with hash -876669846, now seen corresponding path program 1 times [2023-11-19 04:57:41,308 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:57:41,309 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1387676960] [2023-11-19 04:57:41,309 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:57:41,309 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:57:41,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:57:41,494 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-19 04:57:41,495 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:57:41,495 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1387676960] [2023-11-19 04:57:41,495 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1387676960] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 04:57:41,496 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 04:57:41,497 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-19 04:57:41,497 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [136610] [2023-11-19 04:57:41,497 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 04:57:41,499 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-19 04:57:41,499 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:57:41,500 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-19 04:57:41,500 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-19 04:57:41,501 INFO L87 Difference]: Start difference. First operand 56 states and 71 transitions. Second operand has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-19 04:57:41,717 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:57:41,718 INFO L93 Difference]: Finished difference Result 160 states and 206 transitions. [2023-11-19 04:57:41,718 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-19 04:57:41,718 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 30 [2023-11-19 04:57:41,719 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:57:41,722 INFO L225 Difference]: With dead ends: 160 [2023-11-19 04:57:41,723 INFO L226 Difference]: Without dead ends: 106 [2023-11-19 04:57:41,724 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-19 04:57:41,725 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 45 mSDsluCounter, 188 mSDsCounter, 0 mSdLazyCounter, 109 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 46 SdHoareTripleChecker+Valid, 242 SdHoareTripleChecker+Invalid, 110 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 109 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-19 04:57:41,725 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [46 Valid, 242 Invalid, 110 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 109 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-19 04:57:41,727 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 106 states. [2023-11-19 04:57:41,761 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 106 to 103. [2023-11-19 04:57:41,762 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 103 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 78 states have internal predecessors, (81), 25 states have call successors, (25), 15 states have call predecessors, (25), 15 states have return successors, (25), 15 states have call predecessors, (25), 25 states have call successors, (25) [2023-11-19 04:57:41,763 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 131 transitions. [2023-11-19 04:57:41,763 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 131 transitions. Word has length 30 [2023-11-19 04:57:41,764 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:57:41,764 INFO L495 AbstractCegarLoop]: Abstraction has 103 states and 131 transitions. [2023-11-19 04:57:41,764 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-19 04:57:41,764 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 131 transitions. [2023-11-19 04:57:41,766 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-19 04:57:41,766 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:57:41,766 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:57:41,767 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-19 04:57:41,767 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:57:41,767 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:57:41,767 INFO L85 PathProgramCache]: Analyzing trace with hash 797700894, now seen corresponding path program 1 times [2023-11-19 04:57:41,768 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:57:41,770 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1000119957] [2023-11-19 04:57:41,770 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:57:41,771 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:57:41,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:57:41,848 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-19 04:57:41,848 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:57:41,849 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1000119957] [2023-11-19 04:57:41,849 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1000119957] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 04:57:41,849 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 04:57:41,849 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-19 04:57:41,849 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1394291845] [2023-11-19 04:57:41,850 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 04:57:41,850 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-19 04:57:41,850 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:57:41,851 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-19 04:57:41,851 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-19 04:57:41,851 INFO L87 Difference]: Start difference. First operand 103 states and 131 transitions. Second operand has 4 states, 4 states have (on average 5.75) internal successors, (23), 4 states have internal predecessors, (23), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-19 04:57:41,944 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:57:41,944 INFO L93 Difference]: Finished difference Result 274 states and 358 transitions. [2023-11-19 04:57:41,944 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-19 04:57:41,945 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.75) internal successors, (23), 4 states have internal predecessors, (23), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 33 [2023-11-19 04:57:41,945 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:57:41,947 INFO L225 Difference]: With dead ends: 274 [2023-11-19 04:57:41,947 INFO L226 Difference]: Without dead ends: 173 [2023-11-19 04:57:41,948 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-19 04:57:41,949 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 44 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 69 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-19 04:57:41,950 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 173 Invalid, 69 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-19 04:57:41,951 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 173 states. [2023-11-19 04:57:41,974 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 173 to 171. [2023-11-19 04:57:41,975 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 171 states, 110 states have (on average 1.2181818181818183) internal successors, (134), 123 states have internal predecessors, (134), 32 states have call successors, (32), 28 states have call predecessors, (32), 28 states have return successors, (44), 28 states have call predecessors, (44), 32 states have call successors, (44) [2023-11-19 04:57:41,977 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 210 transitions. [2023-11-19 04:57:41,977 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 210 transitions. Word has length 33 [2023-11-19 04:57:41,977 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:57:41,978 INFO L495 AbstractCegarLoop]: Abstraction has 171 states and 210 transitions. [2023-11-19 04:57:41,978 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.75) internal successors, (23), 4 states have internal predecessors, (23), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-19 04:57:41,978 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 210 transitions. [2023-11-19 04:57:41,982 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2023-11-19 04:57:41,982 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:57:41,982 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:57:41,983 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-19 04:57:41,983 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:57:41,983 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:57:41,983 INFO L85 PathProgramCache]: Analyzing trace with hash 137333065, now seen corresponding path program 1 times [2023-11-19 04:57:41,984 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:57:41,984 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [743670971] [2023-11-19 04:57:41,984 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:57:41,984 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:57:42,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:57:42,351 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 04:57:42,355 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:57:42,355 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [743670971] [2023-11-19 04:57:42,355 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [743670971] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 04:57:42,355 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 04:57:42,355 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-19 04:57:42,356 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [428978370] [2023-11-19 04:57:42,356 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 04:57:42,356 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-19 04:57:42,356 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:57:42,357 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-19 04:57:42,357 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-19 04:57:42,360 INFO L87 Difference]: Start difference. First operand 171 states and 210 transitions. Second operand has 7 states, 7 states have (on average 3.857142857142857) internal successors, (27), 7 states have internal predecessors, (27), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-19 04:57:42,743 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:57:42,743 INFO L93 Difference]: Finished difference Result 518 states and 658 transitions. [2023-11-19 04:57:42,744 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-19 04:57:42,744 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 3.857142857142857) internal successors, (27), 7 states have internal predecessors, (27), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 36 [2023-11-19 04:57:42,745 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:57:42,750 INFO L225 Difference]: With dead ends: 518 [2023-11-19 04:57:42,752 INFO L226 Difference]: Without dead ends: 349 [2023-11-19 04:57:42,754 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=47, Unknown=0, NotChecked=0, Total=72 [2023-11-19 04:57:42,756 INFO L413 NwaCegarLoop]: 82 mSDtfsCounter, 149 mSDsluCounter, 130 mSDsCounter, 0 mSdLazyCounter, 229 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 152 SdHoareTripleChecker+Valid, 212 SdHoareTripleChecker+Invalid, 260 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 229 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-19 04:57:42,759 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [152 Valid, 212 Invalid, 260 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 229 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-19 04:57:42,762 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 349 states. [2023-11-19 04:57:42,817 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 349 to 298. [2023-11-19 04:57:42,819 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 298 states, 197 states have (on average 1.1928934010152283) internal successors, (235), 210 states have internal predecessors, (235), 50 states have call successors, (50), 46 states have call predecessors, (50), 50 states have return successors, (72), 50 states have call predecessors, (72), 50 states have call successors, (72) [2023-11-19 04:57:42,822 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 298 states to 298 states and 357 transitions. [2023-11-19 04:57:42,822 INFO L78 Accepts]: Start accepts. Automaton has 298 states and 357 transitions. Word has length 36 [2023-11-19 04:57:42,823 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:57:42,823 INFO L495 AbstractCegarLoop]: Abstraction has 298 states and 357 transitions. [2023-11-19 04:57:42,823 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 3.857142857142857) internal successors, (27), 7 states have internal predecessors, (27), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-19 04:57:42,824 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 357 transitions. [2023-11-19 04:57:42,825 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2023-11-19 04:57:42,825 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:57:42,826 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:57:42,826 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-19 04:57:42,826 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:57:42,827 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:57:42,827 INFO L85 PathProgramCache]: Analyzing trace with hash 1243373619, now seen corresponding path program 1 times [2023-11-19 04:57:42,827 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:57:42,827 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2120009984] [2023-11-19 04:57:42,828 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:57:42,828 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:57:42,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:57:42,898 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 04:57:42,899 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:57:42,899 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2120009984] [2023-11-19 04:57:42,899 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2120009984] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 04:57:42,899 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 04:57:42,900 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-19 04:57:42,900 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [37204396] [2023-11-19 04:57:42,900 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 04:57:42,901 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-19 04:57:42,901 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:57:42,901 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-19 04:57:42,902 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 04:57:42,902 INFO L87 Difference]: Start difference. First operand 298 states and 357 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-19 04:57:43,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:57:43,018 INFO L93 Difference]: Finished difference Result 423 states and 517 transitions. [2023-11-19 04:57:43,018 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-19 04:57:43,019 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 39 [2023-11-19 04:57:43,021 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:57:43,025 INFO L225 Difference]: With dead ends: 423 [2023-11-19 04:57:43,025 INFO L226 Difference]: Without dead ends: 421 [2023-11-19 04:57:43,026 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 04:57:43,028 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 46 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 46 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-19 04:57:43,028 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [46 Valid, 108 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-19 04:57:43,030 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 421 states. [2023-11-19 04:57:43,094 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 421 to 405. [2023-11-19 04:57:43,098 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 405 states, 264 states have (on average 1.2007575757575757) internal successors, (317), 284 states have internal predecessors, (317), 70 states have call successors, (70), 64 states have call predecessors, (70), 70 states have return successors, (109), 68 states have call predecessors, (109), 70 states have call successors, (109) [2023-11-19 04:57:43,104 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 405 states to 405 states and 496 transitions. [2023-11-19 04:57:43,104 INFO L78 Accepts]: Start accepts. Automaton has 405 states and 496 transitions. Word has length 39 [2023-11-19 04:57:43,105 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:57:43,105 INFO L495 AbstractCegarLoop]: Abstraction has 405 states and 496 transitions. [2023-11-19 04:57:43,105 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-19 04:57:43,106 INFO L276 IsEmpty]: Start isEmpty. Operand 405 states and 496 transitions. [2023-11-19 04:57:43,109 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2023-11-19 04:57:43,109 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:57:43,110 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:57:43,110 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-19 04:57:43,110 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:57:43,111 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:57:43,111 INFO L85 PathProgramCache]: Analyzing trace with hash -717297120, now seen corresponding path program 1 times [2023-11-19 04:57:43,111 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:57:43,111 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [569865122] [2023-11-19 04:57:43,111 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:57:43,111 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:57:43,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:57:43,332 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 11 proven. 6 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2023-11-19 04:57:43,332 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:57:43,332 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [569865122] [2023-11-19 04:57:43,332 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [569865122] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-19 04:57:43,332 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2042970060] [2023-11-19 04:57:43,332 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:57:43,333 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-19 04:57:43,333 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/z3 [2023-11-19 04:57:43,335 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-19 04:57:43,343 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-19 04:57:43,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:57:43,457 INFO L262 TraceCheckSpWp]: Trace formula consists of 309 conjuncts, 21 conjunts are in the unsatisfiable core [2023-11-19 04:57:43,467 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-19 04:57:44,141 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 21 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 04:57:44,141 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-19 04:57:44,811 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 12 proven. 3 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2023-11-19 04:57:44,811 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2042970060] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-19 04:57:44,812 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [52145915] [2023-11-19 04:57:44,844 INFO L159 IcfgInterpreter]: Started Sifa with 51 locations of interest [2023-11-19 04:57:44,844 INFO L166 IcfgInterpreter]: Building call graph [2023-11-19 04:57:44,850 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-19 04:57:44,862 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-19 04:57:44,862 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-19 04:57:48,893 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 142 for LOIs [2023-11-19 04:57:49,030 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 30 for LOIs [2023-11-19 04:57:49,488 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 56 for LOIs [2023-11-19 04:57:49,940 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 54 for LOIs [2023-11-19 04:57:50,226 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 6 for LOIs [2023-11-19 04:57:50,227 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 18 for LOIs [2023-11-19 04:57:50,232 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 45 for LOIs [2023-11-19 04:57:50,256 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-19 04:57:55,906 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4568#(and (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|) (= |timeShift_isPumpRunning_#res#1| ~pumpRunning~0) (<= 0 ~methAndRunningLastTime~0) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)) (<= 0 |old(~methAndRunningLastTime~0)|) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| ~methaneLevelCritical~0) (<= 0 ~methaneLevelCritical~0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 2147483647) (<= ~methaneLevelCritical~0 2147483647) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0)) (not (= ~methAndRunningLastTime~0 0)) (<= 0 (+ |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 2147483648)))' at error location [2023-11-19 04:57:55,909 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-19 04:57:55,910 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-19 04:57:55,910 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 12, 13] total 28 [2023-11-19 04:57:55,911 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1694515449] [2023-11-19 04:57:55,911 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-19 04:57:55,913 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2023-11-19 04:57:55,913 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:57:55,916 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2023-11-19 04:57:55,920 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=385, Invalid=4171, Unknown=0, NotChecked=0, Total=4556 [2023-11-19 04:57:55,921 INFO L87 Difference]: Start difference. First operand 405 states and 496 transitions. Second operand has 28 states, 24 states have (on average 4.875) internal successors, (117), 23 states have internal predecessors, (117), 12 states have call successors, (32), 12 states have call predecessors, (32), 11 states have return successors, (29), 12 states have call predecessors, (29), 12 states have call successors, (29) [2023-11-19 04:58:02,508 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:58:02,509 INFO L93 Difference]: Finished difference Result 2336 states and 2923 transitions. [2023-11-19 04:58:02,509 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 117 states. [2023-11-19 04:58:02,510 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 24 states have (on average 4.875) internal successors, (117), 23 states have internal predecessors, (117), 12 states have call successors, (32), 12 states have call predecessors, (32), 11 states have return successors, (29), 12 states have call predecessors, (29), 12 states have call successors, (29) Word has length 79 [2023-11-19 04:58:02,511 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:58:02,538 INFO L225 Difference]: With dead ends: 2336 [2023-11-19 04:58:02,539 INFO L226 Difference]: Without dead ends: 1933 [2023-11-19 04:58:02,560 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 399 GetRequests, 217 SyntacticMatches, 3 SemanticMatches, 179 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11514 ImplicationChecksByTransitivity, 9.7s TimeCoverageRelationStatistics Valid=2611, Invalid=29969, Unknown=0, NotChecked=0, Total=32580 [2023-11-19 04:58:02,563 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 1261 mSDsluCounter, 501 mSDsCounter, 0 mSdLazyCounter, 3532 mSolverCounterSat, 840 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1266 SdHoareTripleChecker+Valid, 561 SdHoareTripleChecker+Invalid, 4372 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 840 IncrementalHoareTripleChecker+Valid, 3532 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.6s IncrementalHoareTripleChecker+Time [2023-11-19 04:58:02,564 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1266 Valid, 561 Invalid, 4372 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [840 Valid, 3532 Invalid, 0 Unknown, 0 Unchecked, 2.6s Time] [2023-11-19 04:58:02,568 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1933 states. [2023-11-19 04:58:02,797 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1933 to 1639. [2023-11-19 04:58:02,801 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1639 states, 1092 states have (on average 1.1868131868131868) internal successors, (1296), 1169 states have internal predecessors, (1296), 278 states have call successors, (278), 229 states have call predecessors, (278), 268 states have return successors, (431), 288 states have call predecessors, (431), 278 states have call successors, (431) [2023-11-19 04:58:02,814 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1639 states to 1639 states and 2005 transitions. [2023-11-19 04:58:02,816 INFO L78 Accepts]: Start accepts. Automaton has 1639 states and 2005 transitions. Word has length 79 [2023-11-19 04:58:02,816 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:58:02,817 INFO L495 AbstractCegarLoop]: Abstraction has 1639 states and 2005 transitions. [2023-11-19 04:58:02,817 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 24 states have (on average 4.875) internal successors, (117), 23 states have internal predecessors, (117), 12 states have call successors, (32), 12 states have call predecessors, (32), 11 states have return successors, (29), 12 states have call predecessors, (29), 12 states have call successors, (29) [2023-11-19 04:58:02,819 INFO L276 IsEmpty]: Start isEmpty. Operand 1639 states and 2005 transitions. [2023-11-19 04:58:02,828 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 140 [2023-11-19 04:58:02,828 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 04:58:02,830 INFO L195 NwaCegarLoop]: trace histogram [6, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:58:02,860 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2023-11-19 04:58:03,051 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-19 04:58:03,052 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 04:58:03,053 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 04:58:03,053 INFO L85 PathProgramCache]: Analyzing trace with hash 1074730611, now seen corresponding path program 1 times [2023-11-19 04:58:03,053 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-19 04:58:03,053 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2053554337] [2023-11-19 04:58:03,053 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:58:03,053 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 04:58:03,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:58:03,422 INFO L134 CoverageAnalysis]: Checked inductivity of 161 backedges. 51 proven. 15 refuted. 0 times theorem prover too weak. 95 trivial. 0 not checked. [2023-11-19 04:58:03,422 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-19 04:58:03,422 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2053554337] [2023-11-19 04:58:03,422 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2053554337] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-19 04:58:03,423 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [33567704] [2023-11-19 04:58:03,423 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 04:58:03,423 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-19 04:58:03,423 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/z3 [2023-11-19 04:58:03,424 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-19 04:58:03,443 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-19 04:58:03,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 04:58:03,578 INFO L262 TraceCheckSpWp]: Trace formula consists of 477 conjuncts, 33 conjunts are in the unsatisfiable core [2023-11-19 04:58:03,592 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-19 04:58:04,428 INFO L134 CoverageAnalysis]: Checked inductivity of 161 backedges. 86 proven. 71 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-19 04:58:04,429 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-19 04:58:05,544 INFO L134 CoverageAnalysis]: Checked inductivity of 161 backedges. 78 proven. 34 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2023-11-19 04:58:05,545 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [33567704] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-19 04:58:05,545 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [599357114] [2023-11-19 04:58:05,549 INFO L159 IcfgInterpreter]: Started Sifa with 54 locations of interest [2023-11-19 04:58:05,549 INFO L166 IcfgInterpreter]: Building call graph [2023-11-19 04:58:05,550 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-19 04:58:05,550 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-19 04:58:05,551 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-19 04:58:07,825 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 136 for LOIs [2023-11-19 04:58:07,919 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 29 for LOIs [2023-11-19 04:58:08,387 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 11 for LOIs [2023-11-19 04:58:08,426 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 18 for LOIs [2023-11-19 04:58:08,472 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 3 for LOIs [2023-11-19 04:58:08,473 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 16 for LOIs [2023-11-19 04:58:08,477 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 9 for LOIs [2023-11-19 04:58:08,478 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 52 for LOIs [2023-11-19 04:58:08,512 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-19 04:58:13,502 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11103#(and (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|) (= |timeShift_isPumpRunning_#res#1| ~pumpRunning~0) (<= 0 |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1|) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| ~methaneLevelCritical~0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 2147483647) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 2147483647) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0)) (not (= ~methAndRunningLastTime~0 0)) (<= 0 (+ |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 2147483648)))' at error location [2023-11-19 04:58:13,502 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-19 04:58:13,502 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-19 04:58:13,502 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 18, 17] total 40 [2023-11-19 04:58:13,502 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [603810641] [2023-11-19 04:58:13,503 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-19 04:58:13,504 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 40 states [2023-11-19 04:58:13,504 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-19 04:58:13,506 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2023-11-19 04:58:13,509 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=627, Invalid=5693, Unknown=0, NotChecked=0, Total=6320 [2023-11-19 04:58:13,510 INFO L87 Difference]: Start difference. First operand 1639 states and 2005 transitions. Second operand has 40 states, 37 states have (on average 5.0) internal successors, (185), 36 states have internal predecessors, (185), 20 states have call successors, (48), 13 states have call predecessors, (48), 17 states have return successors, (49), 19 states have call predecessors, (49), 20 states have call successors, (49) [2023-11-19 04:58:17,937 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 04:58:17,938 INFO L93 Difference]: Finished difference Result 2218 states and 2687 transitions. [2023-11-19 04:58:17,938 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 63 states. [2023-11-19 04:58:17,938 INFO L78 Accepts]: Start accepts. Automaton has has 40 states, 37 states have (on average 5.0) internal successors, (185), 36 states have internal predecessors, (185), 20 states have call successors, (48), 13 states have call predecessors, (48), 17 states have return successors, (49), 19 states have call predecessors, (49), 20 states have call successors, (49) Word has length 139 [2023-11-19 04:58:17,939 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 04:58:17,939 INFO L225 Difference]: With dead ends: 2218 [2023-11-19 04:58:17,940 INFO L226 Difference]: Without dead ends: 0 [2023-11-19 04:58:17,953 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 503 GetRequests, 355 SyntacticMatches, 9 SemanticMatches, 139 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6549 ImplicationChecksByTransitivity, 8.3s TimeCoverageRelationStatistics Valid=2299, Invalid=17441, Unknown=0, NotChecked=0, Total=19740 [2023-11-19 04:58:17,953 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 968 mSDsluCounter, 300 mSDsCounter, 0 mSdLazyCounter, 2304 mSolverCounterSat, 662 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 968 SdHoareTripleChecker+Valid, 336 SdHoareTripleChecker+Invalid, 2966 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 662 IncrementalHoareTripleChecker+Valid, 2304 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2023-11-19 04:58:17,954 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [968 Valid, 336 Invalid, 2966 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [662 Valid, 2304 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2023-11-19 04:58:17,954 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-19 04:58:17,954 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-19 04:58:17,954 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 04:58:17,955 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-19 04:58:17,955 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 139 [2023-11-19 04:58:17,955 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 04:58:17,955 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-19 04:58:17,956 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 40 states, 37 states have (on average 5.0) internal successors, (185), 36 states have internal predecessors, (185), 20 states have call successors, (48), 13 states have call predecessors, (48), 17 states have return successors, (49), 19 states have call predecessors, (49), 20 states have call successors, (49) [2023-11-19 04:58:17,956 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-19 04:58:17,956 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-19 04:58:17,958 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-19 04:58:17,983 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-19 04:58:18,175 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-19 04:58:18,177 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-19 04:58:24,229 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 624 631) no Hoare annotation was computed. [2023-11-19 04:58:24,229 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 624 631) the Hoare annotation is: (let ((.cse3 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (and (<= ~waterLevel~0 1) (or (not (= ~waterLevel~0 1)) .cse3)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~methaneLevelCritical~0 1))) (or .cse0 .cse1 .cse2 .cse3 (not (= ~methaneLevelCritical~0 0)) .cse4)))) [2023-11-19 04:58:24,230 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 531 537) no Hoare annotation was computed. [2023-11-19 04:58:24,230 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 531 537) the Hoare annotation is: true [2023-11-19 04:58:24,230 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 893 904) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (let ((.cse5 (= 0 ~systemActive~0)) (.cse6 (not (= ~waterLevel~0 1))) (.cse7 (not .cse0)) (.cse1 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (not (= 2 ~waterLevel~0))) (.cse10 (= ~methaneLevelCritical~0 1)) (.cse9 (not (= |old(~methaneLevelCritical~0)| 1))) (.cse8 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse1 .cse7 .cse2 .cse3 .cse8) (or .cse0 .cse3 .cse4 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0) .cse9 .cse5) (or .cse6 .cse7 .cse3 .cse10 .cse9 .cse8) (or .cse1 .cse2 .cse3 .cse4 .cse8) (or .cse3 .cse4 .cse10 .cse9 .cse8)))) [2023-11-19 04:58:24,230 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 893 904) no Hoare annotation was computed. [2023-11-19 04:58:24,230 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 905 913) the Hoare annotation is: true [2023-11-19 04:58:24,231 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 905 913) no Hoare annotation was computed. [2023-11-19 04:58:24,231 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 767 796) no Hoare annotation was computed. [2023-11-19 04:58:24,231 INFO L899 garLoopResultBuilder]: For program point L792(lines 767 796) no Hoare annotation was computed. [2023-11-19 04:58:24,231 INFO L899 garLoopResultBuilder]: For program point L788(line 788) no Hoare annotation was computed. [2023-11-19 04:58:24,231 INFO L899 garLoopResultBuilder]: For program point L781(lines 781 785) no Hoare annotation was computed. [2023-11-19 04:58:24,231 INFO L902 garLoopResultBuilder]: At program point L781-1(lines 781 785) the Hoare annotation is: true [2023-11-19 04:58:24,232 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 767 796) the Hoare annotation is: true [2023-11-19 04:58:24,232 INFO L902 garLoopResultBuilder]: At program point L777-2(lines 777 791) the Hoare annotation is: true [2023-11-19 04:58:24,232 INFO L902 garLoopResultBuilder]: At program point L773(line 773) the Hoare annotation is: true [2023-11-19 04:58:24,232 INFO L899 garLoopResultBuilder]: For program point L773-1(line 773) no Hoare annotation was computed. [2023-11-19 04:58:24,232 INFO L895 garLoopResultBuilder]: At program point L605(line 605) the Hoare annotation is: (let ((.cse8 (= |old(~pumpRunning~0)| 0))) (let ((.cse5 (not .cse8)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse7 (= 0 ~systemActive~0))) (and (or .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse5 .cse0 .cse6 .cse1 .cse4 .cse7) (or .cse5 .cse0 .cse1 .cse2 .cse3 .cse7) (or .cse5 .cse0 .cse6 .cse1 .cse2) (or .cse1 .cse8 .cse2 .cse3 (and (not (= ~pumpRunning~0 0)) (= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) .cse7) (or .cse1 .cse8 .cse4 .cse3 .cse7)))) [2023-11-19 04:58:24,233 INFO L895 garLoopResultBuilder]: At program point L601(line 601) the Hoare annotation is: (let ((.cse5 (= |old(~pumpRunning~0)| 0))) (let ((.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse8 (not .cse5)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 1))) (.cse4 (and (not (= ~pumpRunning~0 0)) (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (not (= |timeShift_processEnvironment_~tmp~6#1| 0)))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse7 (= 0 ~systemActive~0))) (and (or .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse5 .cse6 .cse3 .cse7) (or .cse8 .cse0 .cse9 .cse1 .cse6 .cse7) (or .cse8 .cse0 .cse1 .cse2 .cse3 .cse7) (or .cse8 .cse0 .cse9 .cse1 .cse2) (or .cse8 .cse0 .cse1 .cse6 .cse3 .cse7) (or .cse4 .cse1 .cse5 .cse2 .cse3 .cse7)))) [2023-11-19 04:58:24,233 INFO L895 garLoopResultBuilder]: At program point L742(line 742) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse11 (= ~pumpRunning~0 0))) (let ((.cse4 (and .cse11 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse12 (not .cse11)) (.cse13 (= 2 ~waterLevel~0)) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse9 (not .cse1)) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse10 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse0 .cse8 .cse3) (or .cse0 .cse1 .cse8 .cse3 .cse4 .cse5) (or .cse9 .cse6 .cse7 .cse10 .cse0 .cse8 .cse5) (or .cse9 .cse6 .cse10 .cse0 .cse8 (and .cse11 (= ~waterLevel~0 1))) (or .cse9 .cse6 .cse0 (and .cse7 .cse12 .cse13) .cse2 .cse3 .cse5) (or .cse9 .cse6 .cse0 .cse8 (and .cse12 .cse13) .cse3 .cse5) (or .cse9 .cse6 (and .cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse10 .cse0 .cse2 .cse5)))) [2023-11-19 04:58:24,233 INFO L899 garLoopResultBuilder]: For program point L742-1(line 742) no Hoare annotation was computed. [2023-11-19 04:58:24,233 INFO L895 garLoopResultBuilder]: At program point L610(line 610) the Hoare annotation is: (let ((.cse12 (= |old(~pumpRunning~0)| 0)) (.cse8 (= ~pumpRunning~0 0)) (.cse9 (= ~methAndRunningLastTime~0 0))) (let ((.cse3 (and .cse8 .cse9 (= 2 ~waterLevel~0))) (.cse6 (not .cse12)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse5 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse11 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse3 .cse5 .cse4) (or .cse6 .cse0 .cse7 .cse1 (and .cse8 .cse9 .cse10) .cse2 .cse11) (or .cse6 .cse0 .cse9 .cse7 .cse1 .cse5 .cse11) (or .cse6 .cse0 (and .cse8 .cse10) .cse7 .cse1 .cse5) (or .cse1 .cse12 .cse5 .cse4 .cse11) (or .cse1 .cse12 .cse2 .cse4 .cse11)))) [2023-11-19 04:58:24,234 INFO L899 garLoopResultBuilder]: For program point L610-1(lines 591 615) no Hoare annotation was computed. [2023-11-19 04:58:24,234 INFO L899 garLoopResultBuilder]: For program point L511-1(lines 510 529) no Hoare annotation was computed. [2023-11-19 04:58:24,234 INFO L899 garLoopResultBuilder]: For program point L599(lines 599 607) no Hoare annotation was computed. [2023-11-19 04:58:24,234 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2023-11-19 04:58:24,234 INFO L899 garLoopResultBuilder]: For program point L595(lines 595 612) no Hoare annotation was computed. [2023-11-19 04:58:24,234 INFO L899 garLoopResultBuilder]: For program point L748(lines 748 758) no Hoare annotation was computed. [2023-11-19 04:58:24,235 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 507 530) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse13 (= 2 ~waterLevel~0)) (.cse12 (= ~pumpRunning~0 0)) (.cse10 (= ~methAndRunningLastTime~0 0))) (let ((.cse7 (and .cse12 .cse10 (= ~waterLevel~0 1))) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (and (not .cse12) .cse13)) (.cse6 (not .cse1)) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse11 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse8 .cse9 .cse0 .cse2) (or .cse8 .cse10 .cse0 .cse2 .cse4) (or .cse6 .cse7 .cse8 .cse9 .cse0 .cse11) (or .cse6 .cse8 .cse0 (and .cse12 .cse13) .cse2 .cse4 .cse5) (or .cse0 .cse1 .cse11 .cse3 .cse4 .cse5) (or .cse6 .cse8 .cse0 (and .cse12 .cse10 .cse13) .cse11 .cse4 .cse5)))) [2023-11-19 04:58:24,235 INFO L899 garLoopResultBuilder]: For program point L744(lines 744 761) no Hoare annotation was computed. [2023-11-19 04:58:24,235 INFO L899 garLoopResultBuilder]: For program point L744-1(lines 736 764) no Hoare annotation was computed. [2023-11-19 04:58:24,235 INFO L895 garLoopResultBuilder]: At program point L637(line 637) the Hoare annotation is: (let ((.cse8 (= |old(~pumpRunning~0)| 0))) (let ((.cse5 (not (= |old(~waterLevel~0)| 1))) (.cse4 (not .cse8)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse9 (and (not (= ~pumpRunning~0 0)) (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (.cse7 (= 0 ~systemActive~0))) (and (or .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse1 .cse6 .cse7) (or .cse4 .cse0 .cse1 .cse2 .cse3 .cse7) (or .cse4 .cse0 .cse5 .cse1 .cse2) (or .cse4 .cse0 .cse1 .cse6 .cse3 .cse7) (or .cse1 .cse8 .cse6 .cse3 .cse9 .cse7) (or .cse1 .cse8 .cse2 .cse3 .cse9 .cse7)))) [2023-11-19 04:58:24,235 INFO L899 garLoopResultBuilder]: For program point L637-1(line 637) no Hoare annotation was computed. [2023-11-19 04:58:24,236 INFO L899 garLoopResultBuilder]: For program point L749(lines 749 755) no Hoare annotation was computed. [2023-11-19 04:58:24,236 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 507 530) no Hoare annotation was computed. [2023-11-19 04:58:24,236 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2023-11-19 04:58:24,236 INFO L899 garLoopResultBuilder]: For program point L518-1(lines 518 524) no Hoare annotation was computed. [2023-11-19 04:58:24,236 INFO L899 garLoopResultBuilder]: For program point L93(lines 93 99) no Hoare annotation was computed. [2023-11-19 04:58:24,236 INFO L899 garLoopResultBuilder]: For program point L93-1(lines 93 99) no Hoare annotation was computed. [2023-11-19 04:58:24,237 INFO L899 garLoopResultBuilder]: For program point L122(lines 63 126) no Hoare annotation was computed. [2023-11-19 04:58:24,237 INFO L895 garLoopResultBuilder]: At program point L85(line 85) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0))) (let ((.cse7 (= ~methAndRunningLastTime~0 0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse9 (= ~waterLevel~0 1)) (.cse0 (not .cse6)) (.cse1 (= 2 ~waterLevel~0)) (.cse3 (= 1 ~systemActive~0)) (.cse8 (= ~methaneLevelCritical~0 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse3 .cse8 .cse4 .cse9 .cse5) (and .cse6 .cse7 .cse2 .cse3 .cse4 .cse9 .cse5) (and .cse0 .cse1 .cse3 .cse8 .cse4 .cse5)))) [2023-11-19 04:58:24,237 INFO L895 garLoopResultBuilder]: At program point L119(lines 72 120) the Hoare annotation is: false [2023-11-19 04:58:24,237 INFO L899 garLoopResultBuilder]: For program point L74(lines 73 118) no Hoare annotation was computed. [2023-11-19 04:58:24,237 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-19 04:58:24,238 INFO L895 garLoopResultBuilder]: At program point L95(line 95) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0))) (let ((.cse9 (= ~waterLevel~0 1)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (not .cse6)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse3 (= 1 ~systemActive~0)) (.cse8 (= ~methaneLevelCritical~0 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse3 .cse8 .cse4 .cse9 .cse5) (and .cse6 .cse7 .cse2 .cse3 .cse4 .cse9 .cse5) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse3 .cse8 .cse4 .cse5) (and .cse7 .cse1 .cse3 .cse8 .cse4 .cse5)))) [2023-11-19 04:58:24,238 INFO L895 garLoopResultBuilder]: At program point L116(lines 73 118) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0))) (let ((.cse7 (= ~methAndRunningLastTime~0 0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse9 (= ~waterLevel~0 1)) (.cse0 (not .cse6)) (.cse1 (= 2 ~waterLevel~0)) (.cse3 (= 1 ~systemActive~0)) (.cse8 (= ~methaneLevelCritical~0 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse3 .cse8 .cse4 .cse9 .cse5) (and .cse6 .cse7 .cse2 .cse3 .cse4 .cse9 .cse5) (and .cse0 .cse1 .cse3 .cse8 .cse4 .cse5)))) [2023-11-19 04:58:24,238 INFO L899 garLoopResultBuilder]: For program point L83(lines 83 89) no Hoare annotation was computed. [2023-11-19 04:58:24,238 INFO L899 garLoopResultBuilder]: For program point L83-1(lines 83 89) no Hoare annotation was computed. [2023-11-19 04:58:24,238 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-19 04:58:24,238 INFO L899 garLoopResultBuilder]: For program point L852(lines 852 859) no Hoare annotation was computed. [2023-11-19 04:58:24,239 INFO L899 garLoopResultBuilder]: For program point L852-2(lines 852 859) no Hoare annotation was computed. [2023-11-19 04:58:24,239 INFO L895 garLoopResultBuilder]: At program point L109-2(lines 103 114) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0))) (let ((.cse9 (= ~waterLevel~0 1)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (not .cse6)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse3 (= 1 ~systemActive~0)) (.cse8 (= ~methaneLevelCritical~0 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse3 .cse8 .cse4 .cse9 .cse5) (and .cse6 .cse7 .cse2 .cse3 .cse4 .cse9 .cse5) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse3 .cse8 .cse4 .cse5) (and .cse7 .cse1 .cse3 .cse8 .cse4 .cse5)))) [2023-11-19 04:58:24,239 INFO L899 garLoopResultBuilder]: For program point L543(lines 543 560) no Hoare annotation was computed. [2023-11-19 04:58:24,239 INFO L895 garLoopResultBuilder]: At program point L558(line 558) the Hoare annotation is: (let ((.cse2 (not (= 2 ~waterLevel~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (< 1 ~waterLevel~0)) (.cse3 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse6 .cse4) (or .cse0 .cse1 .cse2 .cse6 .cse4) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse3) (or .cse0 .cse1 .cse5 .cse3 .cse4))) [2023-11-19 04:58:24,239 INFO L899 garLoopResultBuilder]: For program point L558-1(lines 539 563) no Hoare annotation was computed. [2023-11-19 04:58:24,240 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 539 563) the Hoare annotation is: (let ((.cse6 (not (= 2 ~waterLevel~0))) (.cse3 (< 1 ~waterLevel~0)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= ~methAndRunningLastTime~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse6 .cse7 .cse5) (or .cse0 .cse1 .cse2 .cse3 .cse7 .cse5) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse4))) [2023-11-19 04:58:24,240 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 539 563) no Hoare annotation was computed. [2023-11-19 04:58:24,240 INFO L895 garLoopResultBuilder]: At program point L553(line 553) the Hoare annotation is: (let ((.cse2 (not (= 2 ~waterLevel~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse6 (< 1 ~waterLevel~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0))) (.cse3 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse1 .cse6 .cse5 .cse7 .cse4) (or .cse0 .cse1 .cse6 .cse7 .cse3 .cse4) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse7 .cse3))) [2023-11-19 04:58:24,240 INFO L899 garLoopResultBuilder]: For program point L547(lines 547 555) no Hoare annotation was computed. [2023-11-19 04:58:24,240 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 881 892) no Hoare annotation was computed. [2023-11-19 04:58:24,241 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 881 892) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (let ((.cse1 (= 2 ~waterLevel~0)) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not .cse0)) (.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse8 (= 0 ~systemActive~0)) (.cse9 (= ~waterLevel~0 1)) (.cse10 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse2 .cse7 .cse8 .cse9 .cse10) (or .cse0 .cse1 .cse2 .cse7 .cse4) (or .cse5 .cse6 .cse2 .cse3 .cse8 .cse9 .cse10)))) [2023-11-19 04:58:24,241 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 565 589) the Hoare annotation is: (let ((.cse7 (= |old(~pumpRunning~0)| 0))) (let ((.cse9 (not (= 2 ~waterLevel~0))) (.cse3 (< 1 ~waterLevel~0)) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= ~methAndRunningLastTime~0 0))) (.cse6 (not (= ~waterLevel~0 1))) (.cse0 (not .cse7)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (< 2 ~waterLevel~0) (and .cse6 (<= ~waterLevel~0 1)) (not .cse1) .cse2 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse9 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse9 .cse8 .cse5) (or .cse0 .cse1 .cse2 .cse3 .cse8 .cse5) (or .cse6 .cse0 .cse1 .cse2 .cse4)))) [2023-11-19 04:58:24,241 INFO L895 garLoopResultBuilder]: At program point L579(line 579) the Hoare annotation is: (let ((.cse8 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (not (= 2 ~waterLevel~0))) (.cse7 (not (= ~waterLevel~0 1))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not .cse8)) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (< 1 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 1))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse5 .cse3) (or .cse4 .cse0 .cse6 .cse2 .cse3) (or .cse7 .cse4 .cse0 .cse5) (or (< 2 ~waterLevel~0) (and .cse7 (<= ~waterLevel~0 1)) .cse0 .cse8 .cse2) (or .cse4 .cse0 .cse6 .cse5 .cse3)))) [2023-11-19 04:58:24,241 INFO L895 garLoopResultBuilder]: At program point L575(line 575) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0))) (let ((.cse5 (not (= 2 ~waterLevel~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= ~waterLevel~0 1))) (.cse4 (not .cse2)) (.cse1 (not (= 1 ~systemActive~0))) (.cse8 (< 1 ~waterLevel~0)) (.cse6 (not (= ~methaneLevelCritical~0 1))) (.cse7 (not (= ~methAndRunningLastTime~0 0)))) (and (or (< 2 ~waterLevel~0) (and .cse0 (<= ~waterLevel~0 1)) (and (not (= ~pumpRunning~0 0)) (<= 1 |processEnvironment__wrappee__lowWaterSensor_~tmp~5#1|)) .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse5 .cse6 .cse7) (or .cse4 .cse1 .cse8 .cse3 .cse7) (or .cse4 .cse1 .cse5 .cse3 .cse7) (or .cse0 .cse4 .cse1 .cse6) (or .cse4 .cse1 .cse8 .cse6 .cse7)))) [2023-11-19 04:58:24,242 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 565 589) no Hoare annotation was computed. [2023-11-19 04:58:24,242 INFO L899 garLoopResultBuilder]: For program point L573(lines 573 581) no Hoare annotation was computed. [2023-11-19 04:58:24,242 INFO L899 garLoopResultBuilder]: For program point L569(lines 569 586) no Hoare annotation was computed. [2023-11-19 04:58:24,242 INFO L895 garLoopResultBuilder]: At program point L584(line 584) the Hoare annotation is: (let ((.cse7 (= |old(~pumpRunning~0)| 0))) (let ((.cse9 (not (= 2 ~waterLevel~0))) (.cse3 (< 1 ~waterLevel~0)) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= ~methAndRunningLastTime~0 0))) (.cse6 (not (= ~waterLevel~0 1))) (.cse0 (not .cse7)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (< 2 ~waterLevel~0) (and .cse6 (<= ~waterLevel~0 1)) .cse2 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse9 .cse4 .cse5) (or .cse1 .cse2 .cse9 .cse8 .cse5) (or .cse0 .cse1 .cse2 .cse3 .cse8 .cse5) (or .cse6 .cse0 .cse1 .cse2 .cse4)))) [2023-11-19 04:58:24,242 INFO L899 garLoopResultBuilder]: For program point L584-1(lines 565 589) no Hoare annotation was computed. [2023-11-19 04:58:24,245 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 04:58:24,247 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-19 04:58:24,263 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 04:58:24 BoogieIcfgContainer [2023-11-19 04:58:24,263 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-19 04:58:24,264 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-19 04:58:24,264 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-19 04:58:24,264 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-19 04:58:24,265 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 04:57:40" (3/4) ... [2023-11-19 04:58:24,267 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-19 04:58:24,270 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-19 04:58:24,270 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-19 04:58:24,271 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-19 04:58:24,271 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-19 04:58:24,271 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-19 04:58:24,271 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-19 04:58:24,271 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-19 04:58:24,272 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-19 04:58:24,272 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2023-11-19 04:58:24,281 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 46 nodes and edges [2023-11-19 04:58:24,282 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 13 nodes and edges [2023-11-19 04:58:24,283 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-19 04:58:24,284 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-19 04:58:24,285 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-19 04:58:24,311 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (!((pumpRunning == 0)) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive)) && (((((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (waterLevel == 1))) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((\old(waterLevel) == 2)))) && (((((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (waterLevel == 1))) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || !((methaneLevelCritical == 1)))) && ((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((methaneLevelCritical == 0))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && (((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 1))) || (!((pumpRunning == 0)) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && ((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (2 == waterLevel))) || !((methaneLevelCritical == 1))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) [2023-11-19 04:58:24,350 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (!((pumpRunning == 0)) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive)) && (((((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (waterLevel == 1))) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((\old(waterLevel) == 2)))) && (((((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (waterLevel == 1))) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || !((methaneLevelCritical == 1)))) && ((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((methaneLevelCritical == 0))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && (((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 1))) || (!((pumpRunning == 0)) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && ((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (2 == waterLevel))) || !((methaneLevelCritical == 1))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) [2023-11-19 04:58:24,400 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/witness.graphml [2023-11-19 04:58:24,400 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/witness.yml [2023-11-19 04:58:24,401 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-19 04:58:24,401 INFO L158 Benchmark]: Toolchain (without parser) took 45998.67ms. Allocated memory was 180.4MB in the beginning and 929.0MB in the end (delta: 748.7MB). Free memory was 146.3MB in the beginning and 612.0MB in the end (delta: -465.7MB). Peak memory consumption was 284.5MB. Max. memory is 16.1GB. [2023-11-19 04:58:24,402 INFO L158 Benchmark]: CDTParser took 0.39ms. Allocated memory is still 113.2MB. Free memory is still 62.6MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-19 04:58:24,402 INFO L158 Benchmark]: CACSL2BoogieTranslator took 691.20ms. Allocated memory is still 180.4MB. Free memory was 145.8MB in the beginning and 126.3MB in the end (delta: 19.5MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-19 04:58:24,403 INFO L158 Benchmark]: Boogie Procedure Inliner took 86.92ms. Allocated memory is still 180.4MB. Free memory was 126.3MB in the beginning and 124.2MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-19 04:58:24,403 INFO L158 Benchmark]: Boogie Preprocessor took 78.48ms. Allocated memory is still 180.4MB. Free memory was 124.2MB in the beginning and 122.7MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-19 04:58:24,403 INFO L158 Benchmark]: RCFGBuilder took 940.65ms. Allocated memory is still 180.4MB. Free memory was 122.6MB in the beginning and 149.8MB in the end (delta: -27.2MB). Peak memory consumption was 32.7MB. Max. memory is 16.1GB. [2023-11-19 04:58:24,404 INFO L158 Benchmark]: TraceAbstraction took 44053.97ms. Allocated memory was 180.4MB in the beginning and 929.0MB in the end (delta: 748.7MB). Free memory was 149.0MB in the beginning and 620.4MB in the end (delta: -471.4MB). Peak memory consumption was 557.9MB. Max. memory is 16.1GB. [2023-11-19 04:58:24,404 INFO L158 Benchmark]: Witness Printer took 136.94ms. Allocated memory is still 929.0MB. Free memory was 620.4MB in the beginning and 612.0MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-19 04:58:24,406 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.39ms. Allocated memory is still 113.2MB. Free memory is still 62.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 691.20ms. Allocated memory is still 180.4MB. Free memory was 145.8MB in the beginning and 126.3MB in the end (delta: 19.5MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 86.92ms. Allocated memory is still 180.4MB. Free memory was 126.3MB in the beginning and 124.2MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 78.48ms. Allocated memory is still 180.4MB. Free memory was 124.2MB in the beginning and 122.7MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 940.65ms. Allocated memory is still 180.4MB. Free memory was 122.6MB in the beginning and 149.8MB in the end (delta: -27.2MB). Peak memory consumption was 32.7MB. Max. memory is 16.1GB. * TraceAbstraction took 44053.97ms. Allocated memory was 180.4MB in the beginning and 929.0MB in the end (delta: 748.7MB). Free memory was 149.0MB in the beginning and 620.4MB in the end (delta: -471.4MB). Peak memory consumption was 557.9MB. Max. memory is 16.1GB. * Witness Printer took 136.94ms. Allocated memory is still 929.0MB. Free memory was 620.4MB in the beginning and 612.0MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] - GenericResultAtLocation [Line: 58]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [58] - GenericResultAtLocation [Line: 127]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [127] - GenericResultAtLocation [Line: 493]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [493] - GenericResultAtLocation [Line: 726]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [726] - GenericResultAtLocation [Line: 765]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [765] - GenericResultAtLocation [Line: 865]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [865] - GenericResultAtLocation [Line: 969]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [969] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 69 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 44.0s, OverallIterations: 9, TraceHistogramMax: 6, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 12.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2600 SdHoareTripleChecker+Valid, 5.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2588 mSDsluCounter, 1883 SdHoareTripleChecker+Invalid, 4.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1349 mSDsCounter, 1554 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 6365 IncrementalHoareTripleChecker+Invalid, 7919 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1554 mSolverCounterUnsat, 534 mSDtfsCounter, 6365 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 942 GetRequests, 590 SyntacticMatches, 12 SemanticMatches, 340 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18071 ImplicationChecksByTransitivity, 18.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1639occurred in iteration=8, InterpolantAutomatonStates: 214, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 9 MinimizatonAttempts, 366 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 27 LocationsWithAnnotation, 1364 PreInvPairs, 1429 NumberOfFragments, 2695 HoareAnnotationTreeSize, 1364 FomulaSimplifications, 11997 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 27 FomulaSimplificationsInter, 15523 FormulaSimplificationTreeSizeReductionInter, 5.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 4.8s InterpolantComputationTime, 629 NumberOfCodeBlocks, 629 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 834 ConstructedInterpolants, 0 QuantifiedInterpolants, 2546 SizeOfPredicates, 17 NumberOfNonLiveVariables, 786 ConjunctsInSsa, 54 ConjunctsInUnsatCore, 13 InterpolantComputations, 7 PerfectInterpolantSequences, 441/580 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 777]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: ((((((((!((pumpRunning == 0)) && (2 == waterLevel)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) && (tmp == 1)) || (((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (methaneLevelCritical == 1)) && (splverifierCounter == 0)) && (waterLevel == 1)) && (tmp == 1))) || (((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel == 1)) && (tmp == 1))) || (((((!((pumpRunning == 0)) && (2 == waterLevel)) && (1 == systemActive)) && (methaneLevelCritical == 1)) && (splverifierCounter == 0)) && (tmp == 1))) - InvariantResult [Line: 507]: Loop Invariant Derived loop invariant: (((((((((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (!((pumpRunning == 0)) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive)) && (((((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (waterLevel == 1))) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((\old(waterLevel) == 2)))) && (((((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (waterLevel == 1))) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || !((methaneLevelCritical == 1)))) && ((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((methaneLevelCritical == 0))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && (((((!((1 == systemActive)) || (\old(pumpRunning) == 0)) || !((methaneLevelCritical == 1))) || (!((pumpRunning == 0)) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && ((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (2 == waterLevel))) || !((methaneLevelCritical == 1))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) RESULT: Ultimate proved your program to be correct! [2023-11-19 04:58:24,443 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_020cac3a-7324-44b5-9453-090838544fc0/bin/utaipan-verify-t7M7D8N6sZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE