./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 96a9f4a5eb48d3a052332271e6f513d6efe176b9f027fc1b42847acbd4831cf9 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-12-02 16:48:21,526 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-12-02 16:48:21,591 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-Reach-32bit-Taipan_Default.epf [2023-12-02 16:48:21,596 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-12-02 16:48:21,596 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-12-02 16:48:21,620 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-12-02 16:48:21,621 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-12-02 16:48:21,621 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-12-02 16:48:21,622 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-12-02 16:48:21,622 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-12-02 16:48:21,623 INFO L153 SettingsManager]: * User list type=DISABLED [2023-12-02 16:48:21,623 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-12-02 16:48:21,624 INFO L153 SettingsManager]: * Explicit value domain=true [2023-12-02 16:48:21,624 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-12-02 16:48:21,625 INFO L153 SettingsManager]: * Octagon Domain=false [2023-12-02 16:48:21,625 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-12-02 16:48:21,626 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-12-02 16:48:21,626 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-12-02 16:48:21,627 INFO L153 SettingsManager]: * Interval Domain=false [2023-12-02 16:48:21,627 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-12-02 16:48:21,628 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-12-02 16:48:21,628 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-12-02 16:48:21,629 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-12-02 16:48:21,629 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-12-02 16:48:21,630 INFO L153 SettingsManager]: * sizeof long=4 [2023-12-02 16:48:21,630 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-12-02 16:48:21,630 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-12-02 16:48:21,631 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-12-02 16:48:21,631 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-12-02 16:48:21,631 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-12-02 16:48:21,632 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-12-02 16:48:21,632 INFO L153 SettingsManager]: * sizeof long double=12 [2023-12-02 16:48:21,632 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-12-02 16:48:21,633 INFO L153 SettingsManager]: * Use constant arrays=true [2023-12-02 16:48:21,633 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-12-02 16:48:21,633 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-12-02 16:48:21,633 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-12-02 16:48:21,633 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 16:48:21,634 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-12-02 16:48:21,634 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-12-02 16:48:21,634 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-12-02 16:48:21,634 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-12-02 16:48:21,635 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-12-02 16:48:21,635 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-12-02 16:48:21,635 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-12-02 16:48:21,635 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-12-02 16:48:21,635 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-12-02 16:48:21,635 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 96a9f4a5eb48d3a052332271e6f513d6efe176b9f027fc1b42847acbd4831cf9 [2023-12-02 16:48:21,860 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-12-02 16:48:21,880 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-12-02 16:48:21,883 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-12-02 16:48:21,884 INFO L270 PluginConnector]: Initializing CDTParser... [2023-12-02 16:48:21,885 INFO L274 PluginConnector]: CDTParser initialized [2023-12-02 16:48:21,886 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/../../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c [2023-12-02 16:48:24,681 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-12-02 16:48:24,888 INFO L384 CDTParser]: Found 1 translation units. [2023-12-02 16:48:24,889 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c [2023-12-02 16:48:24,904 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/data/f6018b80d/1be7f7203cc04dfbaa65c73627bb2752/FLAG44e0c1151 [2023-12-02 16:48:24,918 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/data/f6018b80d/1be7f7203cc04dfbaa65c73627bb2752 [2023-12-02 16:48:24,921 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-12-02 16:48:24,922 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-12-02 16:48:24,923 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-12-02 16:48:24,924 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-12-02 16:48:24,929 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-12-02 16:48:24,930 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 04:48:24" (1/1) ... [2023-12-02 16:48:24,931 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3789ce28 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:48:24, skipping insertion in model container [2023-12-02 16:48:24,931 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 04:48:24" (1/1) ... [2023-12-02 16:48:24,985 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-12-02 16:48:25,209 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c[11292,11305] [2023-12-02 16:48:25,256 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 16:48:25,267 INFO L202 MainTranslator]: Completed pre-run [2023-12-02 16:48:25,278 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] [2023-12-02 16:48:25,280 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [415] [2023-12-02 16:48:25,280 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [424] [2023-12-02 16:48:25,280 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [499] [2023-12-02 16:48:25,281 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [730] [2023-12-02 16:48:25,281 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [825] [2023-12-02 16:48:25,281 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [926] [2023-12-02 16:48:25,281 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [975] [2023-12-02 16:48:25,316 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c[11292,11305] [2023-12-02 16:48:25,340 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 16:48:25,361 INFO L206 MainTranslator]: Completed translation [2023-12-02 16:48:25,362 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:48:25 WrapperNode [2023-12-02 16:48:25,362 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-12-02 16:48:25,363 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-12-02 16:48:25,363 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-12-02 16:48:25,363 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-12-02 16:48:25,371 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:48:25" (1/1) ... [2023-12-02 16:48:25,385 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:48:25" (1/1) ... [2023-12-02 16:48:25,412 INFO L138 Inliner]: procedures = 58, calls = 105, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 217 [2023-12-02 16:48:25,412 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-12-02 16:48:25,413 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-12-02 16:48:25,413 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-12-02 16:48:25,413 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-12-02 16:48:25,423 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:48:25" (1/1) ... [2023-12-02 16:48:25,423 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:48:25" (1/1) ... [2023-12-02 16:48:25,425 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:48:25" (1/1) ... [2023-12-02 16:48:25,426 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:48:25" (1/1) ... [2023-12-02 16:48:25,431 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:48:25" (1/1) ... [2023-12-02 16:48:25,436 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:48:25" (1/1) ... [2023-12-02 16:48:25,438 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:48:25" (1/1) ... [2023-12-02 16:48:25,439 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:48:25" (1/1) ... [2023-12-02 16:48:25,442 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-12-02 16:48:25,443 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-12-02 16:48:25,444 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-12-02 16:48:25,444 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-12-02 16:48:25,445 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:48:25" (1/1) ... [2023-12-02 16:48:25,451 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 16:48:25,462 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:48:25,474 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-12-02 16:48:25,476 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-12-02 16:48:25,507 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-12-02 16:48:25,507 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-12-02 16:48:25,507 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-12-02 16:48:25,508 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-12-02 16:48:25,508 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-12-02 16:48:25,508 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-12-02 16:48:25,508 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-12-02 16:48:25,509 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-12-02 16:48:25,509 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-12-02 16:48:25,509 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-12-02 16:48:25,509 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-12-02 16:48:25,509 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-12-02 16:48:25,510 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-12-02 16:48:25,510 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-12-02 16:48:25,510 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-12-02 16:48:25,510 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-12-02 16:48:25,510 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-12-02 16:48:25,510 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-12-02 16:48:25,511 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-12-02 16:48:25,511 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-12-02 16:48:25,511 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-12-02 16:48:25,511 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-12-02 16:48:25,594 INFO L241 CfgBuilder]: Building ICFG [2023-12-02 16:48:25,596 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-12-02 16:48:25,868 INFO L282 CfgBuilder]: Performing block encoding [2023-12-02 16:48:25,967 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-12-02 16:48:25,967 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-12-02 16:48:25,969 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 04:48:25 BoogieIcfgContainer [2023-12-02 16:48:25,969 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-12-02 16:48:25,972 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-12-02 16:48:25,973 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-12-02 16:48:25,976 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-12-02 16:48:25,976 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 04:48:24" (1/3) ... [2023-12-02 16:48:25,977 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1198a7db and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 04:48:25, skipping insertion in model container [2023-12-02 16:48:25,977 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 04:48:25" (2/3) ... [2023-12-02 16:48:25,978 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1198a7db and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 04:48:25, skipping insertion in model container [2023-12-02 16:48:25,978 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 04:48:25" (3/3) ... [2023-12-02 16:48:25,979 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product48.cil.c [2023-12-02 16:48:25,999 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-12-02 16:48:25,999 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-12-02 16:48:26,038 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-12-02 16:48:26,045 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@a369078, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-12-02 16:48:26,045 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-12-02 16:48:26,049 INFO L276 IsEmpty]: Start isEmpty. Operand has 72 states, 45 states have (on average 1.4222222222222223) internal successors, (64), 54 states have internal predecessors, (64), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) [2023-12-02 16:48:26,058 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-12-02 16:48:26,058 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:48:26,058 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:48:26,059 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:48:26,064 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:48:26,065 INFO L85 PathProgramCache]: Analyzing trace with hash 1946058171, now seen corresponding path program 1 times [2023-12-02 16:48:26,075 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:48:26,075 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1648053387] [2023-12-02 16:48:26,075 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:48:26,076 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:48:26,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:48:26,236 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 16:48:26,237 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:48:26,237 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1648053387] [2023-12-02 16:48:26,238 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1648053387] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:48:26,238 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:48:26,238 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-12-02 16:48:26,239 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1223578305] [2023-12-02 16:48:26,240 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:48:26,244 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-12-02 16:48:26,244 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:48:26,271 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-12-02 16:48:26,272 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 16:48:26,274 INFO L87 Difference]: Start difference. First operand has 72 states, 45 states have (on average 1.4222222222222223) internal successors, (64), 54 states have internal predecessors, (64), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 16:48:26,338 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:48:26,338 INFO L93 Difference]: Finished difference Result 142 states and 193 transitions. [2023-12-02 16:48:26,340 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-12-02 16:48:26,341 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 21 [2023-12-02 16:48:26,341 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:48:26,349 INFO L225 Difference]: With dead ends: 142 [2023-12-02 16:48:26,349 INFO L226 Difference]: Without dead ends: 67 [2023-12-02 16:48:26,353 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-12-02 16:48:26,357 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 75 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 16:48:26,358 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 75 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 16:48:26,372 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67 states. [2023-12-02 16:48:26,392 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 67. [2023-12-02 16:48:26,394 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 42 states have (on average 1.3333333333333333) internal successors, (56), 50 states have internal predecessors, (56), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 12 states have call predecessors, (15), 15 states have call successors, (15) [2023-12-02 16:48:26,397 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 87 transitions. [2023-12-02 16:48:26,398 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 87 transitions. Word has length 21 [2023-12-02 16:48:26,398 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:48:26,399 INFO L495 AbstractCegarLoop]: Abstraction has 67 states and 87 transitions. [2023-12-02 16:48:26,399 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 16:48:26,399 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 87 transitions. [2023-12-02 16:48:26,402 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2023-12-02 16:48:26,402 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:48:26,402 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:48:26,403 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-12-02 16:48:26,403 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:48:26,404 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:48:26,404 INFO L85 PathProgramCache]: Analyzing trace with hash 1088336049, now seen corresponding path program 1 times [2023-12-02 16:48:26,404 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:48:26,404 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1286533510] [2023-12-02 16:48:26,405 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:48:26,405 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:48:26,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:48:26,509 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 16:48:26,509 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:48:26,509 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1286533510] [2023-12-02 16:48:26,510 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1286533510] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:48:26,510 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:48:26,510 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 16:48:26,510 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1910384783] [2023-12-02 16:48:26,510 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:48:26,512 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 16:48:26,512 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:48:26,513 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 16:48:26,513 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 16:48:26,513 INFO L87 Difference]: Start difference. First operand 67 states and 87 transitions. Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 16:48:26,556 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:48:26,557 INFO L93 Difference]: Finished difference Result 106 states and 136 transitions. [2023-12-02 16:48:26,557 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 16:48:26,557 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 22 [2023-12-02 16:48:26,558 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:48:26,559 INFO L225 Difference]: With dead ends: 106 [2023-12-02 16:48:26,559 INFO L226 Difference]: Without dead ends: 59 [2023-12-02 16:48:26,560 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 16:48:26,562 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 14 mSDsluCounter, 45 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 106 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 16:48:26,563 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 106 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 16:48:26,564 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2023-12-02 16:48:26,571 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 59. [2023-12-02 16:48:26,572 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 37 states have (on average 1.3513513513513513) internal successors, (50), 45 states have internal predecessors, (50), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2023-12-02 16:48:26,573 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 76 transitions. [2023-12-02 16:48:26,574 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 76 transitions. Word has length 22 [2023-12-02 16:48:26,574 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:48:26,574 INFO L495 AbstractCegarLoop]: Abstraction has 59 states and 76 transitions. [2023-12-02 16:48:26,574 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 16:48:26,575 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 76 transitions. [2023-12-02 16:48:26,576 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-12-02 16:48:26,576 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:48:26,576 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:48:26,577 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-12-02 16:48:26,577 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:48:26,578 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:48:26,578 INFO L85 PathProgramCache]: Analyzing trace with hash -1493387261, now seen corresponding path program 1 times [2023-12-02 16:48:26,578 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:48:26,578 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [305614793] [2023-12-02 16:48:26,579 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:48:26,579 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:48:26,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:48:26,662 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 16:48:26,662 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:48:26,662 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [305614793] [2023-12-02 16:48:26,663 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [305614793] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:48:26,663 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:48:26,663 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 16:48:26,663 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1657042667] [2023-12-02 16:48:26,664 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:48:26,664 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 16:48:26,665 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:48:26,665 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 16:48:26,665 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 16:48:26,666 INFO L87 Difference]: Start difference. First operand 59 states and 76 transitions. Second operand has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-12-02 16:48:26,733 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:48:26,733 INFO L93 Difference]: Finished difference Result 173 states and 225 transitions. [2023-12-02 16:48:26,734 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 16:48:26,734 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 25 [2023-12-02 16:48:26,735 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:48:26,737 INFO L225 Difference]: With dead ends: 173 [2023-12-02 16:48:26,737 INFO L226 Difference]: Without dead ends: 116 [2023-12-02 16:48:26,738 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 16:48:26,740 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 68 mSDsluCounter, 59 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 131 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 16:48:26,741 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 131 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 16:48:26,742 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 116 states. [2023-12-02 16:48:26,761 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 116 to 113. [2023-12-02 16:48:26,762 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 113 states, 70 states have (on average 1.3571428571428572) internal successors, (95), 85 states have internal predecessors, (95), 26 states have call successors, (26), 16 states have call predecessors, (26), 16 states have return successors, (26), 19 states have call predecessors, (26), 26 states have call successors, (26) [2023-12-02 16:48:26,764 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 113 states to 113 states and 147 transitions. [2023-12-02 16:48:26,765 INFO L78 Accepts]: Start accepts. Automaton has 113 states and 147 transitions. Word has length 25 [2023-12-02 16:48:26,765 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:48:26,765 INFO L495 AbstractCegarLoop]: Abstraction has 113 states and 147 transitions. [2023-12-02 16:48:26,766 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-12-02 16:48:26,766 INFO L276 IsEmpty]: Start isEmpty. Operand 113 states and 147 transitions. [2023-12-02 16:48:26,768 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2023-12-02 16:48:26,768 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:48:26,768 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:48:26,768 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-12-02 16:48:26,769 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:48:26,769 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:48:26,769 INFO L85 PathProgramCache]: Analyzing trace with hash 2065881715, now seen corresponding path program 1 times [2023-12-02 16:48:26,770 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:48:26,770 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1778272210] [2023-12-02 16:48:26,770 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:48:26,770 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:48:26,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:48:26,899 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-12-02 16:48:26,899 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:48:26,899 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1778272210] [2023-12-02 16:48:26,899 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1778272210] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:48:26,900 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:48:26,900 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-12-02 16:48:26,900 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [627866402] [2023-12-02 16:48:26,900 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:48:26,901 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-12-02 16:48:26,901 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:48:26,902 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-12-02 16:48:26,902 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-12-02 16:48:26,902 INFO L87 Difference]: Start difference. First operand 113 states and 147 transitions. Second operand has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 16:48:27,078 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:48:27,078 INFO L93 Difference]: Finished difference Result 306 states and 403 transitions. [2023-12-02 16:48:27,079 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-12-02 16:48:27,079 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 28 [2023-12-02 16:48:27,079 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:48:27,082 INFO L225 Difference]: With dead ends: 306 [2023-12-02 16:48:27,082 INFO L226 Difference]: Without dead ends: 195 [2023-12-02 16:48:27,084 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-12-02 16:48:27,085 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 38 mSDsluCounter, 199 mSDsCounter, 0 mSdLazyCounter, 124 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 39 SdHoareTripleChecker+Valid, 260 SdHoareTripleChecker+Invalid, 132 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 124 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 16:48:27,086 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [39 Valid, 260 Invalid, 132 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 16:48:27,087 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 195 states. [2023-12-02 16:48:27,122 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 195 to 190. [2023-12-02 16:48:27,123 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 190 states, 123 states have (on average 1.2926829268292683) internal successors, (159), 138 states have internal predecessors, (159), 36 states have call successors, (36), 30 states have call predecessors, (36), 30 states have return successors, (44), 33 states have call predecessors, (44), 36 states have call successors, (44) [2023-12-02 16:48:27,126 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 190 states to 190 states and 239 transitions. [2023-12-02 16:48:27,126 INFO L78 Accepts]: Start accepts. Automaton has 190 states and 239 transitions. Word has length 28 [2023-12-02 16:48:27,127 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:48:27,127 INFO L495 AbstractCegarLoop]: Abstraction has 190 states and 239 transitions. [2023-12-02 16:48:27,127 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-12-02 16:48:27,128 INFO L276 IsEmpty]: Start isEmpty. Operand 190 states and 239 transitions. [2023-12-02 16:48:27,129 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2023-12-02 16:48:27,130 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:48:27,130 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:48:27,130 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-12-02 16:48:27,130 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:48:27,131 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:48:27,131 INFO L85 PathProgramCache]: Analyzing trace with hash 839402484, now seen corresponding path program 1 times [2023-12-02 16:48:27,131 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:48:27,131 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1410551430] [2023-12-02 16:48:27,132 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:48:27,132 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:48:27,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:48:27,360 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 16:48:27,361 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:48:27,361 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1410551430] [2023-12-02 16:48:27,361 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1410551430] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:48:27,361 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:48:27,361 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-12-02 16:48:27,362 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [107488689] [2023-12-02 16:48:27,362 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:48:27,362 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-12-02 16:48:27,362 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:48:27,363 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-12-02 16:48:27,363 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2023-12-02 16:48:27,364 INFO L87 Difference]: Start difference. First operand 190 states and 239 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-12-02 16:48:27,596 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:48:27,596 INFO L93 Difference]: Finished difference Result 535 states and 679 transitions. [2023-12-02 16:48:27,596 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-12-02 16:48:27,597 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 37 [2023-12-02 16:48:27,597 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:48:27,600 INFO L225 Difference]: With dead ends: 535 [2023-12-02 16:48:27,601 INFO L226 Difference]: Without dead ends: 347 [2023-12-02 16:48:27,602 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=26, Unknown=0, NotChecked=0, Total=42 [2023-12-02 16:48:27,603 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 114 mSDsluCounter, 172 mSDsCounter, 0 mSdLazyCounter, 159 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 115 SdHoareTripleChecker+Valid, 261 SdHoareTripleChecker+Invalid, 181 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 159 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 16:48:27,604 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [115 Valid, 261 Invalid, 181 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 159 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-12-02 16:48:27,605 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 347 states. [2023-12-02 16:48:27,636 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 347 to 334. [2023-12-02 16:48:27,638 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 334 states, 220 states have (on average 1.2818181818181817) internal successors, (282), 243 states have internal predecessors, (282), 61 states have call successors, (61), 51 states have call predecessors, (61), 52 states have return successors, (78), 56 states have call predecessors, (78), 61 states have call successors, (78) [2023-12-02 16:48:27,640 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 334 states to 334 states and 421 transitions. [2023-12-02 16:48:27,641 INFO L78 Accepts]: Start accepts. Automaton has 334 states and 421 transitions. Word has length 37 [2023-12-02 16:48:27,641 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:48:27,641 INFO L495 AbstractCegarLoop]: Abstraction has 334 states and 421 transitions. [2023-12-02 16:48:27,641 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-12-02 16:48:27,641 INFO L276 IsEmpty]: Start isEmpty. Operand 334 states and 421 transitions. [2023-12-02 16:48:27,643 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2023-12-02 16:48:27,644 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:48:27,644 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:48:27,644 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-12-02 16:48:27,644 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:48:27,645 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:48:27,645 INFO L85 PathProgramCache]: Analyzing trace with hash -1848128585, now seen corresponding path program 1 times [2023-12-02 16:48:27,645 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:48:27,645 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1135066528] [2023-12-02 16:48:27,645 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:48:27,646 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:48:27,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:48:27,898 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 16:48:27,898 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:48:27,898 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1135066528] [2023-12-02 16:48:27,898 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1135066528] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:48:27,899 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:48:27,899 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-12-02 16:48:27,899 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [153713182] [2023-12-02 16:48:27,899 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:48:27,899 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-12-02 16:48:27,900 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:48:27,900 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-12-02 16:48:27,901 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-12-02 16:48:27,901 INFO L87 Difference]: Start difference. First operand 334 states and 421 transitions. Second operand has 8 states, 7 states have (on average 4.0) internal successors, (28), 7 states have internal predecessors, (28), 5 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2023-12-02 16:48:28,427 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:48:28,427 INFO L93 Difference]: Finished difference Result 828 states and 1059 transitions. [2023-12-02 16:48:28,429 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2023-12-02 16:48:28,429 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 4.0) internal successors, (28), 7 states have internal predecessors, (28), 5 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) Word has length 40 [2023-12-02 16:48:28,429 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:48:28,433 INFO L225 Difference]: With dead ends: 828 [2023-12-02 16:48:28,433 INFO L226 Difference]: Without dead ends: 570 [2023-12-02 16:48:28,434 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=66, Invalid=174, Unknown=0, NotChecked=0, Total=240 [2023-12-02 16:48:28,435 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 196 mSDsluCounter, 233 mSDsCounter, 0 mSdLazyCounter, 392 mSolverCounterSat, 100 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 208 SdHoareTripleChecker+Valid, 293 SdHoareTripleChecker+Invalid, 492 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 100 IncrementalHoareTripleChecker+Valid, 392 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-12-02 16:48:28,435 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [208 Valid, 293 Invalid, 492 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [100 Valid, 392 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-12-02 16:48:28,437 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 570 states. [2023-12-02 16:48:28,481 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 570 to 542. [2023-12-02 16:48:28,482 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 542 states, 360 states have (on average 1.2805555555555554) internal successors, (461), 398 states have internal predecessors, (461), 98 states have call successors, (98), 74 states have call predecessors, (98), 83 states have return successors, (129), 95 states have call predecessors, (129), 98 states have call successors, (129) [2023-12-02 16:48:28,486 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 542 states to 542 states and 688 transitions. [2023-12-02 16:48:28,486 INFO L78 Accepts]: Start accepts. Automaton has 542 states and 688 transitions. Word has length 40 [2023-12-02 16:48:28,486 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:48:28,486 INFO L495 AbstractCegarLoop]: Abstraction has 542 states and 688 transitions. [2023-12-02 16:48:28,487 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 4.0) internal successors, (28), 7 states have internal predecessors, (28), 5 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2023-12-02 16:48:28,487 INFO L276 IsEmpty]: Start isEmpty. Operand 542 states and 688 transitions. [2023-12-02 16:48:28,489 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2023-12-02 16:48:28,489 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:48:28,490 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:48:28,490 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-12-02 16:48:28,490 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:48:28,491 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:48:28,491 INFO L85 PathProgramCache]: Analyzing trace with hash -1238142504, now seen corresponding path program 1 times [2023-12-02 16:48:28,491 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:48:28,491 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1764749625] [2023-12-02 16:48:28,491 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:48:28,492 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:48:28,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:48:28,535 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-12-02 16:48:28,535 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:48:28,536 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1764749625] [2023-12-02 16:48:28,536 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1764749625] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 16:48:28,536 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 16:48:28,536 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-12-02 16:48:28,536 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1116731697] [2023-12-02 16:48:28,537 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 16:48:28,537 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 16:48:28,537 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:48:28,538 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 16:48:28,538 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-12-02 16:48:28,538 INFO L87 Difference]: Start difference. First operand 542 states and 688 transitions. Second operand has 4 states, 3 states have (on average 15.0) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2023-12-02 16:48:28,671 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:48:28,671 INFO L93 Difference]: Finished difference Result 907 states and 1150 transitions. [2023-12-02 16:48:28,672 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-12-02 16:48:28,672 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 15.0) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 62 [2023-12-02 16:48:28,672 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:48:28,674 INFO L225 Difference]: With dead ends: 907 [2023-12-02 16:48:28,674 INFO L226 Difference]: Without dead ends: 367 [2023-12-02 16:48:28,676 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-12-02 16:48:28,677 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 99 mSDsluCounter, 49 mSDsCounter, 0 mSdLazyCounter, 88 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 99 SdHoareTripleChecker+Valid, 134 SdHoareTripleChecker+Invalid, 92 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 88 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 16:48:28,677 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [99 Valid, 134 Invalid, 92 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 88 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 16:48:28,678 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 367 states. [2023-12-02 16:48:28,707 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 367 to 361. [2023-12-02 16:48:28,707 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 361 states, 242 states have (on average 1.2603305785123966) internal successors, (305), 268 states have internal predecessors, (305), 64 states have call successors, (64), 50 states have call predecessors, (64), 54 states have return successors, (79), 62 states have call predecessors, (79), 64 states have call successors, (79) [2023-12-02 16:48:28,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 361 states to 361 states and 448 transitions. [2023-12-02 16:48:28,710 INFO L78 Accepts]: Start accepts. Automaton has 361 states and 448 transitions. Word has length 62 [2023-12-02 16:48:28,711 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:48:28,711 INFO L495 AbstractCegarLoop]: Abstraction has 361 states and 448 transitions. [2023-12-02 16:48:28,711 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 15.0) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2023-12-02 16:48:28,711 INFO L276 IsEmpty]: Start isEmpty. Operand 361 states and 448 transitions. [2023-12-02 16:48:28,712 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2023-12-02 16:48:28,712 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:48:28,713 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:48:28,713 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-12-02 16:48:28,713 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:48:28,713 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:48:28,714 INFO L85 PathProgramCache]: Analyzing trace with hash 2062602352, now seen corresponding path program 1 times [2023-12-02 16:48:28,714 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:48:28,714 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1668023244] [2023-12-02 16:48:28,714 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:48:28,714 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:48:28,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:48:28,922 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 8 proven. 13 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2023-12-02 16:48:28,922 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:48:28,922 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1668023244] [2023-12-02 16:48:28,923 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1668023244] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 16:48:28,923 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [625301624] [2023-12-02 16:48:28,923 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:48:28,923 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:48:28,923 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:48:28,925 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 16:48:28,934 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-12-02 16:48:29,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:48:29,036 INFO L262 TraceCheckSpWp]: Trace formula consists of 300 conjuncts, 18 conjunts are in the unsatisfiable core [2023-12-02 16:48:29,043 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 16:48:29,175 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 31 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 16:48:29,175 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 16:48:29,302 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 16 proven. 1 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2023-12-02 16:48:29,303 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [625301624] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 16:48:29,303 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2079860904] [2023-12-02 16:48:29,323 INFO L159 IcfgInterpreter]: Started Sifa with 41 locations of interest [2023-12-02 16:48:29,323 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 16:48:29,326 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 16:48:29,332 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 16:48:29,332 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 16:48:33,609 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 21 for LOIs [2023-12-02 16:48:33,615 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 41 for LOIs [2023-12-02 16:48:34,123 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 69 for LOIs [2023-12-02 16:48:34,159 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 40 for LOIs [2023-12-02 16:48:34,356 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 39 for LOIs [2023-12-02 16:48:34,373 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 16:48:38,165 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6884#(and (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| |timeShift_getWaterLevel_#res#1|) (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (exists ((|v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_7| Int)) (and (not (= |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_7| 0)) (<= |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_7| 2147483647) (<= 0 (+ 2147483648 |v_ULTIMATE.start_test_~tmp___2~0#1_BEFORE_CALL_7|)))) (<= 2 ~waterLevel~0) (= 1 ~systemActive~0) (= |old(~pumpRunning~0)| 0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2)) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1|) (= |old(~waterLevel~0)| ~waterLevel~0) (exists ((|v_ULTIMATE.start_test_~tmp~3#1_BEFORE_CALL_14| Int) (v_~systemActive~0_19 Int)) (and (<= 0 (+ |v_ULTIMATE.start_test_~tmp~3#1_BEFORE_CALL_14| 2147483648)) (<= |v_ULTIMATE.start_test_~tmp~3#1_BEFORE_CALL_14| 2147483647) (= v_~systemActive~0_19 1) (= |old(~switchedOnBeforeTS~0)| 0))) (<= |timeShift_getWaterLevel_#res#1| 2147483647) (exists ((|v_processEnvironment__wrappee__methaneQuery_activatePump_#t~ret33#1_32| Int)) (and (= |v_processEnvironment__wrappee__methaneQuery_activatePump_#t~ret33#1_32| 0) (= ~pumpRunning~0 1))) (<= ~methaneLevelCritical~0 2147483647) (<= 0 (+ ~methaneLevelCritical~0 2147483648)) (= ~switchedOnBeforeTS~0 0))' at error location [2023-12-02 16:48:38,166 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 16:48:38,166 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 16:48:38,166 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 6, 6] total 16 [2023-12-02 16:48:38,166 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1280980298] [2023-12-02 16:48:38,166 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 16:48:38,167 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2023-12-02 16:48:38,167 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:48:38,168 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2023-12-02 16:48:38,169 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=251, Invalid=2005, Unknown=0, NotChecked=0, Total=2256 [2023-12-02 16:48:38,169 INFO L87 Difference]: Start difference. First operand 361 states and 448 transitions. Second operand has 16 states, 14 states have (on average 6.285714285714286) internal successors, (88), 15 states have internal predecessors, (88), 7 states have call successors, (19), 4 states have call predecessors, (19), 6 states have return successors, (18), 7 states have call predecessors, (18), 7 states have call successors, (18) [2023-12-02 16:48:42,714 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:48:42,714 INFO L93 Difference]: Finished difference Result 4290 states and 5503 transitions. [2023-12-02 16:48:42,715 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 134 states. [2023-12-02 16:48:42,715 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 14 states have (on average 6.285714285714286) internal successors, (88), 15 states have internal predecessors, (88), 7 states have call successors, (19), 4 states have call predecessors, (19), 6 states have return successors, (18), 7 states have call predecessors, (18), 7 states have call successors, (18) Word has length 70 [2023-12-02 16:48:42,715 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:48:42,730 INFO L225 Difference]: With dead ends: 4290 [2023-12-02 16:48:42,730 INFO L226 Difference]: Without dead ends: 2963 [2023-12-02 16:48:42,744 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 384 GetRequests, 215 SyntacticMatches, 0 SemanticMatches, 169 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11335 ImplicationChecksByTransitivity, 6.1s TimeCoverageRelationStatistics Valid=2370, Invalid=26700, Unknown=0, NotChecked=0, Total=29070 [2023-12-02 16:48:42,745 INFO L413 NwaCegarLoop]: 355 mSDtfsCounter, 1319 mSDsluCounter, 2029 mSDsCounter, 0 mSdLazyCounter, 2823 mSolverCounterSat, 735 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1326 SdHoareTripleChecker+Valid, 2384 SdHoareTripleChecker+Invalid, 3558 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 735 IncrementalHoareTripleChecker+Valid, 2823 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2023-12-02 16:48:42,746 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1326 Valid, 2384 Invalid, 3558 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [735 Valid, 2823 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2023-12-02 16:48:42,748 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2963 states. [2023-12-02 16:48:42,854 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2963 to 1824. [2023-12-02 16:48:42,857 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1824 states, 1242 states have (on average 1.2326892109500804) internal successors, (1531), 1351 states have internal predecessors, (1531), 298 states have call successors, (298), 260 states have call predecessors, (298), 283 states have return successors, (403), 290 states have call predecessors, (403), 298 states have call successors, (403) [2023-12-02 16:48:42,864 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1824 states to 1824 states and 2232 transitions. [2023-12-02 16:48:42,865 INFO L78 Accepts]: Start accepts. Automaton has 1824 states and 2232 transitions. Word has length 70 [2023-12-02 16:48:42,865 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:48:42,865 INFO L495 AbstractCegarLoop]: Abstraction has 1824 states and 2232 transitions. [2023-12-02 16:48:42,865 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 14 states have (on average 6.285714285714286) internal successors, (88), 15 states have internal predecessors, (88), 7 states have call successors, (19), 4 states have call predecessors, (19), 6 states have return successors, (18), 7 states have call predecessors, (18), 7 states have call successors, (18) [2023-12-02 16:48:42,866 INFO L276 IsEmpty]: Start isEmpty. Operand 1824 states and 2232 transitions. [2023-12-02 16:48:42,869 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2023-12-02 16:48:42,870 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:48:42,870 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:48:42,885 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-12-02 16:48:43,076 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:48:43,076 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:48:43,076 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:48:43,077 INFO L85 PathProgramCache]: Analyzing trace with hash -49845868, now seen corresponding path program 1 times [2023-12-02 16:48:43,077 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:48:43,077 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1743789982] [2023-12-02 16:48:43,077 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:48:43,077 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:48:43,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:48:43,283 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 5 proven. 16 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-12-02 16:48:43,283 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:48:43,284 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1743789982] [2023-12-02 16:48:43,284 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1743789982] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 16:48:43,284 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1915291024] [2023-12-02 16:48:43,284 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:48:43,284 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:48:43,284 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:48:43,285 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 16:48:43,287 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-12-02 16:48:43,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:48:43,367 INFO L262 TraceCheckSpWp]: Trace formula consists of 297 conjuncts, 13 conjunts are in the unsatisfiable core [2023-12-02 16:48:43,370 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 16:48:43,424 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 16 proven. 1 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2023-12-02 16:48:43,424 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 16:48:43,530 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2023-12-02 16:48:43,530 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1915291024] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 16:48:43,530 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [501584534] [2023-12-02 16:48:43,533 INFO L159 IcfgInterpreter]: Started Sifa with 48 locations of interest [2023-12-02 16:48:43,534 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 16:48:43,534 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 16:48:43,534 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 16:48:43,535 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 16:48:46,232 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 37 for LOIs [2023-12-02 16:48:46,238 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 24 for LOIs [2023-12-02 16:48:46,497 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 28 for LOIs [2023-12-02 16:48:46,502 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 61 for LOIs [2023-12-02 16:48:46,724 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 36 for LOIs [2023-12-02 16:48:46,734 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 48 for LOIs [2023-12-02 16:48:46,746 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 16:48:50,366 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15922#(and (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| |timeShift_getWaterLevel_#res#1|) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2147483648)) (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 0)) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (<= |old(~pumpRunning~0)| 2147483647) (= 1 ~systemActive~0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2)) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1|) (<= ~waterLevel~0 2147483647) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 2147483648)) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 2147483647) (= ~switchedOnBeforeTS~0 0))' at error location [2023-12-02 16:48:50,367 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 16:48:50,367 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 16:48:50,367 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 6, 6] total 18 [2023-12-02 16:48:50,367 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [451917190] [2023-12-02 16:48:50,367 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 16:48:50,368 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2023-12-02 16:48:50,368 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:48:50,369 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2023-12-02 16:48:50,370 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=345, Invalid=2847, Unknown=0, NotChecked=0, Total=3192 [2023-12-02 16:48:50,370 INFO L87 Difference]: Start difference. First operand 1824 states and 2232 transitions. Second operand has 18 states, 14 states have (on average 5.714285714285714) internal successors, (80), 14 states have internal predecessors, (80), 6 states have call successors, (18), 3 states have call predecessors, (18), 7 states have return successors, (20), 9 states have call predecessors, (20), 6 states have call successors, (20) [2023-12-02 16:48:53,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:48:53,944 INFO L93 Difference]: Finished difference Result 3658 states and 4581 transitions. [2023-12-02 16:48:53,944 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 114 states. [2023-12-02 16:48:53,944 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 14 states have (on average 5.714285714285714) internal successors, (80), 14 states have internal predecessors, (80), 6 states have call successors, (18), 3 states have call predecessors, (18), 7 states have return successors, (20), 9 states have call predecessors, (20), 6 states have call successors, (20) Word has length 73 [2023-12-02 16:48:53,945 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:48:53,968 INFO L225 Difference]: With dead ends: 3658 [2023-12-02 16:48:53,968 INFO L226 Difference]: Without dead ends: 3656 [2023-12-02 16:48:53,980 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 362 GetRequests, 200 SyntacticMatches, 0 SemanticMatches, 162 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10051 ImplicationChecksByTransitivity, 5.7s TimeCoverageRelationStatistics Valid=2144, Invalid=24588, Unknown=0, NotChecked=0, Total=26732 [2023-12-02 16:48:53,980 INFO L413 NwaCegarLoop]: 255 mSDtfsCounter, 882 mSDsluCounter, 1461 mSDsCounter, 0 mSdLazyCounter, 2225 mSolverCounterSat, 534 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 892 SdHoareTripleChecker+Valid, 1716 SdHoareTripleChecker+Invalid, 2759 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 534 IncrementalHoareTripleChecker+Valid, 2225 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2023-12-02 16:48:53,981 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [892 Valid, 1716 Invalid, 2759 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [534 Valid, 2225 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2023-12-02 16:48:53,985 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3656 states. [2023-12-02 16:48:54,259 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3656 to 2825. [2023-12-02 16:48:54,265 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2825 states, 1923 states have (on average 1.2298491939677587) internal successors, (2365), 2097 states have internal predecessors, (2365), 466 states have call successors, (466), 405 states have call predecessors, (466), 435 states have return successors, (664), 434 states have call predecessors, (664), 466 states have call successors, (664) [2023-12-02 16:48:54,282 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2825 states to 2825 states and 3495 transitions. [2023-12-02 16:48:54,283 INFO L78 Accepts]: Start accepts. Automaton has 2825 states and 3495 transitions. Word has length 73 [2023-12-02 16:48:54,283 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:48:54,284 INFO L495 AbstractCegarLoop]: Abstraction has 2825 states and 3495 transitions. [2023-12-02 16:48:54,284 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 14 states have (on average 5.714285714285714) internal successors, (80), 14 states have internal predecessors, (80), 6 states have call successors, (18), 3 states have call predecessors, (18), 7 states have return successors, (20), 9 states have call predecessors, (20), 6 states have call successors, (20) [2023-12-02 16:48:54,284 INFO L276 IsEmpty]: Start isEmpty. Operand 2825 states and 3495 transitions. [2023-12-02 16:48:54,291 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2023-12-02 16:48:54,291 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 16:48:54,291 INFO L195 NwaCegarLoop]: trace histogram [5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:48:54,301 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2023-12-02 16:48:54,494 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:48:54,495 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-12-02 16:48:54,495 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 16:48:54,495 INFO L85 PathProgramCache]: Analyzing trace with hash -1478878090, now seen corresponding path program 1 times [2023-12-02 16:48:54,495 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 16:48:54,495 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1629035891] [2023-12-02 16:48:54,495 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:48:54,495 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 16:48:54,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:48:54,619 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 42 proven. 1 refuted. 0 times theorem prover too weak. 44 trivial. 0 not checked. [2023-12-02 16:48:54,619 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 16:48:54,619 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1629035891] [2023-12-02 16:48:54,619 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1629035891] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 16:48:54,619 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1704315090] [2023-12-02 16:48:54,620 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 16:48:54,620 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:48:54,620 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 16:48:54,621 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 16:48:54,623 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-12-02 16:48:54,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 16:48:54,733 INFO L262 TraceCheckSpWp]: Trace formula consists of 396 conjuncts, 26 conjunts are in the unsatisfiable core [2023-12-02 16:48:54,744 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 16:48:55,145 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 43 proven. 42 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-12-02 16:48:55,145 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 16:48:55,660 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 54 proven. 5 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2023-12-02 16:48:55,661 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1704315090] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 16:48:55,661 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1225597900] [2023-12-02 16:48:55,664 INFO L159 IcfgInterpreter]: Started Sifa with 47 locations of interest [2023-12-02 16:48:55,664 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 16:48:55,665 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 16:48:55,665 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 16:48:55,665 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 16:48:58,414 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 18 for LOIs [2023-12-02 16:48:58,417 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 24 for LOIs [2023-12-02 16:48:58,724 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 44 for LOIs [2023-12-02 16:48:58,733 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 21 for LOIs [2023-12-02 16:48:58,828 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 36 for LOIs [2023-12-02 16:48:58,843 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 56 for LOIs [2023-12-02 16:48:58,866 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 16:49:02,112 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '25606#(and (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| |timeShift_getWaterLevel_#res#1|) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2147483648)) (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 0)) (= 1 ~systemActive~0) (= |old(~pumpRunning~0)| 0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2)) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1|) (<= ~waterLevel~0 2147483647) (<= ~methaneLevelCritical~0 2147483647) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 2147483648)) (<= 0 (+ ~methaneLevelCritical~0 2147483648)) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 2147483647) (= ~switchedOnBeforeTS~0 0))' at error location [2023-12-02 16:49:02,113 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 16:49:02,113 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 16:49:02,113 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 13, 11] total 26 [2023-12-02 16:49:02,113 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [850208271] [2023-12-02 16:49:02,113 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 16:49:02,114 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2023-12-02 16:49:02,114 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 16:49:02,115 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2023-12-02 16:49:02,116 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=365, Invalid=3541, Unknown=0, NotChecked=0, Total=3906 [2023-12-02 16:49:02,116 INFO L87 Difference]: Start difference. First operand 2825 states and 3495 transitions. Second operand has 26 states, 25 states have (on average 6.16) internal successors, (154), 25 states have internal predecessors, (154), 14 states have call successors, (37), 6 states have call predecessors, (37), 11 states have return successors, (35), 15 states have call predecessors, (35), 13 states have call successors, (35) [2023-12-02 16:49:08,687 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 16:49:08,688 INFO L93 Difference]: Finished difference Result 10399 states and 13393 transitions. [2023-12-02 16:49:08,688 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 140 states. [2023-12-02 16:49:08,688 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 25 states have (on average 6.16) internal successors, (154), 25 states have internal predecessors, (154), 14 states have call successors, (37), 6 states have call predecessors, (37), 11 states have return successors, (35), 15 states have call predecessors, (35), 13 states have call successors, (35) Word has length 103 [2023-12-02 16:49:08,689 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 16:49:08,691 INFO L225 Difference]: With dead ends: 10399 [2023-12-02 16:49:08,691 INFO L226 Difference]: Without dead ends: 0 [2023-12-02 16:49:08,714 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 525 GetRequests, 317 SyntacticMatches, 9 SemanticMatches, 199 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14776 ImplicationChecksByTransitivity, 7.5s TimeCoverageRelationStatistics Valid=3718, Invalid=36482, Unknown=0, NotChecked=0, Total=40200 [2023-12-02 16:49:08,715 INFO L413 NwaCegarLoop]: 180 mSDtfsCounter, 1734 mSDsluCounter, 1379 mSDsCounter, 0 mSdLazyCounter, 3206 mSolverCounterSat, 1229 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1734 SdHoareTripleChecker+Valid, 1559 SdHoareTripleChecker+Invalid, 4435 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1229 IncrementalHoareTripleChecker+Valid, 3206 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2023-12-02 16:49:08,715 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1734 Valid, 1559 Invalid, 4435 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1229 Valid, 3206 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2023-12-02 16:49:08,715 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-12-02 16:49:08,715 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-12-02 16:49:08,715 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 16:49:08,716 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-12-02 16:49:08,717 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 103 [2023-12-02 16:49:08,717 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 16:49:08,717 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-12-02 16:49:08,718 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 25 states have (on average 6.16) internal successors, (154), 25 states have internal predecessors, (154), 14 states have call successors, (37), 6 states have call predecessors, (37), 11 states have return successors, (35), 15 states have call predecessors, (35), 13 states have call successors, (35) [2023-12-02 16:49:08,718 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-12-02 16:49:08,718 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-12-02 16:49:08,720 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-12-02 16:49:08,725 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2023-12-02 16:49:08,920 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 16:49:08,922 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-12-02 16:49:18,980 WARN L293 SmtUtils]: Spent 6.94s on a formula simplification. DAG size of input: 572 DAG size of output: 194 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2023-12-02 16:49:47,692 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 624 631) no Hoare annotation was computed. [2023-12-02 16:49:47,693 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 624 631) the Hoare annotation is: (let ((.cse1 (not (= 2 ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 (= |old(~pumpRunning~0)| 0)) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) (or (< 2 ~waterLevel~0) .cse0 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (= ~switchedOnBeforeTS~0 0) (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|))))) [2023-12-02 16:49:47,693 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 540 546) no Hoare annotation was computed. [2023-12-02 16:49:47,693 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 540 546) the Hoare annotation is: true [2023-12-02 16:49:47,693 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 758 769) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse6 (= |old(~methaneLevelCritical~0)| 0)) (.cse11 (not (= ~waterLevel~0 1)))) (let ((.cse8 (and .cse11 (<= 1 ~waterLevel~0))) (.cse1 (not .cse6)) (.cse10 (not (= 2 ~waterLevel~0))) (.cse4 (not (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (.cse9 (not (= 0 ~systemActive~0))) (.cse0 (< 2 ~waterLevel~0)) (.cse5 (not (= ~pumpRunning~0 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse7 (not .cse2))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse8 .cse4 .cse9) (or .cse1 .cse5 .cse2 .cse8 .cse4 .cse9) (or .cse3 .cse10 .cse6 .cse7) (or .cse1 .cse2 .cse3 .cse10 (not (= ~pumpRunning~0 1))) (or .cse11 .cse1 .cse5 .cse2 .cse3) (or .cse1 .cse5 .cse2 .cse10 .cse4 .cse9) (or .cse1 .cse5 .cse2 .cse3 .cse10) (or .cse5 .cse10 .cse6 .cse7 .cse4 .cse9) (or .cse0 .cse5 .cse3 .cse6 .cse7)))) [2023-12-02 16:49:47,693 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 758 769) no Hoare annotation was computed. [2023-12-02 16:49:47,693 INFO L902 garLoopResultBuilder]: At program point L833(line 833) the Hoare annotation is: true [2023-12-02 16:49:47,693 INFO L899 garLoopResultBuilder]: For program point L833-1(line 833) no Hoare annotation was computed. [2023-12-02 16:49:47,694 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 827 856) no Hoare annotation was computed. [2023-12-02 16:49:47,694 INFO L899 garLoopResultBuilder]: For program point L852(lines 827 856) no Hoare annotation was computed. [2023-12-02 16:49:47,694 INFO L899 garLoopResultBuilder]: For program point L848(line 848) no Hoare annotation was computed. [2023-12-02 16:49:47,694 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 827 856) the Hoare annotation is: true [2023-12-02 16:49:47,694 INFO L899 garLoopResultBuilder]: For program point L841(lines 841 845) no Hoare annotation was computed. [2023-12-02 16:49:47,694 INFO L902 garLoopResultBuilder]: At program point L841-1(lines 841 845) the Hoare annotation is: true [2023-12-02 16:49:47,694 INFO L902 garLoopResultBuilder]: At program point L837-2(lines 837 851) the Hoare annotation is: true [2023-12-02 16:49:47,694 INFO L895 garLoopResultBuilder]: At program point L956(line 956) the Hoare annotation is: (let ((.cse20 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse4 (= ~methaneLevelCritical~0 0)) (.cse11 (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |old(~waterLevel~0)|)) (and (<= |old(~waterLevel~0)| 0) .cse20))) (.cse18 (= ~pumpRunning~0 0)) (.cse12 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0)) (.cse19 (= ~switchedOnBeforeTS~0 0))) (let ((.cse1 (and .cse18 .cse12 .cse20 .cse19)) (.cse2 (< 2 |old(~waterLevel~0)|)) (.cse8 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse6 (and (not .cse19) .cse18 .cse11 .cse12)) (.cse14 (= |old(~switchedOnBeforeTS~0)| 0)) (.cse15 (< 1 |old(~waterLevel~0)|)) (.cse10 (not .cse18)) (.cse13 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 0 ~systemActive~0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse9 (not .cse4)) (.cse16 (not (= |old(~pumpRunning~0)| 1))) (.cse7 (not (= |old(~waterLevel~0)| 2))) (.cse17 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7) (or .cse8 .cse5 .cse9 (and .cse10 .cse11 .cse12 .cse13) .cse2 .cse14) (or .cse0 .cse1 .cse5 .cse2) (or .cse15 .cse8 .cse4 .cse5 .cse6 .cse14) (or .cse15 .cse5 .cse9 .cse16 (not (= |old(~switchedOnBeforeTS~0)| 1)) .cse17) (or .cse5 (and .cse10 (= ~waterLevel~0 1) .cse13 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 1)) .cse9 .cse7) (or .cse0 .cse7 .cse3) (or .cse5 .cse9 .cse16 .cse7 .cse17))))) [2023-12-02 16:49:47,695 INFO L899 garLoopResultBuilder]: For program point L956-1(line 956) no Hoare annotation was computed. [2023-12-02 16:49:47,695 INFO L895 garLoopResultBuilder]: At program point L593(line 593) the Hoare annotation is: (let ((.cse6 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~switchedOnBeforeTS~0 0)) (.cse0 (not .cse6)) (.cse4 (< 2 |old(~waterLevel~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (and (not (= |old(~waterLevel~0)| 1)) (<= 1 |old(~waterLevel~0)|)) (and .cse2 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3)) (or (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|)) .cse1 .cse4 (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse1 (and .cse2 (= 2 ~waterLevel~0) .cse3) .cse5) (or .cse0 .cse4 (not (= 0 ~systemActive~0))) (or .cse1 (and (= ~methaneLevelCritical~0 0) (not (= |old(~pumpRunning~0)| 1))) .cse6 .cse5)))) [2023-12-02 16:49:47,695 INFO L899 garLoopResultBuilder]: For program point L593-1(lines 574 598) no Hoare annotation was computed. [2023-12-02 16:49:47,695 INFO L899 garLoopResultBuilder]: For program point L527-1(lines 527 533) no Hoare annotation was computed. [2023-12-02 16:49:47,695 INFO L899 garLoopResultBuilder]: For program point L420(line 420) no Hoare annotation was computed. [2023-12-02 16:49:47,695 INFO L895 garLoopResultBuilder]: At program point L941(line 941) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse9 (= ~pumpRunning~0 0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= |old(~pumpRunning~0)| 0)) (.cse13 (= ~switchedOnBeforeTS~0 0))) (let ((.cse10 (not .cse13)) (.cse6 (not .cse3)) (.cse7 (and (not (= |old(~waterLevel~0)| 1)) (<= 1 |old(~waterLevel~0)|))) (.cse8 (and .cse9 .cse11 .cse13)) (.cse14 (not (= 0 ~systemActive~0))) (.cse5 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse0 (not .cse9)) (.cse12 (= |old(~switchedOnBeforeTS~0)| 0)) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse16 (not .cse1)) (.cse17 (not (= |old(~pumpRunning~0)| 1))) (.cse15 (< 2 |old(~waterLevel~0)|)) (.cse18 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse2 .cse7 .cse8) (or .cse6 .cse9 .cse2 .cse4) (or (= 2 ~waterLevel~0) .cse2 .cse4) (or .cse6 .cse2 .cse7 (and .cse10 .cse9 .cse11) .cse12) (or .cse5 .cse6 .cse4 .cse13 .cse14) (or .cse10 .cse6 .cse7 .cse14 .cse12) (or .cse10 .cse6 .cse2 .cse4 .cse12) (or (< 1 |old(~waterLevel~0)|) .cse5 .cse2 (and .cse0 .cse11) .cse12) (or .cse6 (and .cse9 .cse11) .cse15 .cse14) (or .cse5 .cse2 .cse15 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (or .cse5 .cse6 .cse7 .cse8 .cse14) (or .cse5 .cse0 .cse2 .cse4 .cse12) (or .cse2 .cse16 .cse17 .cse4 .cse18) (or .cse2 .cse16 .cse17 .cse15 (not (= |old(~switchedOnBeforeTS~0)| 1)) .cse18)))) [2023-12-02 16:49:47,695 INFO L899 garLoopResultBuilder]: For program point L941-1(line 941) no Hoare annotation was computed. [2023-12-02 16:49:47,696 INFO L899 garLoopResultBuilder]: For program point L520-2(lines 516 538) no Hoare annotation was computed. [2023-12-02 16:49:47,696 INFO L899 garLoopResultBuilder]: For program point L582(lines 582 590) no Hoare annotation was computed. [2023-12-02 16:49:47,696 INFO L899 garLoopResultBuilder]: For program point L578(lines 578 595) no Hoare annotation was computed. [2023-12-02 16:49:47,696 INFO L899 garLoopResultBuilder]: For program point L958(lines 958 968) no Hoare annotation was computed. [2023-12-02 16:49:47,696 INFO L899 garLoopResultBuilder]: For program point L954(lines 954 971) no Hoare annotation was computed. [2023-12-02 16:49:47,696 INFO L899 garLoopResultBuilder]: For program point L954-1(lines 946 974) no Hoare annotation was computed. [2023-12-02 16:49:47,696 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 513 539) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse9 (= ~pumpRunning~0 0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= |old(~pumpRunning~0)| 0)) (.cse13 (= ~switchedOnBeforeTS~0 0))) (let ((.cse10 (not .cse13)) (.cse6 (not .cse3)) (.cse7 (and (not (= |old(~waterLevel~0)| 1)) (<= 1 |old(~waterLevel~0)|))) (.cse8 (and .cse9 .cse11 .cse13)) (.cse14 (not (= 0 ~systemActive~0))) (.cse5 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse0 (not .cse9)) (.cse12 (= |old(~switchedOnBeforeTS~0)| 0)) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse16 (not .cse1)) (.cse17 (not (= |old(~pumpRunning~0)| 1))) (.cse15 (< 2 |old(~waterLevel~0)|)) (.cse18 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse2 .cse7 .cse8) (or .cse6 .cse9 .cse2 .cse4) (or (= 2 ~waterLevel~0) .cse2 .cse4) (or .cse6 .cse2 .cse7 (and .cse10 .cse9 .cse11) .cse12) (or .cse5 .cse6 .cse4 .cse13 .cse14) (or .cse10 .cse6 .cse7 .cse14 .cse12) (or .cse10 .cse6 .cse2 .cse4 .cse12) (or (< 1 |old(~waterLevel~0)|) .cse5 .cse2 (and .cse0 .cse11) .cse12) (or .cse6 (and .cse9 .cse11) .cse15 .cse14) (or .cse5 .cse2 .cse15 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (or .cse5 .cse6 .cse7 .cse8 .cse14) (or .cse5 .cse0 .cse2 .cse4 .cse12) (or .cse2 .cse16 .cse17 .cse4 .cse18) (or .cse2 .cse16 .cse17 .cse15 (not (= |old(~switchedOnBeforeTS~0)| 1)) .cse18)))) [2023-12-02 16:49:47,696 INFO L899 garLoopResultBuilder]: For program point L959(lines 959 965) no Hoare annotation was computed. [2023-12-02 16:49:47,697 INFO L895 garLoopResultBuilder]: At program point L588(line 588) the Hoare annotation is: (let ((.cse12 (= ~methaneLevelCritical~0 0)) (.cse8 (not (= |old(~pumpRunning~0)| 1)))) (let ((.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse2 (and .cse12 .cse8)) (.cse4 (= ~pumpRunning~0 1)) (.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse9 (not (= ~pumpRunning~0 0))) (.cse3 (<= 1 |old(~waterLevel~0)|)) (.cse10 (= |timeShift_processEnvironment_~tmp~5#1| 0)) (.cse11 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6) (or .cse0 .cse7 .cse1 .cse8 .cse4) (or .cse5 .cse1 (and .cse7 .cse3)) (or .cse1 .cse2 .cse6 .cse4) (or (and .cse9 .cse10 (= ~waterLevel~0 1) .cse11) .cse1 .cse6) (or .cse12 .cse1 .cse6) (or .cse5 (< 2 |old(~waterLevel~0)|) (not (= 0 ~systemActive~0))) (or (< 1 |old(~waterLevel~0)|) .cse0 (and .cse9 (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse3) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse12 .cse10 (<= ~waterLevel~0 0) .cse11) .cse1)))) [2023-12-02 16:49:47,697 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 513 539) no Hoare annotation was computed. [2023-12-02 16:49:47,697 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 420) no Hoare annotation was computed. [2023-12-02 16:49:47,697 INFO L895 garLoopResultBuilder]: At program point L584(line 584) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~pumpRunning~0 0))) (.cse6 (<= 1 |old(~waterLevel~0)|)) (.cse8 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse9 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse5) (or .cse4 .cse1 (and (not (= |old(~waterLevel~0)| 1)) .cse6)) (or .cse1 (and .cse7 .cse2 .cse8 (= ~waterLevel~0 1) .cse9) .cse5) (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 (and .cse7 (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse6) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse8 (<= ~waterLevel~0 0) .cse9)) (or .cse4 .cse3 (not (= 0 ~systemActive~0))))) [2023-12-02 16:49:47,697 INFO L895 garLoopResultBuilder]: At program point L580(line 580) the Hoare annotation is: (let ((.cse2 (<= 1 |old(~waterLevel~0)|)) (.cse1 (not (= ~pumpRunning~0 0))) (.cse3 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse10 (not (= |old(~waterLevel~0)| 1))) (.cse4 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse9 (not (= |old(~waterLevel~0)| 2))) (.cse7 (= ~pumpRunning~0 1))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 (and .cse1 (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse2) (= |old(~waterLevel~0)| ~waterLevel~0)) (<= ~waterLevel~0 0) .cse3) .cse4) (or .cse4 .cse5 .cse6 .cse2 (not (= |old(~switchedOnBeforeTS~0)| 1)) .cse7) (or .cse8 .cse4 .cse9) (or .cse8 .cse4 (and .cse10 .cse2)) (or .cse4 (and .cse1 (= ~waterLevel~0 1) .cse3) .cse9) (or .cse8 (< 2 |old(~waterLevel~0)|) (not (= 0 ~systemActive~0))) (or .cse0 .cse10 .cse4 .cse5 .cse6 .cse7) (or .cse4 .cse5 .cse6 .cse9 .cse7))) [2023-12-02 16:49:47,697 INFO L899 garLoopResultBuilder]: For program point L580-1(line 580) no Hoare annotation was computed. [2023-12-02 16:49:47,697 INFO L899 garLoopResultBuilder]: For program point L494(lines 431 498) no Hoare annotation was computed. [2023-12-02 16:49:47,698 INFO L899 garLoopResultBuilder]: For program point L461(lines 461 467) no Hoare annotation was computed. [2023-12-02 16:49:47,698 INFO L899 garLoopResultBuilder]: For program point L461-1(lines 461 467) no Hoare annotation was computed. [2023-12-02 16:49:47,698 INFO L895 garLoopResultBuilder]: At program point L713(line 713) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2) (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) (= ~pumpRunning~0 ~switchedOnBeforeTS~0)))) [2023-12-02 16:49:47,698 INFO L895 garLoopResultBuilder]: At program point L453(line 453) the Hoare annotation is: (let ((.cse0 (= ~methaneLevelCritical~0 0))) (let ((.cse6 (<= ~waterLevel~0 1)) (.cse8 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse3 (= ~waterLevel~0 1)) (.cse7 (not .cse0)) (.cse5 (= ~pumpRunning~0 0)) (.cse9 (= 2 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse7 .cse2) (and .cse5 .cse2 (<= ~waterLevel~0 2) (= 0 ~systemActive~0) .cse8) (and .cse0 .cse6 .cse1 .cse2 .cse8) (and .cse5 .cse1 .cse2 .cse3) (and .cse9 .cse1 .cse7 .cse2) (and .cse5 .cse9 .cse1 .cse2) (and .cse9 .cse1 .cse2 .cse4)))) [2023-12-02 16:49:47,698 INFO L895 garLoopResultBuilder]: At program point L491(lines 440 492) the Hoare annotation is: false [2023-12-02 16:49:47,698 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-12-02 16:49:47,698 INFO L899 garLoopResultBuilder]: For program point L479(lines 479 485) no Hoare annotation was computed. [2023-12-02 16:49:47,698 INFO L895 garLoopResultBuilder]: At program point L479-2(lines 471 486) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse4 (= 1 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= 0 ~systemActive~0)) (.cse5 (or (< ~waterLevel~0 1) (= ~waterLevel~0 1)))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse1 .cse4 .cse2) (and .cse0 .cse4 .cse2 .cse5) (and (<= ~waterLevel~0 1) .cse4 .cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (and .cse0 .cse2 .cse3 .cse5))) [2023-12-02 16:49:47,698 INFO L899 garLoopResultBuilder]: For program point L442(lines 441 490) no Hoare annotation was computed. [2023-12-02 16:49:47,699 INFO L899 garLoopResultBuilder]: For program point L471(lines 471 486) no Hoare annotation was computed. [2023-12-02 16:49:47,699 INFO L899 garLoopResultBuilder]: For program point L913(lines 913 920) no Hoare annotation was computed. [2023-12-02 16:49:47,699 INFO L895 garLoopResultBuilder]: At program point L463(line 463) the Hoare annotation is: (let ((.cse6 (= ~methaneLevelCritical~0 0))) (let ((.cse2 (not .cse6)) (.cse0 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse4 (= 2 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= ~waterLevel~0 1) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse3 (= ~waterLevel~0 1)) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse3 .cse5 (= 0 ~systemActive~0) (= ~switchedOnBeforeTS~0 0)) (and .cse0 .cse4 .cse1 .cse3) (and .cse6 .cse1 .cse3 .cse5 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (and .cse4 .cse1 .cse3 (= ~pumpRunning~0 1))))) [2023-12-02 16:49:47,699 INFO L899 garLoopResultBuilder]: For program point L913-2(lines 913 920) no Hoare annotation was computed. [2023-12-02 16:49:47,699 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-12-02 16:49:47,699 INFO L895 garLoopResultBuilder]: At program point L488(lines 441 490) the Hoare annotation is: (let ((.cse5 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (<= ~waterLevel~0 1)) (.cse3 (not .cse5)) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse1 .cse2 .cse4 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (and .cse0 .cse2 .cse4 (= ~waterLevel~0 1)) (and .cse6 .cse2 .cse3 .cse4) (and .cse0 .cse4 (<= ~waterLevel~0 2) (= 0 ~systemActive~0) (= ~switchedOnBeforeTS~0 0)) (and .cse0 .cse6 .cse2 .cse4) (and .cse6 .cse2 .cse4 (= ~pumpRunning~0 1))))) [2023-12-02 16:49:47,699 INFO L899 garLoopResultBuilder]: For program point L711(lines 711 717) no Hoare annotation was computed. [2023-12-02 16:49:47,699 INFO L899 garLoopResultBuilder]: For program point L711-1(lines 711 717) no Hoare annotation was computed. [2023-12-02 16:49:47,699 INFO L899 garLoopResultBuilder]: For program point L451(lines 451 457) no Hoare annotation was computed. [2023-12-02 16:49:47,700 INFO L899 garLoopResultBuilder]: For program point L451-1(lines 451 457) no Hoare annotation was computed. [2023-12-02 16:49:47,700 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 746 757) no Hoare annotation was computed. [2023-12-02 16:49:47,700 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 746 757) the Hoare annotation is: (let ((.cse5 (not (= |old(~waterLevel~0)| 1))) (.cse1 (= ~methaneLevelCritical~0 0))) (let ((.cse6 (not .cse1)) (.cse9 (= 2 ~waterLevel~0)) (.cse7 (not (= ~pumpRunning~0 1))) (.cse10 (not (= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse8 (= ~waterLevel~0 1)) (.cse0 (not (= ~pumpRunning~0 0))) (.cse3 (and .cse5 (<= 1 |old(~waterLevel~0)|))) (.cse11 (not (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse2 .cse6 .cse7 .cse8) (or .cse0 .cse9 .cse2 .cse10) (or .cse0 .cse9 .cse11 .cse10 .cse12) (or (< 1 |old(~waterLevel~0)|) .cse2 .cse6 .cse11 .cse4) (or .cse9 .cse2 (and .cse1 .cse7) .cse10) (or .cse0 .cse5 .cse2 .cse8) (or .cse0 .cse3 .cse11 .cse4 .cse12)))) [2023-12-02 16:49:47,700 INFO L895 garLoopResultBuilder]: At program point L562(line 562) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0)) .cse3) (or .cse0 .cse2 (and .cse1 (= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0)) (and (not (= ~waterLevel~0 1)) (<= 1 ~waterLevel~0)) .cse3) (or (< 2 ~waterLevel~0) .cse2 (not (= ~methaneLevelCritical~0 0)) (= ~switchedOnBeforeTS~0 0) .cse3))) [2023-12-02 16:49:47,700 INFO L899 garLoopResultBuilder]: For program point L556(lines 556 564) no Hoare annotation was computed. [2023-12-02 16:49:47,700 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 548 572) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 (and (not (= ~waterLevel~0 1)) (<= 1 ~waterLevel~0)) .cse3) (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0)) .cse3) (or (< 2 ~waterLevel~0) .cse2 (not (= ~methaneLevelCritical~0 0)) (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse3))) [2023-12-02 16:49:47,700 INFO L899 garLoopResultBuilder]: For program point L552(lines 552 569) no Hoare annotation was computed. [2023-12-02 16:49:47,700 INFO L895 garLoopResultBuilder]: At program point L612(line 612) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 (not .cse1) .cse2 (= ~switchedOnBeforeTS~0 0) .cse3) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) .cse1) .cse3) (or .cse0 .cse2 (and (not (= ~waterLevel~0 1)) (<= 1 ~waterLevel~0)) .cse3))) [2023-12-02 16:49:47,701 INFO L899 garLoopResultBuilder]: For program point L612-1(line 612) no Hoare annotation was computed. [2023-12-02 16:49:47,701 INFO L895 garLoopResultBuilder]: At program point L567(line 567) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) .cse1 .cse2) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse2))) [2023-12-02 16:49:47,701 INFO L899 garLoopResultBuilder]: For program point L567-1(lines 548 572) no Hoare annotation was computed. [2023-12-02 16:49:47,701 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 548 572) no Hoare annotation was computed. [2023-12-02 16:49:47,701 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 643 651) no Hoare annotation was computed. [2023-12-02 16:49:47,701 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 643 651) the Hoare annotation is: true [2023-12-02 16:49:47,701 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 632 642) no Hoare annotation was computed. [2023-12-02 16:49:47,701 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 632 642) the Hoare annotation is: true [2023-12-02 16:49:47,703 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 16:49:47,705 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-12-02 16:49:47,715 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 04:49:47 BoogieIcfgContainer [2023-12-02 16:49:47,715 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-12-02 16:49:47,715 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-12-02 16:49:47,715 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-12-02 16:49:47,716 INFO L274 PluginConnector]: Witness Printer initialized [2023-12-02 16:49:47,716 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 04:48:25" (3/4) ... [2023-12-02 16:49:47,718 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-12-02 16:49:47,721 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-12-02 16:49:47,721 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-12-02 16:49:47,721 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-12-02 16:49:47,721 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-12-02 16:49:47,721 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-12-02 16:49:47,721 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-12-02 16:49:47,721 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-12-02 16:49:47,721 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-12-02 16:49:47,722 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-12-02 16:49:47,729 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 46 nodes and edges [2023-12-02 16:49:47,730 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2023-12-02 16:49:47,730 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-12-02 16:49:47,731 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 16:49:47,732 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-12-02 16:49:47,836 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/witness.graphml [2023-12-02 16:49:47,836 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/witness.yml [2023-12-02 16:49:47,837 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-12-02 16:49:47,837 INFO L158 Benchmark]: Toolchain (without parser) took 82915.19ms. Allocated memory was 172.0MB in the beginning and 1.3GB in the end (delta: 1.1GB). Free memory was 126.5MB in the beginning and 1.0GB in the end (delta: -920.0MB). Peak memory consumption was 189.2MB. Max. memory is 16.1GB. [2023-12-02 16:49:47,837 INFO L158 Benchmark]: CDTParser took 0.15ms. Allocated memory is still 107.0MB. Free memory is still 55.4MB. There was no memory consumed. Max. memory is 16.1GB. [2023-12-02 16:49:47,838 INFO L158 Benchmark]: CACSL2BoogieTranslator took 438.64ms. Allocated memory is still 172.0MB. Free memory was 126.5MB in the beginning and 106.9MB in the end (delta: 19.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-12-02 16:49:47,838 INFO L158 Benchmark]: Boogie Procedure Inliner took 49.40ms. Allocated memory is still 172.0MB. Free memory was 106.9MB in the beginning and 104.4MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-12-02 16:49:47,838 INFO L158 Benchmark]: Boogie Preprocessor took 29.69ms. Allocated memory is still 172.0MB. Free memory was 104.4MB in the beginning and 103.1MB in the end (delta: 1.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-12-02 16:49:47,839 INFO L158 Benchmark]: RCFGBuilder took 525.97ms. Allocated memory was 172.0MB in the beginning and 220.2MB in the end (delta: 48.2MB). Free memory was 102.7MB in the beginning and 174.1MB in the end (delta: -71.4MB). Peak memory consumption was 16.2MB. Max. memory is 16.1GB. [2023-12-02 16:49:47,839 INFO L158 Benchmark]: TraceAbstraction took 81742.60ms. Allocated memory was 220.2MB in the beginning and 1.3GB in the end (delta: 1.1GB). Free memory was 174.1MB in the beginning and 1.1GB in the end (delta: -879.8MB). Peak memory consumption was 795.9MB. Max. memory is 16.1GB. [2023-12-02 16:49:47,840 INFO L158 Benchmark]: Witness Printer took 121.28ms. Allocated memory is still 1.3GB. Free memory was 1.1GB in the beginning and 1.0GB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-12-02 16:49:47,842 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15ms. Allocated memory is still 107.0MB. Free memory is still 55.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 438.64ms. Allocated memory is still 172.0MB. Free memory was 126.5MB in the beginning and 106.9MB in the end (delta: 19.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 49.40ms. Allocated memory is still 172.0MB. Free memory was 106.9MB in the beginning and 104.4MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 29.69ms. Allocated memory is still 172.0MB. Free memory was 104.4MB in the beginning and 103.1MB in the end (delta: 1.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 525.97ms. Allocated memory was 172.0MB in the beginning and 220.2MB in the end (delta: 48.2MB). Free memory was 102.7MB in the beginning and 174.1MB in the end (delta: -71.4MB). Peak memory consumption was 16.2MB. Max. memory is 16.1GB. * TraceAbstraction took 81742.60ms. Allocated memory was 220.2MB in the beginning and 1.3GB in the end (delta: 1.1GB). Free memory was 174.1MB in the beginning and 1.1GB in the end (delta: -879.8MB). Peak memory consumption was 795.9MB. Max. memory is 16.1GB. * Witness Printer took 121.28ms. Allocated memory is still 1.3GB. Free memory was 1.1GB in the beginning and 1.0GB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] - GenericResultAtLocation [Line: 415]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [415] - GenericResultAtLocation [Line: 424]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [424] - GenericResultAtLocation [Line: 499]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [499] - GenericResultAtLocation [Line: 730]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [730] - GenericResultAtLocation [Line: 825]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [825] - GenericResultAtLocation [Line: 926]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [926] - GenericResultAtLocation [Line: 975]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [975] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 420]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 72 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 81.7s, OverallIterations: 10, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 16.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 38.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 4499 SdHoareTripleChecker+Valid, 5.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 4464 mSDsluCounter, 6919 SdHoareTripleChecker+Invalid, 4.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5626 mSDsCounter, 2634 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 9093 IncrementalHoareTripleChecker+Invalid, 11727 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 2634 mSolverCounterUnsat, 1293 mSDtfsCounter, 9093 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1321 GetRequests, 752 SyntacticMatches, 9 SemanticMatches, 560 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 36192 ImplicationChecksByTransitivity, 19.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2825occurred in iteration=9, InterpolantAutomatonStates: 430, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 10 MinimizatonAttempts, 2025 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 27 LocationsWithAnnotation, 6390 PreInvPairs, 7392 NumberOfFragments, 2587 HoareAnnotationTreeSize, 6390 FomulaSimplifications, 223218 FormulaSimplificationTreeSizeReduction, 11.0s HoareSimplificationTime, 27 FomulaSimplificationsInter, 235517 FormulaSimplificationTreeSizeReductionInter, 27.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.6s InterpolantComputationTime, 727 NumberOfCodeBlocks, 727 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 957 ConstructedInterpolants, 0 QuantifiedInterpolants, 2489 SizeOfPredicates, 21 NumberOfNonLiveVariables, 993 ConjunctsInSsa, 57 ConjunctsInUnsatCore, 16 InterpolantComputations, 7 PerfectInterpolantSequences, 393/474 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 440]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 632]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 837]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: (((((((((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (splverifierCounter == 0)) || (((((methaneLevelCritical == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (pumpRunning == switchedOnBeforeTS))) || ((((pumpRunning == 0) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel == 1))) || ((((2 == waterLevel) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (splverifierCounter == 0))) || (((((pumpRunning == 0) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (0 == systemActive)) && (switchedOnBeforeTS == 0))) || ((((pumpRunning == 0) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) || ((((2 == waterLevel) && (1 == systemActive)) && (splverifierCounter == 0)) && (pumpRunning == 1))) RESULT: Ultimate proved your program to be correct! [2023-12-02 16:49:47,864 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3fd1fd4c-2d4d-44b2-b254-a9a45cbc7456/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE