./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product46.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product46.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 5780768f89256c506186805750dd5ec09f07e7c3b9baffd6ca5edbcb4a88d3de --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-12-02 12:29:28,157 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-12-02 12:29:28,225 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf [2023-12-02 12:29:28,230 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-12-02 12:29:28,231 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-12-02 12:29:28,252 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-12-02 12:29:28,253 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-12-02 12:29:28,253 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-12-02 12:29:28,254 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-12-02 12:29:28,254 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-12-02 12:29:28,255 INFO L153 SettingsManager]: * User list type=DISABLED [2023-12-02 12:29:28,255 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-12-02 12:29:28,256 INFO L153 SettingsManager]: * Explicit value domain=true [2023-12-02 12:29:28,257 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-12-02 12:29:28,257 INFO L153 SettingsManager]: * Octagon Domain=false [2023-12-02 12:29:28,257 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-12-02 12:29:28,258 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-12-02 12:29:28,259 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-12-02 12:29:28,259 INFO L153 SettingsManager]: * Interval Domain=false [2023-12-02 12:29:28,260 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-12-02 12:29:28,260 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-12-02 12:29:28,263 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-12-02 12:29:28,264 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-12-02 12:29:28,264 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-12-02 12:29:28,265 INFO L153 SettingsManager]: * sizeof long=4 [2023-12-02 12:29:28,265 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-12-02 12:29:28,266 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-12-02 12:29:28,266 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-12-02 12:29:28,267 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-12-02 12:29:28,267 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-12-02 12:29:28,267 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-12-02 12:29:28,268 INFO L153 SettingsManager]: * sizeof long double=12 [2023-12-02 12:29:28,268 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-12-02 12:29:28,268 INFO L153 SettingsManager]: * Use constant arrays=true [2023-12-02 12:29:28,269 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-12-02 12:29:28,269 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-12-02 12:29:28,269 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-12-02 12:29:28,269 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 12:29:28,269 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-12-02 12:29:28,270 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-12-02 12:29:28,270 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-12-02 12:29:28,270 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-12-02 12:29:28,270 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-12-02 12:29:28,271 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-12-02 12:29:28,271 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-12-02 12:29:28,271 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-12-02 12:29:28,271 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-12-02 12:29:28,271 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 5780768f89256c506186805750dd5ec09f07e7c3b9baffd6ca5edbcb4a88d3de [2023-12-02 12:29:28,476 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-12-02 12:29:28,506 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-12-02 12:29:28,509 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-12-02 12:29:28,510 INFO L270 PluginConnector]: Initializing CDTParser... [2023-12-02 12:29:28,510 INFO L274 PluginConnector]: CDTParser initialized [2023-12-02 12:29:28,512 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/../../sv-benchmarks/c/product-lines/minepump_spec1_product46.cil.c [2023-12-02 12:29:31,375 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-12-02 12:29:31,586 INFO L384 CDTParser]: Found 1 translation units. [2023-12-02 12:29:31,587 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/sv-benchmarks/c/product-lines/minepump_spec1_product46.cil.c [2023-12-02 12:29:31,599 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/data/edd867e64/a02473fe0b1349df9c42613995d17d57/FLAG6ec6b5fcf [2023-12-02 12:29:31,612 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/data/edd867e64/a02473fe0b1349df9c42613995d17d57 [2023-12-02 12:29:31,615 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-12-02 12:29:31,616 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-12-02 12:29:31,618 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-12-02 12:29:31,618 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-12-02 12:29:31,624 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-12-02 12:29:31,625 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 12:29:31" (1/1) ... [2023-12-02 12:29:31,626 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@23f21a41 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:29:31, skipping insertion in model container [2023-12-02 12:29:31,626 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 12:29:31" (1/1) ... [2023-12-02 12:29:31,677 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-12-02 12:29:31,874 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/sv-benchmarks/c/product-lines/minepump_spec1_product46.cil.c[7019,7032] [2023-12-02 12:29:31,944 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 12:29:31,957 INFO L202 MainTranslator]: Completed pre-run [2023-12-02 12:29:31,969 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [49] [2023-12-02 12:29:31,971 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [121] [2023-12-02 12:29:31,972 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [333] [2023-12-02 12:29:31,972 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [432] [2023-12-02 12:29:31,972 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [467] [2023-12-02 12:29:31,972 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [476] [2023-12-02 12:29:31,973 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [502] [2023-12-02 12:29:31,973 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [597] [2023-12-02 12:29:31,997 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/sv-benchmarks/c/product-lines/minepump_spec1_product46.cil.c[7019,7032] [2023-12-02 12:29:32,040 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 12:29:32,064 INFO L206 MainTranslator]: Completed translation [2023-12-02 12:29:32,064 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:29:32 WrapperNode [2023-12-02 12:29:32,065 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-12-02 12:29:32,066 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-12-02 12:29:32,066 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-12-02 12:29:32,066 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-12-02 12:29:32,075 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:29:32" (1/1) ... [2023-12-02 12:29:32,093 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:29:32" (1/1) ... [2023-12-02 12:29:32,124 INFO L138 Inliner]: procedures = 55, calls = 100, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 188 [2023-12-02 12:29:32,124 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-12-02 12:29:32,125 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-12-02 12:29:32,126 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-12-02 12:29:32,126 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-12-02 12:29:32,138 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:29:32" (1/1) ... [2023-12-02 12:29:32,138 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:29:32" (1/1) ... [2023-12-02 12:29:32,141 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:29:32" (1/1) ... [2023-12-02 12:29:32,141 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:29:32" (1/1) ... [2023-12-02 12:29:32,147 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:29:32" (1/1) ... [2023-12-02 12:29:32,152 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:29:32" (1/1) ... [2023-12-02 12:29:32,154 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:29:32" (1/1) ... [2023-12-02 12:29:32,156 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:29:32" (1/1) ... [2023-12-02 12:29:32,159 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-12-02 12:29:32,160 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-12-02 12:29:32,160 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-12-02 12:29:32,161 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-12-02 12:29:32,162 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:29:32" (1/1) ... [2023-12-02 12:29:32,169 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 12:29:32,181 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 12:29:32,194 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-12-02 12:29:32,203 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-12-02 12:29:32,232 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-12-02 12:29:32,233 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-12-02 12:29:32,233 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-12-02 12:29:32,233 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-12-02 12:29:32,233 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-12-02 12:29:32,233 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-12-02 12:29:32,233 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-12-02 12:29:32,234 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-12-02 12:29:32,234 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-12-02 12:29:32,234 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-12-02 12:29:32,234 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-12-02 12:29:32,234 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-12-02 12:29:32,234 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-12-02 12:29:32,235 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-12-02 12:29:32,235 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-12-02 12:29:32,235 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-12-02 12:29:32,235 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-12-02 12:29:32,235 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-12-02 12:29:32,235 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-12-02 12:29:32,236 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-12-02 12:29:32,339 INFO L241 CfgBuilder]: Building ICFG [2023-12-02 12:29:32,342 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-12-02 12:29:32,560 INFO L282 CfgBuilder]: Performing block encoding [2023-12-02 12:29:32,661 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-12-02 12:29:32,661 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-12-02 12:29:32,663 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 12:29:32 BoogieIcfgContainer [2023-12-02 12:29:32,663 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-12-02 12:29:32,665 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-12-02 12:29:32,665 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-12-02 12:29:32,668 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-12-02 12:29:32,668 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 12:29:31" (1/3) ... [2023-12-02 12:29:32,669 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@473f4b3f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 12:29:32, skipping insertion in model container [2023-12-02 12:29:32,669 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 12:29:32" (2/3) ... [2023-12-02 12:29:32,669 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@473f4b3f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 12:29:32, skipping insertion in model container [2023-12-02 12:29:32,669 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 12:29:32" (3/3) ... [2023-12-02 12:29:32,671 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product46.cil.c [2023-12-02 12:29:32,686 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-12-02 12:29:32,686 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-12-02 12:29:32,730 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-12-02 12:29:32,736 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3d6dc433, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-12-02 12:29:32,736 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-12-02 12:29:32,740 INFO L276 IsEmpty]: Start isEmpty. Operand has 63 states, 39 states have (on average 1.3846153846153846) internal successors, (54), 47 states have internal predecessors, (54), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2023-12-02 12:29:32,748 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-12-02 12:29:32,748 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 12:29:32,749 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 12:29:32,749 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 12:29:32,755 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 12:29:32,755 INFO L85 PathProgramCache]: Analyzing trace with hash 151782703, now seen corresponding path program 1 times [2023-12-02 12:29:32,766 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 12:29:32,767 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [960453946] [2023-12-02 12:29:32,767 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:29:32,767 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 12:29:32,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:29:32,953 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 12:29:32,954 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 12:29:32,955 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [960453946] [2023-12-02 12:29:32,956 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [960453946] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 12:29:32,956 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 12:29:32,956 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-12-02 12:29:32,958 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2009673342] [2023-12-02 12:29:32,959 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 12:29:32,963 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-12-02 12:29:32,964 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 12:29:32,996 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-12-02 12:29:32,997 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 12:29:32,999 INFO L87 Difference]: Start difference. First operand has 63 states, 39 states have (on average 1.3846153846153846) internal successors, (54), 47 states have internal predecessors, (54), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 12:29:33,069 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 12:29:33,070 INFO L93 Difference]: Finished difference Result 124 states and 165 transitions. [2023-12-02 12:29:33,071 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-12-02 12:29:33,073 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 16 [2023-12-02 12:29:33,073 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 12:29:33,083 INFO L225 Difference]: With dead ends: 124 [2023-12-02 12:29:33,083 INFO L226 Difference]: Without dead ends: 58 [2023-12-02 12:29:33,088 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 12:29:33,092 INFO L413 NwaCegarLoop]: 62 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 62 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 12:29:33,094 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 62 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 12:29:33,113 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2023-12-02 12:29:33,136 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 58. [2023-12-02 12:29:33,138 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58 states, 36 states have (on average 1.2777777777777777) internal successors, (46), 43 states have internal predecessors, (46), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2023-12-02 12:29:33,140 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58 states to 58 states and 73 transitions. [2023-12-02 12:29:33,142 INFO L78 Accepts]: Start accepts. Automaton has 58 states and 73 transitions. Word has length 16 [2023-12-02 12:29:33,142 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 12:29:33,142 INFO L495 AbstractCegarLoop]: Abstraction has 58 states and 73 transitions. [2023-12-02 12:29:33,143 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 12:29:33,143 INFO L276 IsEmpty]: Start isEmpty. Operand 58 states and 73 transitions. [2023-12-02 12:29:33,145 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-12-02 12:29:33,145 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 12:29:33,145 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 12:29:33,146 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-12-02 12:29:33,146 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 12:29:33,147 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 12:29:33,147 INFO L85 PathProgramCache]: Analyzing trace with hash 374561926, now seen corresponding path program 1 times [2023-12-02 12:29:33,147 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 12:29:33,148 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1328032507] [2023-12-02 12:29:33,148 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:29:33,148 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 12:29:33,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:29:33,243 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 12:29:33,244 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 12:29:33,244 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1328032507] [2023-12-02 12:29:33,244 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1328032507] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 12:29:33,244 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 12:29:33,244 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 12:29:33,245 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [643529473] [2023-12-02 12:29:33,245 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 12:29:33,246 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 12:29:33,246 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 12:29:33,247 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 12:29:33,247 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 12:29:33,248 INFO L87 Difference]: Start difference. First operand 58 states and 73 transitions. Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 12:29:33,290 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 12:29:33,290 INFO L93 Difference]: Finished difference Result 93 states and 117 transitions. [2023-12-02 12:29:33,291 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 12:29:33,291 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-12-02 12:29:33,291 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 12:29:33,293 INFO L225 Difference]: With dead ends: 93 [2023-12-02 12:29:33,293 INFO L226 Difference]: Without dead ends: 50 [2023-12-02 12:29:33,294 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 12:29:33,296 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 7 mSDsluCounter, 39 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 12:29:33,296 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 87 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 12:29:33,298 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2023-12-02 12:29:33,305 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 50. [2023-12-02 12:29:33,305 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50 states, 31 states have (on average 1.2903225806451613) internal successors, (40), 38 states have internal predecessors, (40), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-12-02 12:29:33,307 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50 states to 50 states and 62 transitions. [2023-12-02 12:29:33,307 INFO L78 Accepts]: Start accepts. Automaton has 50 states and 62 transitions. Word has length 17 [2023-12-02 12:29:33,307 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 12:29:33,308 INFO L495 AbstractCegarLoop]: Abstraction has 50 states and 62 transitions. [2023-12-02 12:29:33,308 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 12:29:33,308 INFO L276 IsEmpty]: Start isEmpty. Operand 50 states and 62 transitions. [2023-12-02 12:29:33,309 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-12-02 12:29:33,309 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 12:29:33,310 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 12:29:33,310 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-12-02 12:29:33,310 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 12:29:33,311 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 12:29:33,311 INFO L85 PathProgramCache]: Analyzing trace with hash -2110353406, now seen corresponding path program 1 times [2023-12-02 12:29:33,311 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 12:29:33,312 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [275150150] [2023-12-02 12:29:33,312 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:29:33,312 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 12:29:33,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:29:33,463 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 12:29:33,463 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 12:29:33,463 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [275150150] [2023-12-02 12:29:33,463 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [275150150] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 12:29:33,464 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 12:29:33,464 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-12-02 12:29:33,464 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1960679829] [2023-12-02 12:29:33,464 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 12:29:33,465 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 12:29:33,465 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 12:29:33,465 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 12:29:33,466 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-12-02 12:29:33,466 INFO L87 Difference]: Start difference. First operand 50 states and 62 transitions. Second operand has 4 states, 4 states have (on average 4.0) internal successors, (16), 4 states have internal predecessors, (16), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 12:29:33,564 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 12:29:33,564 INFO L93 Difference]: Finished difference Result 136 states and 172 transitions. [2023-12-02 12:29:33,565 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-12-02 12:29:33,565 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.0) internal successors, (16), 4 states have internal predecessors, (16), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 19 [2023-12-02 12:29:33,565 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 12:29:33,567 INFO L225 Difference]: With dead ends: 136 [2023-12-02 12:29:33,567 INFO L226 Difference]: Without dead ends: 88 [2023-12-02 12:29:33,568 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-12-02 12:29:33,570 INFO L413 NwaCegarLoop]: 47 mSDtfsCounter, 37 mSDsluCounter, 83 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 12:29:33,570 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 130 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 12:29:33,571 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2023-12-02 12:29:33,584 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 86. [2023-12-02 12:29:33,584 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 55 states have (on average 1.2363636363636363) internal successors, (68), 62 states have internal predecessors, (68), 16 states have call successors, (16), 14 states have call predecessors, (16), 14 states have return successors, (20), 16 states have call predecessors, (20), 16 states have call successors, (20) [2023-12-02 12:29:33,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 104 transitions. [2023-12-02 12:29:33,586 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 104 transitions. Word has length 19 [2023-12-02 12:29:33,586 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 12:29:33,586 INFO L495 AbstractCegarLoop]: Abstraction has 86 states and 104 transitions. [2023-12-02 12:29:33,586 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.0) internal successors, (16), 4 states have internal predecessors, (16), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-12-02 12:29:33,587 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 104 transitions. [2023-12-02 12:29:33,588 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2023-12-02 12:29:33,588 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 12:29:33,588 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 12:29:33,588 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-12-02 12:29:33,589 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 12:29:33,589 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 12:29:33,589 INFO L85 PathProgramCache]: Analyzing trace with hash 1966029693, now seen corresponding path program 1 times [2023-12-02 12:29:33,589 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 12:29:33,590 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [307908834] [2023-12-02 12:29:33,590 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:29:33,590 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 12:29:33,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:29:33,876 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 12:29:33,876 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 12:29:33,877 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [307908834] [2023-12-02 12:29:33,877 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [307908834] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 12:29:33,877 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 12:29:33,877 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-12-02 12:29:33,877 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [573935217] [2023-12-02 12:29:33,877 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 12:29:33,878 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-12-02 12:29:33,878 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 12:29:33,879 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-12-02 12:29:33,879 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2023-12-02 12:29:33,879 INFO L87 Difference]: Start difference. First operand 86 states and 104 transitions. Second operand has 6 states, 6 states have (on average 4.166666666666667) internal successors, (25), 6 states have internal predecessors, (25), 5 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-12-02 12:29:34,118 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 12:29:34,119 INFO L93 Difference]: Finished difference Result 242 states and 294 transitions. [2023-12-02 12:29:34,119 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-12-02 12:29:34,119 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.166666666666667) internal successors, (25), 6 states have internal predecessors, (25), 5 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 35 [2023-12-02 12:29:34,120 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 12:29:34,122 INFO L225 Difference]: With dead ends: 242 [2023-12-02 12:29:34,122 INFO L226 Difference]: Without dead ends: 158 [2023-12-02 12:29:34,124 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=26, Unknown=0, NotChecked=0, Total=42 [2023-12-02 12:29:34,125 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 66 mSDsluCounter, 154 mSDsCounter, 0 mSdLazyCounter, 159 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 222 SdHoareTripleChecker+Invalid, 165 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 159 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 12:29:34,126 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [67 Valid, 222 Invalid, 165 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 159 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-12-02 12:29:34,127 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 158 states. [2023-12-02 12:29:34,147 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 158 to 132. [2023-12-02 12:29:34,148 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 132 states, 86 states have (on average 1.2209302325581395) internal successors, (105), 94 states have internal predecessors, (105), 22 states have call successors, (22), 21 states have call predecessors, (22), 23 states have return successors, (28), 23 states have call predecessors, (28), 22 states have call successors, (28) [2023-12-02 12:29:34,150 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 132 states to 132 states and 155 transitions. [2023-12-02 12:29:34,150 INFO L78 Accepts]: Start accepts. Automaton has 132 states and 155 transitions. Word has length 35 [2023-12-02 12:29:34,151 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 12:29:34,151 INFO L495 AbstractCegarLoop]: Abstraction has 132 states and 155 transitions. [2023-12-02 12:29:34,151 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.166666666666667) internal successors, (25), 6 states have internal predecessors, (25), 5 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-12-02 12:29:34,151 INFO L276 IsEmpty]: Start isEmpty. Operand 132 states and 155 transitions. [2023-12-02 12:29:34,153 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-12-02 12:29:34,153 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 12:29:34,153 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 12:29:34,154 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-12-02 12:29:34,154 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 12:29:34,154 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 12:29:34,155 INFO L85 PathProgramCache]: Analyzing trace with hash 831071386, now seen corresponding path program 1 times [2023-12-02 12:29:34,155 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 12:29:34,155 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1541442672] [2023-12-02 12:29:34,155 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:29:34,155 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 12:29:34,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:29:34,493 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 12:29:34,493 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 12:29:34,494 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1541442672] [2023-12-02 12:29:34,494 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1541442672] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 12:29:34,494 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 12:29:34,494 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2023-12-02 12:29:34,494 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [530225289] [2023-12-02 12:29:34,494 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 12:29:34,495 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2023-12-02 12:29:34,495 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 12:29:34,496 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2023-12-02 12:29:34,496 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=127, Unknown=0, NotChecked=0, Total=156 [2023-12-02 12:29:34,496 INFO L87 Difference]: Start difference. First operand 132 states and 155 transitions. Second operand has 13 states, 11 states have (on average 2.3636363636363638) internal successors, (26), 10 states have internal predecessors, (26), 4 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 4 states have call successors, (5) [2023-12-02 12:29:35,327 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 12:29:35,328 INFO L93 Difference]: Finished difference Result 353 states and 459 transitions. [2023-12-02 12:29:35,329 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2023-12-02 12:29:35,330 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 11 states have (on average 2.3636363636363638) internal successors, (26), 10 states have internal predecessors, (26), 4 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 4 states have call successors, (5) Word has length 38 [2023-12-02 12:29:35,330 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 12:29:35,334 INFO L225 Difference]: With dead ends: 353 [2023-12-02 12:29:35,335 INFO L226 Difference]: Without dead ends: 255 [2023-12-02 12:29:35,337 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 34 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 283 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=267, Invalid=993, Unknown=0, NotChecked=0, Total=1260 [2023-12-02 12:29:35,338 INFO L413 NwaCegarLoop]: 30 mSDtfsCounter, 255 mSDsluCounter, 206 mSDsCounter, 0 mSdLazyCounter, 381 mSolverCounterSat, 164 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 262 SdHoareTripleChecker+Valid, 236 SdHoareTripleChecker+Invalid, 545 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 164 IncrementalHoareTripleChecker+Valid, 381 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-12-02 12:29:35,339 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [262 Valid, 236 Invalid, 545 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [164 Valid, 381 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-12-02 12:29:35,340 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 255 states. [2023-12-02 12:29:35,378 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 255 to 211. [2023-12-02 12:29:35,379 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 211 states, 139 states have (on average 1.223021582733813) internal successors, (170), 152 states have internal predecessors, (170), 35 states have call successors, (35), 31 states have call predecessors, (35), 36 states have return successors, (54), 36 states have call predecessors, (54), 35 states have call successors, (54) [2023-12-02 12:29:35,381 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 211 states to 211 states and 259 transitions. [2023-12-02 12:29:35,381 INFO L78 Accepts]: Start accepts. Automaton has 211 states and 259 transitions. Word has length 38 [2023-12-02 12:29:35,382 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 12:29:35,382 INFO L495 AbstractCegarLoop]: Abstraction has 211 states and 259 transitions. [2023-12-02 12:29:35,382 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 11 states have (on average 2.3636363636363638) internal successors, (26), 10 states have internal predecessors, (26), 4 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 4 states have call successors, (5) [2023-12-02 12:29:35,382 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 259 transitions. [2023-12-02 12:29:35,386 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2023-12-02 12:29:35,386 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 12:29:35,386 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 12:29:35,386 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-12-02 12:29:35,387 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 12:29:35,387 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 12:29:35,387 INFO L85 PathProgramCache]: Analyzing trace with hash 1923101337, now seen corresponding path program 1 times [2023-12-02 12:29:35,388 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 12:29:35,388 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1286863900] [2023-12-02 12:29:35,388 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:29:35,388 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 12:29:35,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:29:35,507 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-12-02 12:29:35,507 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 12:29:35,508 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1286863900] [2023-12-02 12:29:35,508 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1286863900] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 12:29:35,508 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 12:29:35,508 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-12-02 12:29:35,509 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1986369153] [2023-12-02 12:29:35,509 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 12:29:35,509 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 12:29:35,509 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 12:29:35,510 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 12:29:35,510 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-12-02 12:29:35,511 INFO L87 Difference]: Start difference. First operand 211 states and 259 transitions. Second operand has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 3 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-12-02 12:29:35,577 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 12:29:35,577 INFO L93 Difference]: Finished difference Result 414 states and 514 transitions. [2023-12-02 12:29:35,577 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-12-02 12:29:35,578 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 3 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 58 [2023-12-02 12:29:35,578 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 12:29:35,580 INFO L225 Difference]: With dead ends: 414 [2023-12-02 12:29:35,581 INFO L226 Difference]: Without dead ends: 205 [2023-12-02 12:29:35,582 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-12-02 12:29:35,583 INFO L413 NwaCegarLoop]: 43 mSDtfsCounter, 44 mSDsluCounter, 42 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 85 SdHoareTripleChecker+Invalid, 38 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 12:29:35,584 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 85 Invalid, 38 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 12:29:35,585 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 205 states. [2023-12-02 12:29:35,605 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 205 to 184. [2023-12-02 12:29:35,606 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 184 states, 121 states have (on average 1.1900826446280992) internal successors, (144), 131 states have internal predecessors, (144), 31 states have call successors, (31), 27 states have call predecessors, (31), 31 states have return successors, (43), 32 states have call predecessors, (43), 31 states have call successors, (43) [2023-12-02 12:29:35,608 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 184 states to 184 states and 218 transitions. [2023-12-02 12:29:35,608 INFO L78 Accepts]: Start accepts. Automaton has 184 states and 218 transitions. Word has length 58 [2023-12-02 12:29:35,608 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 12:29:35,609 INFO L495 AbstractCegarLoop]: Abstraction has 184 states and 218 transitions. [2023-12-02 12:29:35,609 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 3 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-12-02 12:29:35,609 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 218 transitions. [2023-12-02 12:29:35,613 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2023-12-02 12:29:35,613 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 12:29:35,614 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 12:29:35,614 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-12-02 12:29:35,614 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 12:29:35,615 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 12:29:35,615 INFO L85 PathProgramCache]: Analyzing trace with hash -1343220446, now seen corresponding path program 1 times [2023-12-02 12:29:35,615 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 12:29:35,615 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1524206336] [2023-12-02 12:29:35,615 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:29:35,615 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 12:29:35,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:29:35,925 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 19 proven. 2 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2023-12-02 12:29:35,925 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 12:29:35,925 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1524206336] [2023-12-02 12:29:35,926 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1524206336] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 12:29:35,926 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [916317076] [2023-12-02 12:29:35,926 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 12:29:35,926 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 12:29:35,926 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 12:29:35,929 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 12:29:35,931 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-12-02 12:29:36,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 12:29:36,033 INFO L262 TraceCheckSpWp]: Trace formula consists of 282 conjuncts, 25 conjunts are in the unsatisfiable core [2023-12-02 12:29:36,041 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 12:29:36,209 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2023-12-02 12:29:36,209 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-12-02 12:29:36,209 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [916317076] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 12:29:36,209 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-12-02 12:29:36,210 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [14] total 19 [2023-12-02 12:29:36,210 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [64870703] [2023-12-02 12:29:36,210 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 12:29:36,210 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2023-12-02 12:29:36,211 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 12:29:36,211 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2023-12-02 12:29:36,212 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=305, Unknown=0, NotChecked=0, Total=342 [2023-12-02 12:29:36,212 INFO L87 Difference]: Start difference. First operand 184 states and 218 transitions. Second operand has 11 states, 8 states have (on average 5.5) internal successors, (44), 8 states have internal predecessors, (44), 2 states have call successors, (11), 2 states have call predecessors, (11), 5 states have return successors, (12), 5 states have call predecessors, (12), 2 states have call successors, (12) [2023-12-02 12:29:36,559 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 12:29:36,559 INFO L93 Difference]: Finished difference Result 489 states and 595 transitions. [2023-12-02 12:29:36,560 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2023-12-02 12:29:36,560 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 8 states have (on average 5.5) internal successors, (44), 8 states have internal predecessors, (44), 2 states have call successors, (11), 2 states have call predecessors, (11), 5 states have return successors, (12), 5 states have call predecessors, (12), 2 states have call successors, (12) Word has length 77 [2023-12-02 12:29:36,561 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 12:29:36,561 INFO L225 Difference]: With dead ends: 489 [2023-12-02 12:29:36,561 INFO L226 Difference]: Without dead ends: 0 [2023-12-02 12:29:36,563 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 98 GetRequests, 75 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=63, Invalid=537, Unknown=0, NotChecked=0, Total=600 [2023-12-02 12:29:36,564 INFO L413 NwaCegarLoop]: 42 mSDtfsCounter, 41 mSDsluCounter, 218 mSDsCounter, 0 mSdLazyCounter, 271 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 260 SdHoareTripleChecker+Invalid, 275 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 271 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 12:29:36,565 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [45 Valid, 260 Invalid, 275 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 271 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-12-02 12:29:36,565 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-12-02 12:29:36,565 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-12-02 12:29:36,566 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 12:29:36,566 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-12-02 12:29:36,566 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 77 [2023-12-02 12:29:36,566 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 12:29:36,566 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-12-02 12:29:36,566 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 8 states have (on average 5.5) internal successors, (44), 8 states have internal predecessors, (44), 2 states have call successors, (11), 2 states have call predecessors, (11), 5 states have return successors, (12), 5 states have call predecessors, (12), 2 states have call successors, (12) [2023-12-02 12:29:36,567 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-12-02 12:29:36,567 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-12-02 12:29:36,569 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-12-02 12:29:36,580 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-12-02 12:29:36,770 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 12:29:36,772 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-12-02 12:29:37,864 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 158 164) no Hoare annotation was computed. [2023-12-02 12:29:37,864 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 158 164) the Hoare annotation is: true [2023-12-02 12:29:37,864 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 530 541) the Hoare annotation is: (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 0) (= 0 ~systemActive~0)) [2023-12-02 12:29:37,864 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 530 541) no Hoare annotation was computed. [2023-12-02 12:29:37,865 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 542 550) the Hoare annotation is: true [2023-12-02 12:29:37,865 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 542 550) no Hoare annotation was computed. [2023-12-02 12:29:37,865 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 335 364) no Hoare annotation was computed. [2023-12-02 12:29:37,865 INFO L899 garLoopResultBuilder]: For program point L349(lines 349 353) no Hoare annotation was computed. [2023-12-02 12:29:37,865 INFO L902 garLoopResultBuilder]: At program point L349-1(lines 349 353) the Hoare annotation is: true [2023-12-02 12:29:37,866 INFO L902 garLoopResultBuilder]: At program point L345-2(lines 345 359) the Hoare annotation is: true [2023-12-02 12:29:37,866 INFO L902 garLoopResultBuilder]: At program point L341(line 341) the Hoare annotation is: true [2023-12-02 12:29:37,866 INFO L899 garLoopResultBuilder]: For program point L341-1(line 341) no Hoare annotation was computed. [2023-12-02 12:29:37,866 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 335 364) the Hoare annotation is: true [2023-12-02 12:29:37,866 INFO L899 garLoopResultBuilder]: For program point L360(lines 335 364) no Hoare annotation was computed. [2023-12-02 12:29:37,867 INFO L899 garLoopResultBuilder]: For program point L356(line 356) no Hoare annotation was computed. [2023-12-02 12:29:37,867 INFO L895 garLoopResultBuilder]: At program point L206(line 206) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~methaneLevelCritical~0 0) (= |timeShift_processEnvironment_~tmp~2#1| 0)) .cse0))) [2023-12-02 12:29:37,867 INFO L895 garLoopResultBuilder]: At program point L198(line 198) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (or (not (= |old(~pumpRunning~0)| 0)) .cse0))) [2023-12-02 12:29:37,867 INFO L899 garLoopResultBuilder]: For program point L198-1(line 198) no Hoare annotation was computed. [2023-12-02 12:29:37,867 INFO L895 garLoopResultBuilder]: At program point L483(line 483) the Hoare annotation is: (let ((.cse4 (= ~waterLevel~0 1)) (.cse1 (= 0 ~systemActive~0)) (.cse3 (= ~methaneLevelCritical~0 0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3)) (.cse2 (and (not .cse4) .cse3 (not .cse1)))) (and (or (= ~pumpRunning~0 0) .cse0 .cse1 .cse2) (or .cse0 (not .cse3) .cse1 .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~waterLevel~0)| 1)) .cse1 .cse4)))) [2023-12-02 12:29:37,867 INFO L899 garLoopResultBuilder]: For program point L483-1(line 483) no Hoare annotation was computed. [2023-12-02 12:29:37,868 INFO L895 garLoopResultBuilder]: At program point L211(line 211) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 0) (= |old(~pumpRunning~0)| 0))) (or (not (= |old(~waterLevel~0)| 1)) .cse0 (= ~waterLevel~0 1)))) [2023-12-02 12:29:37,868 INFO L899 garLoopResultBuilder]: For program point L211-1(lines 192 216) no Hoare annotation was computed. [2023-12-02 12:29:37,868 INFO L899 garLoopResultBuilder]: For program point L145-1(lines 145 151) no Hoare annotation was computed. [2023-12-02 12:29:37,868 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 134 157) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (= ~waterLevel~0 1)))) [2023-12-02 12:29:37,868 INFO L899 garLoopResultBuilder]: For program point L472(line 472) no Hoare annotation was computed. [2023-12-02 12:29:37,868 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 134 157) no Hoare annotation was computed. [2023-12-02 12:29:37,869 INFO L899 garLoopResultBuilder]: For program point L138-1(lines 137 156) no Hoare annotation was computed. [2023-12-02 12:29:37,869 INFO L899 garLoopResultBuilder]: For program point L489(lines 489 495) no Hoare annotation was computed. [2023-12-02 12:29:37,869 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 472) no Hoare annotation was computed. [2023-12-02 12:29:37,869 INFO L899 garLoopResultBuilder]: For program point L200(lines 200 208) no Hoare annotation was computed. [2023-12-02 12:29:37,869 INFO L899 garLoopResultBuilder]: For program point L485(lines 485 498) no Hoare annotation was computed. [2023-12-02 12:29:37,869 INFO L899 garLoopResultBuilder]: For program point L196(lines 196 213) no Hoare annotation was computed. [2023-12-02 12:29:37,869 INFO L899 garLoopResultBuilder]: For program point L485-1(lines 477 501) no Hoare annotation was computed. [2023-12-02 12:29:37,869 INFO L899 garLoopResultBuilder]: For program point L419-2(lines 419 426) no Hoare annotation was computed. [2023-12-02 12:29:37,869 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2023-12-02 12:29:37,870 INFO L899 garLoopResultBuilder]: For program point L85-1(lines 85 91) no Hoare annotation was computed. [2023-12-02 12:29:37,870 INFO L895 garLoopResultBuilder]: At program point L110(lines 65 112) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (or (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0)) (not (= 0 ~systemActive~0))) [2023-12-02 12:29:37,870 INFO L895 garLoopResultBuilder]: At program point L77(line 77) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (or (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0)) (not (= 0 ~systemActive~0))) [2023-12-02 12:29:37,870 INFO L895 garLoopResultBuilder]: At program point L103-2(lines 95 108) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2023-12-02 12:29:37,870 INFO L899 garLoopResultBuilder]: For program point L66(lines 65 112) no Hoare annotation was computed. [2023-12-02 12:29:37,870 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-12-02 12:29:37,870 INFO L895 garLoopResultBuilder]: At program point L87(line 87) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2023-12-02 12:29:37,871 INFO L899 garLoopResultBuilder]: For program point L116(lines 55 120) no Hoare annotation was computed. [2023-12-02 12:29:37,871 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 81) no Hoare annotation was computed. [2023-12-02 12:29:37,871 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 75 81) no Hoare annotation was computed. [2023-12-02 12:29:37,871 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-12-02 12:29:37,871 INFO L895 garLoopResultBuilder]: At program point L113(lines 64 114) the Hoare annotation is: false [2023-12-02 12:29:37,871 INFO L899 garLoopResultBuilder]: For program point L419(lines 419 426) no Hoare annotation was computed. [2023-12-02 12:29:37,871 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 518 529) no Hoare annotation was computed. [2023-12-02 12:29:37,871 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 518 529) the Hoare annotation is: true [2023-12-02 12:29:37,872 INFO L895 garLoopResultBuilder]: At program point L180(line 180) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not .cse0) (let ((.cse2 (= |processEnvironment__wrappee__methaneQuery_~tmp~1#1| 0))) (and (= ~pumpRunning~0 0) (or (not (= ~waterLevel~0 1)) .cse2) (or (= |processEnvironment__wrappee__methaneQuery_~tmp~1#1| 1) .cse2))) .cse1))) [2023-12-02 12:29:37,872 INFO L899 garLoopResultBuilder]: For program point L174(lines 174 182) no Hoare annotation was computed. [2023-12-02 12:29:37,872 INFO L899 garLoopResultBuilder]: For program point L170(lines 170 187) no Hoare annotation was computed. [2023-12-02 12:29:37,872 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 166 190) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2023-12-02 12:29:37,872 INFO L895 garLoopResultBuilder]: At program point L230(line 230) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (not .cse0)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not (= ~waterLevel~0 1)) .cse2 .cse1) (or (and (= ~pumpRunning~0 0) (or (= |processEnvironment__wrappee__methaneQuery_~tmp~1#1| 1) (= |processEnvironment__wrappee__methaneQuery_~tmp~1#1| 0))) .cse2 .cse1)))) [2023-12-02 12:29:37,873 INFO L899 garLoopResultBuilder]: For program point L230-1(line 230) no Hoare annotation was computed. [2023-12-02 12:29:37,873 INFO L895 garLoopResultBuilder]: At program point L185(line 185) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2023-12-02 12:29:37,873 INFO L899 garLoopResultBuilder]: For program point L185-1(lines 166 190) no Hoare annotation was computed. [2023-12-02 12:29:37,873 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 166 190) no Hoare annotation was computed. [2023-12-02 12:29:37,873 INFO L902 garLoopResultBuilder]: At program point L255(line 255) the Hoare annotation is: true [2023-12-02 12:29:37,873 INFO L899 garLoopResultBuilder]: For program point L255-1(line 255) no Hoare annotation was computed. [2023-12-02 12:29:37,873 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 250 260) no Hoare annotation was computed. [2023-12-02 12:29:37,873 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 250 260) the Hoare annotation is: true [2023-12-02 12:29:37,876 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1] [2023-12-02 12:29:37,879 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-12-02 12:29:37,890 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 12:29:37 BoogieIcfgContainer [2023-12-02 12:29:37,890 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-12-02 12:29:37,891 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-12-02 12:29:37,891 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-12-02 12:29:37,891 INFO L274 PluginConnector]: Witness Printer initialized [2023-12-02 12:29:37,892 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 12:29:32" (3/4) ... [2023-12-02 12:29:37,893 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-12-02 12:29:37,896 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-12-02 12:29:37,896 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-12-02 12:29:37,896 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-12-02 12:29:37,897 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-12-02 12:29:37,897 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-12-02 12:29:37,897 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-12-02 12:29:37,897 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-12-02 12:29:37,897 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-12-02 12:29:37,906 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 44 nodes and edges [2023-12-02 12:29:37,906 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2023-12-02 12:29:37,907 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-12-02 12:29:37,908 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 12:29:37,909 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 12:29:37,933 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == \old(pumpRunning)) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive)) || (waterLevel == 1))) [2023-12-02 12:29:37,966 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == \old(pumpRunning)) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive)) || (waterLevel == 1))) [2023-12-02 12:29:38,010 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/witness.graphml [2023-12-02 12:29:38,011 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/witness.yml [2023-12-02 12:29:38,011 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-12-02 12:29:38,012 INFO L158 Benchmark]: Toolchain (without parser) took 6395.72ms. Allocated memory was 144.7MB in the beginning and 174.1MB in the end (delta: 29.4MB). Free memory was 106.8MB in the beginning and 129.5MB in the end (delta: -22.7MB). Peak memory consumption was 7.4MB. Max. memory is 16.1GB. [2023-12-02 12:29:38,013 INFO L158 Benchmark]: CDTParser took 0.22ms. Allocated memory is still 102.8MB. Free memory was 72.3MB in the beginning and 72.3MB in the end (delta: 29.4kB). There was no memory consumed. Max. memory is 16.1GB. [2023-12-02 12:29:38,013 INFO L158 Benchmark]: CACSL2BoogieTranslator took 447.12ms. Allocated memory is still 144.7MB. Free memory was 106.8MB in the beginning and 87.4MB in the end (delta: 19.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-12-02 12:29:38,014 INFO L158 Benchmark]: Boogie Procedure Inliner took 58.82ms. Allocated memory is still 144.7MB. Free memory was 87.4MB in the beginning and 85.0MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-12-02 12:29:38,014 INFO L158 Benchmark]: Boogie Preprocessor took 34.02ms. Allocated memory is still 144.7MB. Free memory was 85.0MB in the beginning and 83.7MB in the end (delta: 1.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-12-02 12:29:38,014 INFO L158 Benchmark]: RCFGBuilder took 502.66ms. Allocated memory is still 144.7MB. Free memory was 83.3MB in the beginning and 96.1MB in the end (delta: -12.7MB). Peak memory consumption was 11.4MB. Max. memory is 16.1GB. [2023-12-02 12:29:38,015 INFO L158 Benchmark]: TraceAbstraction took 5224.80ms. Allocated memory was 144.7MB in the beginning and 174.1MB in the end (delta: 29.4MB). Free memory was 95.3MB in the beginning and 136.8MB in the end (delta: -41.5MB). Peak memory consumption was 80.2MB. Max. memory is 16.1GB. [2023-12-02 12:29:38,015 INFO L158 Benchmark]: Witness Printer took 120.75ms. Allocated memory is still 174.1MB. Free memory was 136.8MB in the beginning and 129.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-12-02 12:29:38,017 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.22ms. Allocated memory is still 102.8MB. Free memory was 72.3MB in the beginning and 72.3MB in the end (delta: 29.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 447.12ms. Allocated memory is still 144.7MB. Free memory was 106.8MB in the beginning and 87.4MB in the end (delta: 19.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 58.82ms. Allocated memory is still 144.7MB. Free memory was 87.4MB in the beginning and 85.0MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 34.02ms. Allocated memory is still 144.7MB. Free memory was 85.0MB in the beginning and 83.7MB in the end (delta: 1.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 502.66ms. Allocated memory is still 144.7MB. Free memory was 83.3MB in the beginning and 96.1MB in the end (delta: -12.7MB). Peak memory consumption was 11.4MB. Max. memory is 16.1GB. * TraceAbstraction took 5224.80ms. Allocated memory was 144.7MB in the beginning and 174.1MB in the end (delta: 29.4MB). Free memory was 95.3MB in the beginning and 136.8MB in the end (delta: -41.5MB). Peak memory consumption was 80.2MB. Max. memory is 16.1GB. * Witness Printer took 120.75ms. Allocated memory is still 174.1MB. Free memory was 136.8MB in the beginning and 129.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [49] - GenericResultAtLocation [Line: 121]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [121] - GenericResultAtLocation [Line: 333]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [333] - GenericResultAtLocation [Line: 432]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [432] - GenericResultAtLocation [Line: 467]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [467] - GenericResultAtLocation [Line: 476]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [476] - GenericResultAtLocation [Line: 502]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [502] - GenericResultAtLocation [Line: 597]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [597] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 472]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 63 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 5.2s, OverallIterations: 7, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 465 SdHoareTripleChecker+Valid, 1.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 450 mSDsluCounter, 1082 SdHoareTripleChecker+Invalid, 0.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 742 mSDsCounter, 186 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 934 IncrementalHoareTripleChecker+Invalid, 1120 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 186 mSolverCounterUnsat, 340 mSDtfsCounter, 934 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 166 GetRequests, 97 SyntacticMatches, 0 SemanticMatches, 69 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 308 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=211occurred in iteration=5, InterpolantAutomatonStates: 64, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 7 MinimizatonAttempts, 93 StatesRemovedByMinimization, 4 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 24 LocationsWithAnnotation, 401 PreInvPairs, 451 NumberOfFragments, 346 HoareAnnotationTreeSize, 401 FomulaSimplifications, 1405 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 24 FomulaSimplificationsInter, 3063 FormulaSimplificationTreeSizeReductionInter, 0.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 1.4s InterpolantComputationTime, 337 NumberOfCodeBlocks, 337 NumberOfCodeBlocksAsserted, 8 NumberOfCheckSat, 329 ConstructedInterpolants, 0 QuantifiedInterpolants, 708 SizeOfPredicates, 5 NumberOfNonLiveVariables, 282 ConjunctsInSsa, 25 ConjunctsInUnsatCore, 8 InterpolantComputations, 7 PerfectInterpolantSequences, 91/93 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: (((splverifierCounter == 0) && ((pumpRunning == 0) || (methaneLevelCritical == 0))) && !((0 == systemActive))) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 345]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 134]: Loop Invariant Derived loop invariant: (((pumpRunning == \old(pumpRunning)) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive)) || (waterLevel == 1))) RESULT: Ultimate proved your program to be correct! [2023-12-02 12:29:38,034 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6df8214a-3b22-44d6-b66e-5f9b838e56f5/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE