./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 29e70cf9c9b1d0bd005d907ed1d78af9dd0d19752a19f66dfee72f35dd243fc7 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 02:43:39,600 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 02:43:39,605 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 02:43:39,661 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 02:43:39,662 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 02:43:39,667 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 02:43:39,669 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 02:43:39,671 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 02:43:39,672 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 02:43:39,673 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 02:43:39,674 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 02:43:39,676 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 02:43:39,676 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 02:43:39,677 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 02:43:39,683 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 02:43:39,686 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 02:43:39,688 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 02:43:39,697 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 02:43:39,699 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 02:43:39,701 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 02:43:39,703 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 02:43:39,713 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 02:43:39,715 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 02:43:39,716 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 02:43:39,720 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 02:43:39,720 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 02:43:39,721 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 02:43:39,722 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 02:43:39,723 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 02:43:39,724 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 02:43:39,724 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 02:43:39,725 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 02:43:39,726 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 02:43:39,727 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 02:43:39,729 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 02:43:39,729 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 02:43:39,730 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 02:43:39,730 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 02:43:39,731 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 02:43:39,732 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 02:43:39,733 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 02:43:39,734 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-03 02:43:39,765 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 02:43:39,765 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 02:43:39,766 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 02:43:39,766 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 02:43:39,767 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 02:43:39,767 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 02:43:39,767 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 02:43:39,768 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 02:43:39,768 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 02:43:39,768 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-03 02:43:39,768 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 02:43:39,769 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 02:43:39,769 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-03 02:43:39,769 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-03 02:43:39,769 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 02:43:39,770 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-03 02:43:39,770 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-03 02:43:39,770 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-03 02:43:39,771 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 02:43:39,771 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-03 02:43:39,772 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-03 02:43:39,772 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-03 02:43:39,772 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 02:43:39,773 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-03 02:43:39,773 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 02:43:39,773 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-03 02:43:39,773 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-03 02:43:39,774 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-03 02:43:39,774 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 02:43:39,774 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-03 02:43:39,775 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 02:43:39,775 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 02:43:39,775 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:43:39,775 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 02:43:39,776 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-03 02:43:39,776 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 02:43:39,776 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-03 02:43:39,777 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-03 02:43:39,777 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-03 02:43:39,777 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-03 02:43:39,777 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 02:43:39,778 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 29e70cf9c9b1d0bd005d907ed1d78af9dd0d19752a19f66dfee72f35dd243fc7 [2022-11-03 02:43:40,162 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 02:43:40,191 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 02:43:40,195 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 02:43:40,197 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 02:43:40,198 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 02:43:40,200 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c [2022-11-03 02:43:40,283 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/data/817af2c8f/4ecc1ef9a19744828c5b55d818d853f0/FLAGcf0d1db1f [2022-11-03 02:43:41,034 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 02:43:41,035 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c [2022-11-03 02:43:41,047 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/data/817af2c8f/4ecc1ef9a19744828c5b55d818d853f0/FLAGcf0d1db1f [2022-11-03 02:43:41,336 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/data/817af2c8f/4ecc1ef9a19744828c5b55d818d853f0 [2022-11-03 02:43:41,342 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 02:43:41,346 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 02:43:41,348 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 02:43:41,348 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 02:43:41,353 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 02:43:41,354 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:43:41" (1/1) ... [2022-11-03 02:43:41,355 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3b6fe9e5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:43:41, skipping insertion in model container [2022-11-03 02:43:41,356 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:43:41" (1/1) ... [2022-11-03 02:43:41,366 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 02:43:41,411 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 02:43:41,836 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c[17206,17219] [2022-11-03 02:43:41,843 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:43:41,852 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 02:43:41,919 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c[17206,17219] [2022-11-03 02:43:41,922 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:43:41,945 INFO L208 MainTranslator]: Completed translation [2022-11-03 02:43:41,946 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:43:41 WrapperNode [2022-11-03 02:43:41,946 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 02:43:41,947 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 02:43:41,947 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 02:43:41,947 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 02:43:41,957 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:43:41" (1/1) ... [2022-11-03 02:43:41,985 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:43:41" (1/1) ... [2022-11-03 02:43:42,038 INFO L138 Inliner]: procedures = 53, calls = 154, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 251 [2022-11-03 02:43:42,038 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 02:43:42,039 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 02:43:42,039 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 02:43:42,039 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 02:43:42,050 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:43:41" (1/1) ... [2022-11-03 02:43:42,050 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:43:41" (1/1) ... [2022-11-03 02:43:42,064 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:43:41" (1/1) ... [2022-11-03 02:43:42,065 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:43:41" (1/1) ... [2022-11-03 02:43:42,070 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:43:41" (1/1) ... [2022-11-03 02:43:42,074 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:43:41" (1/1) ... [2022-11-03 02:43:42,076 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:43:41" (1/1) ... [2022-11-03 02:43:42,077 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:43:41" (1/1) ... [2022-11-03 02:43:42,080 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 02:43:42,080 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 02:43:42,081 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 02:43:42,081 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 02:43:42,082 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:43:41" (1/1) ... [2022-11-03 02:43:42,101 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:43:42,127 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:43:42,157 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 02:43:42,182 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 02:43:42,214 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-03 02:43:42,215 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-03 02:43:42,215 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-03 02:43:42,215 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-03 02:43:42,215 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-03 02:43:42,216 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-03 02:43:42,216 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-03 02:43:42,216 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-03 02:43:42,216 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-03 02:43:42,217 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 02:43:42,217 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 02:43:42,217 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-03 02:43:42,217 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-03 02:43:42,217 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-03 02:43:42,218 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-03 02:43:42,219 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-03 02:43:42,219 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 02:43:42,219 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 02:43:42,366 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 02:43:42,369 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 02:43:42,848 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 02:43:42,960 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 02:43:42,961 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-03 02:43:42,964 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:43:42 BoogieIcfgContainer [2022-11-03 02:43:42,965 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 02:43:42,967 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 02:43:42,967 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 02:43:42,972 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 02:43:42,972 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 02:43:41" (1/3) ... [2022-11-03 02:43:42,973 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@63d53706 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:43:42, skipping insertion in model container [2022-11-03 02:43:42,974 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:43:41" (2/3) ... [2022-11-03 02:43:42,974 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@63d53706 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:43:42, skipping insertion in model container [2022-11-03 02:43:42,974 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:43:42" (3/3) ... [2022-11-03 02:43:42,976 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product37.cil.c [2022-11-03 02:43:43,010 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 02:43:43,011 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-03 02:43:43,099 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 02:43:43,108 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2771d798, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 02:43:43,109 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-03 02:43:43,115 INFO L276 IsEmpty]: Start isEmpty. Operand has 58 states, 37 states have (on average 1.4324324324324325) internal successors, (53), 45 states have internal predecessors, (53), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-11-03 02:43:43,152 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-03 02:43:43,153 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:43:43,154 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:43:43,156 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:43:43,165 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:43:43,166 INFO L85 PathProgramCache]: Analyzing trace with hash 1845576605, now seen corresponding path program 1 times [2022-11-03 02:43:43,178 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:43:43,179 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1328817212] [2022-11-03 02:43:43,179 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:43:43,180 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:43:43,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:43:43,536 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:43:43,536 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:43:43,537 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1328817212] [2022-11-03 02:43:43,537 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1328817212] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:43:43,538 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:43:43,545 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:43:43,547 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [872707291] [2022-11-03 02:43:43,548 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:43:43,554 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-03 02:43:43,556 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:43:43,605 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-03 02:43:43,608 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 02:43:43,610 INFO L87 Difference]: Start difference. First operand has 58 states, 37 states have (on average 1.4324324324324325) internal successors, (53), 45 states have internal predecessors, (53), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:43:43,740 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:43:43,741 INFO L93 Difference]: Finished difference Result 114 states and 155 transitions. [2022-11-03 02:43:43,747 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-03 02:43:43,748 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-11-03 02:43:43,749 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:43:43,767 INFO L225 Difference]: With dead ends: 114 [2022-11-03 02:43:43,767 INFO L226 Difference]: Without dead ends: 53 [2022-11-03 02:43:43,774 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 02:43:43,778 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 56 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:43:43,780 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 56 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:43:43,803 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2022-11-03 02:43:43,830 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2022-11-03 02:43:43,833 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 41 states have internal predecessors, (45), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-03 02:43:43,835 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 68 transitions. [2022-11-03 02:43:43,840 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 68 transitions. Word has length 17 [2022-11-03 02:43:43,841 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:43:43,841 INFO L495 AbstractCegarLoop]: Abstraction has 53 states and 68 transitions. [2022-11-03 02:43:43,844 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:43:43,844 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 68 transitions. [2022-11-03 02:43:43,849 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-03 02:43:43,849 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:43:43,851 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:43:43,851 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-03 02:43:43,852 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:43:43,853 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:43:43,853 INFO L85 PathProgramCache]: Analyzing trace with hash 1183358769, now seen corresponding path program 1 times [2022-11-03 02:43:43,854 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:43:43,854 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1502730441] [2022-11-03 02:43:43,855 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:43:43,855 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:43:43,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:43:44,075 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:43:44,075 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:43:44,076 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1502730441] [2022-11-03 02:43:44,076 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1502730441] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:43:44,076 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:43:44,076 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:43:44,077 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [454657182] [2022-11-03 02:43:44,077 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:43:44,078 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:43:44,079 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:43:44,079 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:43:44,080 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:43:44,080 INFO L87 Difference]: Start difference. First operand 53 states and 68 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:43:44,131 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:43:44,131 INFO L93 Difference]: Finished difference Result 83 states and 107 transitions. [2022-11-03 02:43:44,131 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:43:44,132 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-11-03 02:43:44,132 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:43:44,133 INFO L225 Difference]: With dead ends: 83 [2022-11-03 02:43:44,133 INFO L226 Difference]: Without dead ends: 45 [2022-11-03 02:43:44,134 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:43:44,136 INFO L413 NwaCegarLoop]: 42 mSDtfsCounter, 7 mSDsluCounter, 45 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 75 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:43:44,136 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 75 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:43:44,137 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2022-11-03 02:43:44,143 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2022-11-03 02:43:44,144 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 29 states have (on average 1.3448275862068966) internal successors, (39), 36 states have internal predecessors, (39), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-03 02:43:44,145 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 57 transitions. [2022-11-03 02:43:44,145 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 57 transitions. Word has length 18 [2022-11-03 02:43:44,145 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:43:44,146 INFO L495 AbstractCegarLoop]: Abstraction has 45 states and 57 transitions. [2022-11-03 02:43:44,146 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:43:44,146 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 57 transitions. [2022-11-03 02:43:44,147 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-03 02:43:44,147 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:43:44,147 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:43:44,148 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-03 02:43:44,148 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:43:44,148 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:43:44,149 INFO L85 PathProgramCache]: Analyzing trace with hash 448709784, now seen corresponding path program 1 times [2022-11-03 02:43:44,149 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:43:44,149 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [718175267] [2022-11-03 02:43:44,149 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:43:44,150 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:43:44,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:43:44,316 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:43:44,316 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:43:44,316 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [718175267] [2022-11-03 02:43:44,317 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [718175267] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:43:44,317 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:43:44,317 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:43:44,317 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2095833975] [2022-11-03 02:43:44,317 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:43:44,318 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:43:44,318 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:43:44,319 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:43:44,319 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:43:44,319 INFO L87 Difference]: Start difference. First operand 45 states and 57 transitions. Second operand has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:43:44,397 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:43:44,399 INFO L93 Difference]: Finished difference Result 88 states and 113 transitions. [2022-11-03 02:43:44,401 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:43:44,401 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2022-11-03 02:43:44,402 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:43:44,403 INFO L225 Difference]: With dead ends: 88 [2022-11-03 02:43:44,405 INFO L226 Difference]: Without dead ends: 45 [2022-11-03 02:43:44,406 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:43:44,409 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 46 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 46 SdHoareTripleChecker+Valid, 40 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:43:44,412 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [46 Valid, 40 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:43:44,413 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2022-11-03 02:43:44,423 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2022-11-03 02:43:44,445 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 29 states have (on average 1.3103448275862069) internal successors, (38), 36 states have internal predecessors, (38), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-03 02:43:44,451 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 56 transitions. [2022-11-03 02:43:44,451 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 56 transitions. Word has length 20 [2022-11-03 02:43:44,451 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:43:44,452 INFO L495 AbstractCegarLoop]: Abstraction has 45 states and 56 transitions. [2022-11-03 02:43:44,452 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:43:44,452 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 56 transitions. [2022-11-03 02:43:44,453 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-03 02:43:44,453 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:43:44,453 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:43:44,453 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-03 02:43:44,454 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:43:44,454 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:43:44,454 INFO L85 PathProgramCache]: Analyzing trace with hash -290321324, now seen corresponding path program 1 times [2022-11-03 02:43:44,455 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:43:44,455 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [776385407] [2022-11-03 02:43:44,455 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:43:44,455 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:43:44,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:43:44,577 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:43:44,577 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:43:44,577 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [776385407] [2022-11-03 02:43:44,578 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [776385407] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:43:44,578 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:43:44,578 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:43:44,579 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1273076066] [2022-11-03 02:43:44,580 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:43:44,581 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:43:44,581 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:43:44,582 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:43:44,582 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:43:44,583 INFO L87 Difference]: Start difference. First operand 45 states and 56 transitions. Second operand has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 02:43:44,719 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:43:44,719 INFO L93 Difference]: Finished difference Result 123 states and 156 transitions. [2022-11-03 02:43:44,719 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:43:44,720 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 27 [2022-11-03 02:43:44,720 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:43:44,721 INFO L225 Difference]: With dead ends: 123 [2022-11-03 02:43:44,721 INFO L226 Difference]: Without dead ends: 80 [2022-11-03 02:43:44,722 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:43:44,723 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 35 mSDsluCounter, 43 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 93 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:43:44,724 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 93 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:43:44,724 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2022-11-03 02:43:44,741 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 78. [2022-11-03 02:43:44,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 52 states have (on average 1.2692307692307692) internal successors, (66), 59 states have internal predecessors, (66), 13 states have call successors, (13), 12 states have call predecessors, (13), 12 states have return successors, (17), 13 states have call predecessors, (17), 13 states have call successors, (17) [2022-11-03 02:43:44,756 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 96 transitions. [2022-11-03 02:43:44,756 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 96 transitions. Word has length 27 [2022-11-03 02:43:44,756 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:43:44,756 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 96 transitions. [2022-11-03 02:43:44,757 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 02:43:44,757 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 96 transitions. [2022-11-03 02:43:44,760 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-03 02:43:44,760 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:43:44,760 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:43:44,761 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-03 02:43:44,761 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:43:44,761 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:43:44,761 INFO L85 PathProgramCache]: Analyzing trace with hash -1365902772, now seen corresponding path program 1 times [2022-11-03 02:43:44,762 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:43:44,762 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1040165014] [2022-11-03 02:43:44,762 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:43:44,762 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:43:44,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:43:45,234 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:43:45,234 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:43:45,234 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1040165014] [2022-11-03 02:43:45,235 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1040165014] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:43:45,235 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:43:45,235 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-03 02:43:45,235 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2037563394] [2022-11-03 02:43:45,235 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:43:45,236 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-03 02:43:45,236 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:43:45,236 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-03 02:43:45,237 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-03 02:43:45,237 INFO L87 Difference]: Start difference. First operand 78 states and 96 transitions. Second operand has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 3 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-03 02:43:45,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:43:45,446 INFO L93 Difference]: Finished difference Result 228 states and 282 transitions. [2022-11-03 02:43:45,447 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:43:45,447 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 3 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 28 [2022-11-03 02:43:45,448 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:43:45,459 INFO L225 Difference]: With dead ends: 228 [2022-11-03 02:43:45,462 INFO L226 Difference]: Without dead ends: 152 [2022-11-03 02:43:45,463 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2022-11-03 02:43:45,466 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 118 mSDsluCounter, 121 mSDsCounter, 0 mSdLazyCounter, 118 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 119 SdHoareTripleChecker+Valid, 164 SdHoareTripleChecker+Invalid, 149 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 118 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:43:45,471 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [119 Valid, 164 Invalid, 149 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:43:45,472 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 152 states. [2022-11-03 02:43:45,503 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 152 to 124. [2022-11-03 02:43:45,504 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 124 states, 84 states have (on average 1.2619047619047619) internal successors, (106), 92 states have internal predecessors, (106), 19 states have call successors, (19), 18 states have call predecessors, (19), 20 states have return successors, (25), 20 states have call predecessors, (25), 19 states have call successors, (25) [2022-11-03 02:43:45,506 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 124 states to 124 states and 150 transitions. [2022-11-03 02:43:45,507 INFO L78 Accepts]: Start accepts. Automaton has 124 states and 150 transitions. Word has length 28 [2022-11-03 02:43:45,507 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:43:45,507 INFO L495 AbstractCegarLoop]: Abstraction has 124 states and 150 transitions. [2022-11-03 02:43:45,507 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 3 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-03 02:43:45,508 INFO L276 IsEmpty]: Start isEmpty. Operand 124 states and 150 transitions. [2022-11-03 02:43:45,512 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-03 02:43:45,512 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:43:45,513 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:43:45,513 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-03 02:43:45,513 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:43:45,513 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:43:45,514 INFO L85 PathProgramCache]: Analyzing trace with hash 1383824966, now seen corresponding path program 1 times [2022-11-03 02:43:45,514 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:43:45,514 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2070090079] [2022-11-03 02:43:45,514 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:43:45,514 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:43:45,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:43:45,847 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:43:45,847 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:43:45,848 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2070090079] [2022-11-03 02:43:45,848 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2070090079] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:43:45,848 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:43:45,848 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 02:43:45,849 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1416973650] [2022-11-03 02:43:45,849 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:43:45,854 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:43:45,856 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:43:45,857 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:43:45,857 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:43:45,858 INFO L87 Difference]: Start difference. First operand 124 states and 150 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-03 02:43:46,009 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:43:46,009 INFO L93 Difference]: Finished difference Result 249 states and 302 transitions. [2022-11-03 02:43:46,010 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 02:43:46,010 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 31 [2022-11-03 02:43:46,011 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:43:46,014 INFO L225 Difference]: With dead ends: 249 [2022-11-03 02:43:46,014 INFO L226 Difference]: Without dead ends: 127 [2022-11-03 02:43:46,016 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:43:46,025 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 37 mSDsluCounter, 150 mSDsCounter, 0 mSdLazyCounter, 66 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 171 SdHoareTripleChecker+Invalid, 69 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 66 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:43:46,030 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 171 Invalid, 69 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 66 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:43:46,034 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 127 states. [2022-11-03 02:43:46,069 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 127 to 123. [2022-11-03 02:43:46,074 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 123 states, 83 states have (on average 1.2409638554216869) internal successors, (103), 91 states have internal predecessors, (103), 19 states have call successors, (19), 18 states have call predecessors, (19), 20 states have return successors, (25), 20 states have call predecessors, (25), 19 states have call successors, (25) [2022-11-03 02:43:46,076 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 123 states and 147 transitions. [2022-11-03 02:43:46,077 INFO L78 Accepts]: Start accepts. Automaton has 123 states and 147 transitions. Word has length 31 [2022-11-03 02:43:46,078 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:43:46,078 INFO L495 AbstractCegarLoop]: Abstraction has 123 states and 147 transitions. [2022-11-03 02:43:46,078 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-03 02:43:46,079 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 147 transitions. [2022-11-03 02:43:46,081 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-03 02:43:46,082 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:43:46,082 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:43:46,082 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-03 02:43:46,083 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:43:46,083 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:43:46,083 INFO L85 PathProgramCache]: Analyzing trace with hash 1986974615, now seen corresponding path program 1 times [2022-11-03 02:43:46,084 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:43:46,084 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [76471500] [2022-11-03 02:43:46,084 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:43:46,084 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:43:46,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:43:46,272 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:43:46,273 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:43:46,273 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [76471500] [2022-11-03 02:43:46,274 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [76471500] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:43:46,274 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:43:46,276 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 02:43:46,276 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1238257033] [2022-11-03 02:43:46,276 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:43:46,277 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:43:46,277 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:43:46,278 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:43:46,279 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:43:46,279 INFO L87 Difference]: Start difference. First operand 123 states and 147 transitions. Second operand has 6 states, 6 states have (on average 4.0) internal successors, (24), 6 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-03 02:43:46,510 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:43:46,510 INFO L93 Difference]: Finished difference Result 218 states and 265 transitions. [2022-11-03 02:43:46,511 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:43:46,517 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 6 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 31 [2022-11-03 02:43:46,518 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:43:46,526 INFO L225 Difference]: With dead ends: 218 [2022-11-03 02:43:46,527 INFO L226 Difference]: Without dead ends: 129 [2022-11-03 02:43:46,528 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-11-03 02:43:46,530 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 98 mSDsluCounter, 121 mSDsCounter, 0 mSdLazyCounter, 77 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 98 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 120 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 77 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:43:46,531 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [98 Valid, 154 Invalid, 120 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 77 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 02:43:46,534 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 129 states. [2022-11-03 02:43:46,563 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 129 to 123. [2022-11-03 02:43:46,564 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 123 states, 83 states have (on average 1.1927710843373494) internal successors, (99), 91 states have internal predecessors, (99), 19 states have call successors, (19), 18 states have call predecessors, (19), 20 states have return successors, (22), 20 states have call predecessors, (22), 19 states have call successors, (22) [2022-11-03 02:43:46,565 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 123 states and 140 transitions. [2022-11-03 02:43:46,566 INFO L78 Accepts]: Start accepts. Automaton has 123 states and 140 transitions. Word has length 31 [2022-11-03 02:43:46,568 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:43:46,569 INFO L495 AbstractCegarLoop]: Abstraction has 123 states and 140 transitions. [2022-11-03 02:43:46,569 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 6 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-03 02:43:46,569 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 140 transitions. [2022-11-03 02:43:46,571 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-03 02:43:46,571 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:43:46,571 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:43:46,572 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-03 02:43:46,572 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:43:46,573 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:43:46,573 INFO L85 PathProgramCache]: Analyzing trace with hash -1100341989, now seen corresponding path program 1 times [2022-11-03 02:43:46,573 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:43:46,573 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1436982737] [2022-11-03 02:43:46,574 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:43:46,574 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:43:46,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:43:47,103 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:43:47,103 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:43:47,104 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1436982737] [2022-11-03 02:43:47,105 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1436982737] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:43:47,106 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:43:47,109 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-03 02:43:47,110 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [89466337] [2022-11-03 02:43:47,110 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:43:47,111 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-03 02:43:47,112 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:43:47,113 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-03 02:43:47,113 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=50, Unknown=0, NotChecked=0, Total=72 [2022-11-03 02:43:47,114 INFO L87 Difference]: Start difference. First operand 123 states and 140 transitions. Second operand has 9 states, 8 states have (on average 3.125) internal successors, (25), 8 states have internal predecessors, (25), 5 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-03 02:43:47,807 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:43:47,807 INFO L93 Difference]: Finished difference Result 364 states and 429 transitions. [2022-11-03 02:43:47,808 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-03 02:43:47,808 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 3.125) internal successors, (25), 8 states have internal predecessors, (25), 5 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 34 [2022-11-03 02:43:47,808 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:43:47,811 INFO L225 Difference]: With dead ends: 364 [2022-11-03 02:43:47,812 INFO L226 Difference]: Without dead ends: 275 [2022-11-03 02:43:47,812 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=65, Invalid=145, Unknown=0, NotChecked=0, Total=210 [2022-11-03 02:43:47,814 INFO L413 NwaCegarLoop]: 74 mSDtfsCounter, 208 mSDsluCounter, 180 mSDsCounter, 0 mSdLazyCounter, 318 mSolverCounterSat, 78 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 219 SdHoareTripleChecker+Valid, 210 SdHoareTripleChecker+Invalid, 396 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 78 IncrementalHoareTripleChecker+Valid, 318 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:43:47,814 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [219 Valid, 210 Invalid, 396 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [78 Valid, 318 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-03 02:43:47,815 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 275 states. [2022-11-03 02:43:47,887 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 275 to 229. [2022-11-03 02:43:47,888 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 229 states, 157 states have (on average 1.2038216560509554) internal successors, (189), 170 states have internal predecessors, (189), 35 states have call successors, (35), 33 states have call predecessors, (35), 36 states have return successors, (41), 35 states have call predecessors, (41), 35 states have call successors, (41) [2022-11-03 02:43:47,890 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 229 states to 229 states and 265 transitions. [2022-11-03 02:43:47,891 INFO L78 Accepts]: Start accepts. Automaton has 229 states and 265 transitions. Word has length 34 [2022-11-03 02:43:47,891 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:43:47,891 INFO L495 AbstractCegarLoop]: Abstraction has 229 states and 265 transitions. [2022-11-03 02:43:47,892 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 3.125) internal successors, (25), 8 states have internal predecessors, (25), 5 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-03 02:43:47,892 INFO L276 IsEmpty]: Start isEmpty. Operand 229 states and 265 transitions. [2022-11-03 02:43:47,895 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-03 02:43:47,896 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:43:47,896 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:43:47,897 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-03 02:43:47,897 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:43:47,898 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:43:47,898 INFO L85 PathProgramCache]: Analyzing trace with hash -414029849, now seen corresponding path program 1 times [2022-11-03 02:43:47,898 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:43:47,898 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1173294982] [2022-11-03 02:43:47,899 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:43:47,899 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:43:47,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:43:48,098 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 15 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:43:48,099 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:43:48,099 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1173294982] [2022-11-03 02:43:48,100 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1173294982] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:43:48,101 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [4840335] [2022-11-03 02:43:48,102 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:43:48,102 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:43:48,102 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:43:48,106 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:43:48,143 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-03 02:43:48,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:43:48,312 INFO L263 TraceCheckSpWp]: Trace formula consists of 410 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-03 02:43:48,321 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:43:48,895 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 4 proven. 11 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 02:43:48,895 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:43:49,483 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-03 02:43:49,484 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [4840335] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:43:49,484 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [763004962] [2022-11-03 02:43:49,512 INFO L159 IcfgInterpreter]: Started Sifa with 37 locations of interest [2022-11-03 02:43:49,513 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:43:49,517 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:43:49,525 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:43:49,526 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:43:57,060 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 294 for LOIs [2022-11-03 02:43:57,111 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 299 for LOIs [2022-11-03 02:43:59,845 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 299 for LOIs [2022-11-03 02:44:00,319 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 292 for LOIs [2022-11-03 02:44:00,349 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:44:19,291 WARN L234 SmtUtils]: Spent 5.33s on a formula simplification. DAG size of input: 352 DAG size of output: 315 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:44:24,936 WARN L234 SmtUtils]: Spent 5.18s on a formula simplification. DAG size of input: 350 DAG size of output: 313 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:44:30,822 WARN L234 SmtUtils]: Spent 5.34s on a formula simplification. DAG size of input: 362 DAG size of output: 325 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:44:55,571 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [763004962] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:44:55,571 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:44:55,571 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [22] imperfect sequences [7, 9, 8] total 40 [2022-11-03 02:44:55,572 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1810301168] [2022-11-03 02:44:55,572 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:44:55,573 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-03 02:44:55,573 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:44:55,574 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-03 02:44:55,574 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=233, Invalid=1327, Unknown=0, NotChecked=0, Total=1560 [2022-11-03 02:44:55,575 INFO L87 Difference]: Start difference. First operand 229 states and 265 transitions. Second operand has 23 states, 19 states have (on average 1.5789473684210527) internal successors, (30), 19 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2022-11-03 02:45:19,987 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:45:19,987 INFO L93 Difference]: Finished difference Result 477 states and 558 transitions. [2022-11-03 02:45:19,989 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-03 02:45:19,989 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 19 states have (on average 1.5789473684210527) internal successors, (30), 19 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) Word has length 55 [2022-11-03 02:45:19,990 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:45:19,991 INFO L225 Difference]: With dead ends: 477 [2022-11-03 02:45:19,992 INFO L226 Difference]: Without dead ends: 310 [2022-11-03 02:45:19,993 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 179 GetRequests, 122 SyntacticMatches, 10 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 697 ImplicationChecksByTransitivity, 76.0s TimeCoverageRelationStatistics Valid=365, Invalid=1987, Unknown=0, NotChecked=0, Total=2352 [2022-11-03 02:45:19,994 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 95 mSDsluCounter, 451 mSDsCounter, 0 mSdLazyCounter, 960 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 419 SdHoareTripleChecker+Invalid, 1003 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 960 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.8s IncrementalHoareTripleChecker+Time [2022-11-03 02:45:19,994 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [96 Valid, 419 Invalid, 1003 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 960 Invalid, 0 Unknown, 0 Unchecked, 3.8s Time] [2022-11-03 02:45:19,995 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 310 states. [2022-11-03 02:45:20,067 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 310 to 285. [2022-11-03 02:45:20,068 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 285 states, 197 states have (on average 1.1878172588832487) internal successors, (234), 211 states have internal predecessors, (234), 43 states have call successors, (43), 41 states have call predecessors, (43), 44 states have return successors, (49), 42 states have call predecessors, (49), 43 states have call successors, (49) [2022-11-03 02:45:20,070 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 285 states to 285 states and 326 transitions. [2022-11-03 02:45:20,070 INFO L78 Accepts]: Start accepts. Automaton has 285 states and 326 transitions. Word has length 55 [2022-11-03 02:45:20,071 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:45:20,071 INFO L495 AbstractCegarLoop]: Abstraction has 285 states and 326 transitions. [2022-11-03 02:45:20,071 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 19 states have (on average 1.5789473684210527) internal successors, (30), 19 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2022-11-03 02:45:20,071 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 326 transitions. [2022-11-03 02:45:20,072 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-03 02:45:20,072 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:45:20,073 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:45:20,115 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-03 02:45:20,298 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:45:20,299 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:45:20,299 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:45:20,299 INFO L85 PathProgramCache]: Analyzing trace with hash -1693284199, now seen corresponding path program 1 times [2022-11-03 02:45:20,299 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:45:20,299 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1662253803] [2022-11-03 02:45:20,299 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:45:20,300 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:45:20,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:45:20,484 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 10 proven. 1 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-03 02:45:20,484 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:45:20,484 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1662253803] [2022-11-03 02:45:20,485 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1662253803] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:45:20,485 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [208600815] [2022-11-03 02:45:20,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:45:20,485 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:45:20,486 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:45:20,487 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:45:20,510 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-03 02:45:20,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:45:20,606 INFO L263 TraceCheckSpWp]: Trace formula consists of 420 conjuncts, 30 conjunts are in the unsatisfiable core [2022-11-03 02:45:20,609 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:45:21,100 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 8 proven. 9 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-03 02:45:21,100 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:45:21,731 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 1 proven. 15 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 02:45:21,731 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [208600815] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:45:21,732 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1435488309] [2022-11-03 02:45:21,736 INFO L159 IcfgInterpreter]: Started Sifa with 37 locations of interest [2022-11-03 02:45:21,736 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:45:21,737 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:45:21,737 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:45:21,738 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:45:26,739 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 31 for LOIs [2022-11-03 02:45:26,743 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 27 for LOIs [2022-11-03 02:45:26,935 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 24 for LOIs [2022-11-03 02:45:26,960 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 50 for LOIs [2022-11-03 02:45:26,973 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:45:31,412 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1435488309] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:45:31,412 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:45:31,412 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [27] imperfect sequences [6, 12, 11] total 50 [2022-11-03 02:45:31,413 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1129645616] [2022-11-03 02:45:31,413 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:45:31,414 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-03 02:45:31,414 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:45:31,414 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-03 02:45:31,415 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=354, Invalid=2096, Unknown=0, NotChecked=0, Total=2450 [2022-11-03 02:45:31,416 INFO L87 Difference]: Start difference. First operand 285 states and 326 transitions. Second operand has 28 states, 23 states have (on average 1.3043478260869565) internal successors, (30), 22 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2022-11-03 02:45:42,738 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:45:42,739 INFO L93 Difference]: Finished difference Result 499 states and 582 transitions. [2022-11-03 02:45:42,743 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-11-03 02:45:42,743 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 23 states have (on average 1.3043478260869565) internal successors, (30), 22 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) Word has length 56 [2022-11-03 02:45:42,743 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:45:42,745 INFO L225 Difference]: With dead ends: 499 [2022-11-03 02:45:42,745 INFO L226 Difference]: Without dead ends: 334 [2022-11-03 02:45:42,748 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 193 GetRequests, 123 SyntacticMatches, 1 SemanticMatches, 69 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1453 ImplicationChecksByTransitivity, 14.2s TimeCoverageRelationStatistics Valid=664, Invalid=4306, Unknown=0, NotChecked=0, Total=4970 [2022-11-03 02:45:42,748 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 174 mSDsluCounter, 474 mSDsCounter, 0 mSdLazyCounter, 1309 mSolverCounterSat, 111 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 177 SdHoareTripleChecker+Valid, 447 SdHoareTripleChecker+Invalid, 1420 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 111 IncrementalHoareTripleChecker+Valid, 1309 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-11-03 02:45:42,749 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [177 Valid, 447 Invalid, 1420 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [111 Valid, 1309 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2022-11-03 02:45:42,749 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 334 states. [2022-11-03 02:45:42,840 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 334 to 320. [2022-11-03 02:45:42,841 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 320 states, 221 states have (on average 1.1855203619909502) internal successors, (262), 236 states have internal predecessors, (262), 49 states have call successors, (49), 46 states have call predecessors, (49), 49 states have return successors, (55), 48 states have call predecessors, (55), 49 states have call successors, (55) [2022-11-03 02:45:42,843 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 366 transitions. [2022-11-03 02:45:42,844 INFO L78 Accepts]: Start accepts. Automaton has 320 states and 366 transitions. Word has length 56 [2022-11-03 02:45:42,844 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:45:42,844 INFO L495 AbstractCegarLoop]: Abstraction has 320 states and 366 transitions. [2022-11-03 02:45:42,845 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 23 states have (on average 1.3043478260869565) internal successors, (30), 22 states have internal predecessors, (30), 5 states have call successors, (5), 4 states have call predecessors, (5), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2022-11-03 02:45:42,845 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 366 transitions. [2022-11-03 02:45:42,846 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-11-03 02:45:42,846 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:45:42,846 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:45:42,870 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-11-03 02:45:43,049 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-03 02:45:43,050 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:45:43,050 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:45:43,050 INFO L85 PathProgramCache]: Analyzing trace with hash 120249934, now seen corresponding path program 1 times [2022-11-03 02:45:43,050 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:45:43,051 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1974315888] [2022-11-03 02:45:43,051 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:45:43,051 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:45:43,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:45:43,301 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 4 proven. 13 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:45:43,301 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:45:43,301 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1974315888] [2022-11-03 02:45:43,301 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1974315888] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:45:43,301 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [60950689] [2022-11-03 02:45:43,301 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:45:43,302 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:45:43,302 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:45:43,307 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:45:43,309 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-03 02:45:43,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:45:43,415 INFO L263 TraceCheckSpWp]: Trace formula consists of 416 conjuncts, 25 conjunts are in the unsatisfiable core [2022-11-03 02:45:43,418 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:45:43,478 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-03 02:45:43,479 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:45:43,479 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [60950689] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:45:43,479 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 02:45:43,479 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [11] total 14 [2022-11-03 02:45:43,480 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [634432359] [2022-11-03 02:45:43,480 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:45:43,480 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-03 02:45:43,480 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:45:43,481 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-03 02:45:43,481 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=154, Unknown=0, NotChecked=0, Total=182 [2022-11-03 02:45:43,482 INFO L87 Difference]: Start difference. First operand 320 states and 366 transitions. Second operand has 9 states, 7 states have (on average 5.285714285714286) internal successors, (37), 7 states have internal predecessors, (37), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-03 02:45:43,883 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:45:43,884 INFO L93 Difference]: Finished difference Result 613 states and 721 transitions. [2022-11-03 02:45:43,884 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-03 02:45:43,884 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 5.285714285714286) internal successors, (37), 7 states have internal predecessors, (37), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 58 [2022-11-03 02:45:43,885 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:45:43,887 INFO L225 Difference]: With dead ends: 613 [2022-11-03 02:45:43,888 INFO L226 Difference]: Without dead ends: 448 [2022-11-03 02:45:43,889 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 76 GetRequests, 57 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=63, Invalid=357, Unknown=0, NotChecked=0, Total=420 [2022-11-03 02:45:43,890 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 50 mSDsluCounter, 446 mSDsCounter, 0 mSdLazyCounter, 276 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 409 SdHoareTripleChecker+Invalid, 285 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 276 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:45:43,890 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 409 Invalid, 285 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 276 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 02:45:43,891 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 448 states. [2022-11-03 02:45:43,994 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 448 to 422. [2022-11-03 02:45:43,994 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 422 states, 293 states have (on average 1.1604095563139931) internal successors, (340), 309 states have internal predecessors, (340), 64 states have call successors, (64), 60 states have call predecessors, (64), 64 states have return successors, (74), 63 states have call predecessors, (74), 64 states have call successors, (74) [2022-11-03 02:45:43,997 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 422 states to 422 states and 478 transitions. [2022-11-03 02:45:43,997 INFO L78 Accepts]: Start accepts. Automaton has 422 states and 478 transitions. Word has length 58 [2022-11-03 02:45:43,998 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:45:43,998 INFO L495 AbstractCegarLoop]: Abstraction has 422 states and 478 transitions. [2022-11-03 02:45:43,998 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 5.285714285714286) internal successors, (37), 7 states have internal predecessors, (37), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-03 02:45:43,998 INFO L276 IsEmpty]: Start isEmpty. Operand 422 states and 478 transitions. [2022-11-03 02:45:44,000 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-03 02:45:44,000 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:45:44,000 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:45:44,030 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-03 02:45:44,209 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:45:44,209 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:45:44,210 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:45:44,210 INFO L85 PathProgramCache]: Analyzing trace with hash -659323201, now seen corresponding path program 1 times [2022-11-03 02:45:44,210 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:45:44,210 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [243036508] [2022-11-03 02:45:44,210 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:45:44,210 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:45:44,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:45:45,073 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 0 proven. 50 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-03 02:45:45,074 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:45:45,074 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [243036508] [2022-11-03 02:45:45,074 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [243036508] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:45:45,074 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [464228005] [2022-11-03 02:45:45,074 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:45:45,074 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:45:45,074 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:45:45,075 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:45:45,099 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-03 02:45:45,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:45:45,205 INFO L263 TraceCheckSpWp]: Trace formula consists of 503 conjuncts, 29 conjunts are in the unsatisfiable core [2022-11-03 02:45:45,209 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:45:45,662 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 11 proven. 41 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-03 02:45:45,662 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:45:46,281 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 37 proven. 4 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2022-11-03 02:45:46,283 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [464228005] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:45:46,283 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [684744257] [2022-11-03 02:45:46,289 INFO L159 IcfgInterpreter]: Started Sifa with 43 locations of interest [2022-11-03 02:45:46,290 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:45:46,290 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:45:46,293 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:45:46,293 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:45:51,452 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 28 for LOIs [2022-11-03 02:45:51,456 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 27 for LOIs [2022-11-03 02:45:51,703 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 24 for LOIs [2022-11-03 02:45:51,818 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 43 for LOIs [2022-11-03 02:45:51,828 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 41 for LOIs [2022-11-03 02:45:51,835 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 25 for LOIs [2022-11-03 02:45:51,836 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:45:57,515 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9232#(and (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~5#1|) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1| 0) (= |timeShift_getWaterLevel_~retValue_acc~8#1| ~waterLevel~0) (<= 0 |old(~pumpRunning~0)|) (= 0 |timeShift___utac_acc__Specification3_spec__1_~tmp___1~1#1|) (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1|) (= ~head~0.offset 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~5#1|) (<= |#NULL.offset| 0) (= 1 ~systemActive~0) (<= 0 ~head~0.base) (<= ~head~0.base 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___1~1#1|) (= 2 |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1|) (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1|) (<= 0 |#NULL.offset|) (<= 0 |#StackHeapBarrier|) (= |timeShift_getWaterLevel_~retValue_acc~8#1| |timeShift_getWaterLevel_#res#1|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-03 02:45:57,515 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:45:57,515 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:45:57,515 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 11, 10] total 30 [2022-11-03 02:45:57,515 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1053731598] [2022-11-03 02:45:57,516 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:45:57,516 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-03 02:45:57,516 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:45:57,517 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-03 02:45:57,518 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=400, Invalid=3260, Unknown=0, NotChecked=0, Total=3660 [2022-11-03 02:45:57,520 INFO L87 Difference]: Start difference. First operand 422 states and 478 transitions. Second operand has 30 states, 28 states have (on average 5.035714285714286) internal successors, (141), 28 states have internal predecessors, (141), 17 states have call successors, (34), 9 states have call predecessors, (34), 13 states have return successors, (33), 15 states have call predecessors, (33), 17 states have call successors, (33) [2022-11-03 02:46:03,643 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:46:03,643 INFO L93 Difference]: Finished difference Result 1643 states and 1970 transitions. [2022-11-03 02:46:03,644 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 74 states. [2022-11-03 02:46:03,644 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 28 states have (on average 5.035714285714286) internal successors, (141), 28 states have internal predecessors, (141), 17 states have call successors, (34), 9 states have call predecessors, (34), 13 states have return successors, (33), 15 states have call predecessors, (33), 17 states have call successors, (33) Word has length 89 [2022-11-03 02:46:03,645 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:46:03,659 INFO L225 Difference]: With dead ends: 1643 [2022-11-03 02:46:03,659 INFO L226 Difference]: Without dead ends: 1341 [2022-11-03 02:46:03,663 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 373 GetRequests, 239 SyntacticMatches, 7 SemanticMatches, 127 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5905 ImplicationChecksByTransitivity, 9.5s TimeCoverageRelationStatistics Valid=1881, Invalid=14631, Unknown=0, NotChecked=0, Total=16512 [2022-11-03 02:46:03,665 INFO L413 NwaCegarLoop]: 148 mSDtfsCounter, 2095 mSDsluCounter, 1158 mSDsCounter, 0 mSdLazyCounter, 2310 mSolverCounterSat, 1276 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2096 SdHoareTripleChecker+Valid, 1005 SdHoareTripleChecker+Invalid, 3586 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1276 IncrementalHoareTripleChecker+Valid, 2310 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:46:03,665 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2096 Valid, 1005 Invalid, 3586 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1276 Valid, 2310 Invalid, 0 Unknown, 0 Unchecked, 2.2s Time] [2022-11-03 02:46:03,669 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1341 states. [2022-11-03 02:46:03,924 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1341 to 1140. [2022-11-03 02:46:03,926 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1140 states, 795 states have (on average 1.159748427672956) internal successors, (922), 830 states have internal predecessors, (922), 171 states have call successors, (171), 155 states have call predecessors, (171), 173 states have return successors, (211), 178 states have call predecessors, (211), 171 states have call successors, (211) [2022-11-03 02:46:03,931 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1140 states to 1140 states and 1304 transitions. [2022-11-03 02:46:03,932 INFO L78 Accepts]: Start accepts. Automaton has 1140 states and 1304 transitions. Word has length 89 [2022-11-03 02:46:03,932 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:46:03,933 INFO L495 AbstractCegarLoop]: Abstraction has 1140 states and 1304 transitions. [2022-11-03 02:46:03,933 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 28 states have (on average 5.035714285714286) internal successors, (141), 28 states have internal predecessors, (141), 17 states have call successors, (34), 9 states have call predecessors, (34), 13 states have return successors, (33), 15 states have call predecessors, (33), 17 states have call successors, (33) [2022-11-03 02:46:03,933 INFO L276 IsEmpty]: Start isEmpty. Operand 1140 states and 1304 transitions. [2022-11-03 02:46:03,935 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 93 [2022-11-03 02:46:03,935 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:46:03,936 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:46:03,970 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-03 02:46:04,162 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-03 02:46:04,163 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:46:04,163 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:46:04,163 INFO L85 PathProgramCache]: Analyzing trace with hash -2038402786, now seen corresponding path program 2 times [2022-11-03 02:46:04,163 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:46:04,163 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1723641068] [2022-11-03 02:46:04,163 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:46:04,163 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:46:04,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:46:04,393 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 58 trivial. 0 not checked. [2022-11-03 02:46:04,394 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:46:04,394 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1723641068] [2022-11-03 02:46:04,394 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1723641068] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:46:04,394 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:46:04,394 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 02:46:04,395 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [501236642] [2022-11-03 02:46:04,395 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:46:04,396 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:46:04,396 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:46:04,397 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:46:04,397 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:46:04,397 INFO L87 Difference]: Start difference. First operand 1140 states and 1304 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-03 02:46:04,771 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:46:04,772 INFO L93 Difference]: Finished difference Result 2123 states and 2446 transitions. [2022-11-03 02:46:04,772 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:46:04,772 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 92 [2022-11-03 02:46:04,774 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:46:04,775 INFO L225 Difference]: With dead ends: 2123 [2022-11-03 02:46:04,775 INFO L226 Difference]: Without dead ends: 0 [2022-11-03 02:46:04,779 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:46:04,782 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 75 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 55 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 147 SdHoareTripleChecker+Invalid, 78 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 55 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:46:04,782 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [75 Valid, 147 Invalid, 78 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 55 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:46:04,783 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-03 02:46:04,783 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-03 02:46:04,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:46:04,784 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-03 02:46:04,784 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 92 [2022-11-03 02:46:04,784 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:46:04,784 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-03 02:46:04,785 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-03 02:46:04,785 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-03 02:46:04,785 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-03 02:46:04,788 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-03 02:46:04,788 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-11-03 02:46:04,791 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-03 02:46:25,031 WARN L234 SmtUtils]: Spent 7.36s on a formula simplification. DAG size of input: 501 DAG size of output: 441 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-03 02:46:49,746 WARN L234 SmtUtils]: Spent 10.40s on a formula simplification. DAG size of input: 701 DAG size of output: 486 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-03 02:47:07,386 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 555 561) no Hoare annotation was computed. [2022-11-03 02:47:07,387 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 555 561) the Hoare annotation is: true [2022-11-03 02:47:07,387 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 798 809) the Hoare annotation is: true [2022-11-03 02:47:07,387 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 798 809) no Hoare annotation was computed. [2022-11-03 02:47:07,387 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 810 818) the Hoare annotation is: true [2022-11-03 02:47:07,387 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 810 818) no Hoare annotation was computed. [2022-11-03 02:47:07,387 INFO L899 garLoopResultBuilder]: For program point L894(lines 894 900) no Hoare annotation was computed. [2022-11-03 02:47:07,391 INFO L895 garLoopResultBuilder]: At program point L890(lines 890 903) the Hoare annotation is: (let ((.cse5 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1| 1)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse9 (not (<= |old(~waterLevel~0)| 1))) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (= ~pumpRunning~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse17 (not (<= 2 |old(~waterLevel~0)|))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (and (= |timeShift_isMethaneAlarm_~retValue_acc~4#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_processEnvironment_~tmp~5#1| |timeShift_isMethaneAlarm_#res#1|))) (.cse2 (not (= 1 ~systemActive~0))) (.cse12 (not (= ~head~0.offset 0))) (.cse3 (not (= |old(~pumpRunning~0)| 1))) (.cse13 (not (= |#NULL.base| 0))) (.cse14 (not (<= 0 |#StackHeapBarrier|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse15 (not (= ~head~0.base 0))) (.cse16 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 2))) (or .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse3 (and .cse5 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0) (let ((.cse6 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse6) .cse7) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse6))) .cse8) .cse4) (or .cse9 .cse0 .cse2 (and (not (= ~waterLevel~0 1)) .cse5 .cse7 .cse8) (and (= ~pumpRunning~0 0) .cse5 .cse7)) (or .cse9 .cse0 .cse1 .cse2) (or .cse9 .cse10 .cse11 .cse2 .cse12 .cse3 .cse13 .cse14 (not (<= 0 (+ |old(~waterLevel~0)| 2147483648))) .cse15 .cse16) (or .cse0 .cse2 .cse4 (and .cse7 .cse8) .cse17) (let ((.cse19 (select |#memory_int| 17)) (.cse21 (select |#memory_int| 1)) (.cse28 (select |#memory_int| 23)) (.cse27 (select |#memory_int| 21)) (.cse20 (select |#memory_int| 18)) (.cse25 (select |#memory_int| 20)) (.cse22 (select |#memory_int| 26)) (.cse23 (select |#memory_int| 19)) (.cse29 (select |#memory_int| 22)) (.cse24 (select |#memory_int| 27)) (.cse26 (select |#memory_int| 28)) (.cse18 (select |#memory_int| 25))) (or (not (= (select |#valid| 23) 1)) (not (= 101 (select .cse18 2))) (not (= (select |#length| 24) 13)) (not (= (select .cse18 6) 0)) (not (= (select |#length| 12) 25)) .cse0 (not (= 79 (select .cse19 0))) (not (= (select .cse20 2) 102)) (not (= (select .cse21 0) 48)) .cse10 (not (= 9 (select |#length| 11))) (not (= (select |#valid| 26) 1)) (not (= 102 (select .cse20 1))) (not (= (select |#length| 27) 3)) (not (= 82 (select .cse22 1))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 117 (select .cse23 2))) (not (= 31 (select |#length| 2))) (not (= (select |#length| 17) 3)) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 58 (select .cse23 5))) (not (= 9 (select |#length| 14))) .cse2 (not (= 109 (select .cse23 3))) (not (= 4 (select |#length| 18))) (not (= (select |#length| 15) 25)) (not (= (select .cse19 1) 110)) (not (= 116 (select .cse18 3))) (not (= (select .cse24 1) 75)) (not (= (select |#valid| 6) 1)) (not (= 104 (select .cse18 4))) (not (= 67 (select .cse22 0))) (not (< 0 |#StackHeapBarrier|)) (not (= (select .cse23 6) 0)) (not (= (select .cse22 2) 73)) (not (= (select .cse25 2) 0)) (not (= (select |#valid| 3) 1)) (not (= 41 (select .cse26 0))) (not (= (select .cse27 3) 0)) (not (= (select |#length| 19) 7)) (not (= 2 (select |#length| 23))) (not (= (select |#valid| 25) 1)) .cse12 (not (= (select |#valid| 20) 1)) (not (= (select |#valid| 21) 1)) (not (= (select |#valid| 11) 1)) (not (= 3 (select |#length| 20))) (not (= (select |#valid| 16) 1)) (not (= (select |#valid| 28) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select .cse27 1) 102)) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= (select .cse19 2) 0)) (not (= (select |#valid| 27) 1)) (not (= (select .cse21 1) 0)) (not (= 102 (select .cse27 2))) (not (= (select |#valid| 24) 1)) (not (= (select |#valid| 19) 1)) (not (= (select .cse28 0) 10)) (not (= (select .cse23 1) 80)) (not (= (select .cse28 1) 0)) (not (= (select |#length| 28) 2)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 22) 1)) (not (= 7 (select |#length| 25))) (not (= (select .cse20 3) 0)) (not (= 13 (select |#length| 16))) (not (= (select .cse18 0) 44)) (not (= (select .cse27 0) 79)) (not (= 110 (select .cse25 1))) (and (= |timeShift_getWaterLevel_~retValue_acc~8#1| ~waterLevel~0) (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1|) (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1|) (= |timeShift_getWaterLevel_~retValue_acc~8#1| |timeShift_getWaterLevel_#res#1|)) (not (= (select |#valid| 8) 1)) (not (= (select .cse22 4) 0)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= (select .cse20 0) 79)) (not (= (select .cse24 2) 0)) .cse13 (not (= (select |#length| 22) 3)) (not (= (select .cse25 0) 79)) (not (= (select |#valid| 7) 1)) (not (= 112 (select .cse23 4))) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 5 (select |#length| 26))) (not (= 41 (select .cse29 0))) .cse4 (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (not (= (select .cse22 3) 84)) (not (= (select .cse29 1) 32)) (not (= 44 (select .cse23 0))) (not (= (select |#length| 21) 4)) (not (= (select |#valid| 17) 1)) (not (= (select |#valid| 9) 1)) (not (= (select .cse18 5) 58)) (not (= (select .cse29 2) 0)) .cse15 (not (= (select .cse24 0) 79)) (not (= (select .cse26 1) 0)) .cse16 (not (= (select |#valid| 18) 1)) (not (= 77 (select .cse18 1))) .cse17)) (or .cse10 .cse11 .cse2 .cse12 (< |old(~waterLevel~0)| 2) .cse3 .cse13 .cse14 .cse4 .cse15 .cse16))) [2022-11-03 02:47:07,394 INFO L895 garLoopResultBuilder]: At program point L890-1(lines 875 907) the Hoare annotation is: (let ((.cse34 (= ~pumpRunning~0 0)) (.cse35 (= 1 ~systemActive~0)) (.cse36 (= |old(~pumpRunning~0)| 0)) (.cse33 (= ~methaneLevelCritical~0 0)) (.cse1 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse39 (<= 0 |#StackHeapBarrier|)) (.cse10 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse8 (< 0 |old(~waterLevel~0)|)) (.cse41 (= ~head~0.offset 0)) (.cse37 (<= |old(~waterLevel~0)| 0)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse38 (= ~cleanupTimeShifts~0 4)) (.cse40 (= |#NULL.base| 0))) (let ((.cse3 (not (= |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1| 0))) (.cse31 (not (<= |old(~waterLevel~0)| 1))) (.cse16 (not (= |#NULL.offset| 0))) (.cse29 (and (<= 1 ~systemActive~0) (<= |#NULL.offset| 0) (<= 0 ~head~0.base) .cse1 (<= 0 ~methaneLevelCritical~0) (<= ~head~0.base 0) (<= |timeShift_isMethaneAlarm_~retValue_acc~4#1| 0) (<= 0 |#NULL.offset|) .cse39 (= |timeShift_isMethaneAlarm_~retValue_acc~4#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_processEnvironment_~tmp~5#1| |timeShift_isMethaneAlarm_#res#1|) (let ((.cse42 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or (and .cse42 .cse10 .cse41 .cse8 .cse38 .cse40) (and .cse42 .cse41 .cse37 .cse9 .cse38 .cse40))) (<= ~systemActive~0 1))) (.cse23 (not .cse41)) (.cse0 (not .cse33)) (.cse25 (not .cse40)) (.cse30 (not .cse39)) (.cse27 (not (= ~head~0.base 0))) (.cse28 (not .cse38)) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse12 (not .cse36)) (.cse4 (not .cse35)) (.cse32 (and .cse34 (or .cse36 .cse37) (<= ~waterLevel~0 1) .cse35 .cse9)) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (= ~pumpRunning~0 1))) (and (let ((.cse2 (or (and (not .cse8) .cse9) (and .cse10 .cse8)))) (or (and .cse0 .cse1 .cse2 .cse3) .cse4 (and .cse1 .cse2 .cse5) .cse6 .cse7)) (let ((.cse13 (select |#memory_int| 17)) (.cse15 (select |#memory_int| 1)) (.cse24 (select |#memory_int| 23)) (.cse22 (select |#memory_int| 21)) (.cse14 (select |#memory_int| 18)) (.cse20 (select |#memory_int| 20)) (.cse17 (select |#memory_int| 26)) (.cse18 (select |#memory_int| 19)) (.cse26 (select |#memory_int| 22)) (.cse19 (select |#memory_int| 27)) (.cse21 (select |#memory_int| 28)) (.cse11 (select |#memory_int| 25))) (or (not (= (select |#valid| 23) 1)) (not (= 101 (select .cse11 2))) (not (= (select |#length| 24) 13)) (not (= (select .cse11 6) 0)) (not (= (select |#length| 12) 25)) .cse12 (not (= 79 (select .cse13 0))) (not (= (select .cse14 2) 102)) (not (= (select .cse15 0) 48)) .cse16 (not (= 9 (select |#length| 11))) (not (= (select |#valid| 26) 1)) (not (= 102 (select .cse14 1))) (not (= (select |#length| 27) 3)) (not (= 82 (select .cse17 1))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 117 (select .cse18 2))) (not (= 31 (select |#length| 2))) (not (= (select |#length| 17) 3)) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 58 (select .cse18 5))) (not (= 9 (select |#length| 14))) .cse4 (not (= 109 (select .cse18 3))) (not (= 4 (select |#length| 18))) (not (= (select |#length| 15) 25)) (not (= (select .cse13 1) 110)) (not (= 116 (select .cse11 3))) (not (= (select .cse19 1) 75)) (not (= (select |#valid| 6) 1)) (not (= 104 (select .cse11 4))) (not (= 67 (select .cse17 0))) (not (< 0 |#StackHeapBarrier|)) (not (= (select .cse18 6) 0)) (not (= (select .cse17 2) 73)) (not (= (select .cse20 2) 0)) (not (= (select |#valid| 3) 1)) (not (= 41 (select .cse21 0))) (not (= (select .cse22 3) 0)) (not (= (select |#length| 19) 7)) (not (= 2 (select |#length| 23))) (not (= (select |#valid| 25) 1)) .cse23 (not (= (select |#valid| 20) 1)) (not (= (select |#valid| 21) 1)) (not (= (select |#valid| 11) 1)) (not (= 3 (select |#length| 20))) (not (= (select |#valid| 16) 1)) (not (= (select |#valid| 28) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select .cse22 1) 102)) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= (select .cse13 2) 0)) .cse0 (not (= (select |#valid| 27) 1)) (not (= (select .cse15 1) 0)) (not (= 102 (select .cse22 2))) (not (= (select |#valid| 24) 1)) (not (= (select |#valid| 19) 1)) (not (= (select .cse24 0) 10)) (not (= (select .cse18 1) 80)) (not (= (select .cse24 1) 0)) (not (= (select |#length| 28) 2)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 22) 1)) (not (= 7 (select |#length| 25))) (not (= (select .cse14 3) 0)) (not (= 13 (select |#length| 16))) (not (= (select .cse11 0) 44)) (not (= (select .cse22 0) 79)) (not (= 110 (select .cse20 1))) (not (= (select |#valid| 8) 1)) (not (= (select .cse17 4) 0)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= (select .cse14 0) 79)) (not (= (select .cse19 2) 0)) .cse25 (not (= (select |#length| 22) 3)) (not (= (select .cse20 0) 79)) (not (= (select |#valid| 7) 1)) (not (= 112 (select .cse18 4))) (not (= (select |#valid| 10) 1)) (and (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~5#1|) (= |timeShift_getWaterLevel_~retValue_acc~8#1| ~waterLevel~0) (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1|) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~5#1|) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___1~1#1|) (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1|) (= |timeShift_getWaterLevel_~retValue_acc~8#1| |timeShift_getWaterLevel_#res#1|)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 5 (select |#length| 26))) (not (= 41 (select .cse26 0))) .cse7 (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (not (= (select .cse17 3) 84)) (not (= (select .cse26 1) 32)) (not (= 44 (select .cse18 0))) (not (= (select |#length| 21) 4)) (not (= (select |#valid| 17) 1)) (not (= (select |#valid| 9) 1)) (not (= (select .cse11 5) 58)) (not (= (select .cse26 2) 0)) .cse27 (not (= (select .cse19 0) 79)) (not (= (select .cse21 1) 0)) .cse28 (not (= (select |#valid| 18) 1)) (not (= 77 (select .cse11 1))) (not (<= 2 |old(~waterLevel~0)|)))) (or .cse16 .cse29 .cse4 .cse23 (< |old(~waterLevel~0)| 2) .cse0 .cse6 .cse25 .cse30 .cse7 .cse27 .cse28) (or (not (= ~waterLevel~0 1)) .cse31 .cse12 .cse4 .cse32) (or .cse12 .cse33 .cse4 .cse7 .cse3) (or .cse31 .cse16 .cse29 .cse4 .cse23 .cse0 .cse6 .cse25 .cse30 (not (<= 0 (+ |old(~waterLevel~0)| 2147483648))) .cse27 .cse28) (or .cse33 .cse4 .cse6 .cse7 (and .cse34 .cse35)) (or .cse12 .cse4 .cse32 .cse7 (and .cse9 .cse5))))) [2022-11-03 02:47:07,394 INFO L899 garLoopResultBuilder]: For program point L535-1(lines 534 553) no Hoare annotation was computed. [2022-11-03 02:47:07,395 INFO L895 garLoopResultBuilder]: At program point L597(lines 597 605) the Hoare annotation is: (let ((.cse4 (not (= |#NULL.offset| 0))) (.cse5 (and (= |timeShift_isMethaneAlarm_~retValue_acc~4#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_processEnvironment_~tmp~5#1| |timeShift_isMethaneAlarm_#res#1|))) (.cse6 (not (= ~head~0.offset 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse8 (not (= |#NULL.base| 0))) (.cse9 (not (<= 0 |#StackHeapBarrier|))) (.cse10 (not (= ~head~0.base 0))) (.cse11 (not (= ~cleanupTimeShifts~0 4))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0) (let ((.cse1 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse1) (= |old(~waterLevel~0)| ~waterLevel~0)) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse1))) (= ~pumpRunning~0 1)) .cse2 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse4 .cse5 .cse0 .cse6 .cse7 .cse2 .cse8 .cse9 (not (<= 0 (+ |old(~waterLevel~0)| 2147483648))) .cse10 .cse11) (or .cse4 .cse5 .cse0 .cse6 (< |old(~waterLevel~0)| 2) .cse7 .cse2 .cse8 .cse9 .cse3 .cse10 .cse11) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse3))) [2022-11-03 02:47:07,395 INFO L895 garLoopResultBuilder]: At program point L882(line 882) the Hoare annotation is: (let ((.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (= ~methaneLevelCritical~0 0))) (let ((.cse10 (= ~pumpRunning~0 0)) (.cse11 (<= ~waterLevel~0 1)) (.cse21 (= 1 ~systemActive~0)) (.cse16 (not .cse0)) (.cse5 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse6 (let ((.cse22 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse22) .cse12) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse22))))) (let ((.cse3 (and .cse10 .cse11 .cse21 .cse16 .cse5 .cse6)) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~pumpRunning~0 1)) (.cse8 (not (<= |old(~waterLevel~0)| 1))) (.cse13 (not (= |#NULL.offset| 0))) (.cse14 (and (= |timeShift_isMethaneAlarm_~retValue_acc~4#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_processEnvironment_~tmp~5#1| |timeShift_isMethaneAlarm_#res#1|))) (.cse1 (not .cse21)) (.cse15 (not (= ~head~0.offset 0))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse17 (not (= |#NULL.base| 0))) (.cse18 (not (<= 0 |#StackHeapBarrier|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse19 (not (= ~head~0.base 0))) (.cse20 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 (and .cse5 .cse6 .cse7) .cse2 .cse3 .cse4) (or .cse8 .cse9 .cse10 .cse1 (and (not (= ~waterLevel~0 1)) .cse7)) (or .cse9 (and .cse11 .cse12) .cse1 .cse4 (and .cse12 .cse7)) (or .cse8 .cse13 .cse14 .cse1 .cse15 .cse16 .cse2 .cse17 .cse18 (not (<= 0 (+ |old(~waterLevel~0)| 2147483648))) .cse19 .cse20) (or .cse13 .cse14 .cse1 .cse15 (< |old(~waterLevel~0)| 2) .cse16 .cse2 .cse17 .cse18 .cse4 .cse19 .cse20))))) [2022-11-03 02:47:07,396 INFO L899 garLoopResultBuilder]: For program point L593(lines 593 610) no Hoare annotation was computed. [2022-11-03 02:47:07,396 INFO L899 garLoopResultBuilder]: For program point L882-1(line 882) no Hoare annotation was computed. [2022-11-03 02:47:07,396 INFO L895 garLoopResultBuilder]: At program point L870(line 870) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-03 02:47:07,396 INFO L895 garLoopResultBuilder]: At program point L635(line 635) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (= ~pumpRunning~0 1)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and (= ~waterLevel~0 1) .cse0) .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3) (or .cse1 .cse2 (not (<= |old(~waterLevel~0)| 0)) (and (= |old(~waterLevel~0)| ~waterLevel~0) .cse0)) (or (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse0)) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 .cse3))) [2022-11-03 02:47:07,397 INFO L895 garLoopResultBuilder]: At program point L635-1(line 635) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (and (= |timeShift_isMethaneAlarm_#t~ret30#1| ~methaneLevelCritical~0) (let ((.cse1 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse1) (= |old(~waterLevel~0)| ~waterLevel~0)) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse1))) (= ~pumpRunning~0 1)) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2))) [2022-11-03 02:47:07,397 INFO L895 garLoopResultBuilder]: At program point L603(line 603) the Hoare annotation is: (let ((.cse4 (not (= |#NULL.offset| 0))) (.cse5 (and (= |timeShift_isMethaneAlarm_~retValue_acc~4#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_processEnvironment_~tmp~5#1| |timeShift_isMethaneAlarm_#res#1|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~head~0.offset 0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse7 (not (= |#NULL.base| 0))) (.cse8 (not (<= 0 |#StackHeapBarrier|))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (= ~head~0.base 0))) (.cse10 (not (= ~cleanupTimeShifts~0 4)))) (and (or (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2) (or .cse0 (and (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0) (let ((.cse3 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse3) (= |old(~waterLevel~0)| ~waterLevel~0)) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse3))) (= ~pumpRunning~0 1)) .cse1 .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse4 .cse5 .cse0 .cse6 .cse1 .cse7 .cse8 (not (<= 0 (+ |old(~waterLevel~0)| 2147483648))) .cse9 .cse10) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2) (or .cse4 .cse5 .cse0 .cse6 (< |old(~waterLevel~0)| 2) .cse1 .cse7 .cse8 .cse2 .cse9 .cse10))) [2022-11-03 02:47:07,399 INFO L895 garLoopResultBuilder]: At program point L884(lines 884 904) the Hoare annotation is: (let ((.cse30 (= ~methaneLevelCritical~0 0))) (let ((.cse3 (not (= |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1| 0))) (.cse11 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= ~pumpRunning~0 1)) (.cse28 (not (<= |old(~waterLevel~0)| 1))) (.cse15 (not (= |#NULL.offset| 0))) (.cse31 (and (= |timeShift_isMethaneAlarm_~retValue_acc~4#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_processEnvironment_~tmp~5#1| |timeShift_isMethaneAlarm_#res#1|))) (.cse22 (not (= ~head~0.offset 0))) (.cse0 (not .cse30)) (.cse24 (not (= |#NULL.base| 0))) (.cse32 (not (<= 0 |#StackHeapBarrier|))) (.cse26 (not (= ~head~0.base 0))) (.cse27 (not (= ~cleanupTimeShifts~0 4))) (.cse29 (= ~pumpRunning~0 0)) (.cse4 (not (= 1 ~systemActive~0))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse7 (not (<= |old(~waterLevel~0)| 2)))) (and (let ((.cse1 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse2 (let ((.cse8 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse8) .cse9) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse8))))) (or (and .cse0 .cse1 .cse2 .cse3) .cse4 (and .cse1 .cse2 .cse5) .cse6 .cse7)) (let ((.cse12 (select |#memory_int| 17)) (.cse14 (select |#memory_int| 1)) (.cse23 (select |#memory_int| 23)) (.cse21 (select |#memory_int| 21)) (.cse13 (select |#memory_int| 18)) (.cse19 (select |#memory_int| 20)) (.cse16 (select |#memory_int| 26)) (.cse17 (select |#memory_int| 19)) (.cse25 (select |#memory_int| 22)) (.cse18 (select |#memory_int| 27)) (.cse20 (select |#memory_int| 28)) (.cse10 (select |#memory_int| 25))) (or (not (= (select |#valid| 23) 1)) (not (= 101 (select .cse10 2))) (not (= (select |#length| 24) 13)) (not (= (select .cse10 6) 0)) (not (= (select |#length| 12) 25)) .cse11 (not (= 79 (select .cse12 0))) (not (= (select .cse13 2) 102)) (not (= (select .cse14 0) 48)) .cse15 (not (= 9 (select |#length| 11))) (not (= (select |#valid| 26) 1)) (not (= 102 (select .cse13 1))) (not (= (select |#length| 27) 3)) (not (= 82 (select .cse16 1))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 117 (select .cse17 2))) (not (= 31 (select |#length| 2))) (not (= (select |#length| 17) 3)) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 58 (select .cse17 5))) (not (= 9 (select |#length| 14))) .cse4 (not (= 109 (select .cse17 3))) (not (= 4 (select |#length| 18))) (not (= (select |#length| 15) 25)) (not (= (select .cse12 1) 110)) (not (= 116 (select .cse10 3))) (not (= (select .cse18 1) 75)) (not (= (select |#valid| 6) 1)) (not (= 104 (select .cse10 4))) (not (= 67 (select .cse16 0))) (not (< 0 |#StackHeapBarrier|)) (not (= (select .cse17 6) 0)) (not (= (select .cse16 2) 73)) (not (= (select .cse19 2) 0)) (not (= (select |#valid| 3) 1)) (not (= 41 (select .cse20 0))) (not (= (select .cse21 3) 0)) (not (= (select |#length| 19) 7)) (not (= 2 (select |#length| 23))) (not (= (select |#valid| 25) 1)) .cse22 (not (= (select |#valid| 20) 1)) (not (= (select |#valid| 21) 1)) (not (= (select |#valid| 11) 1)) (not (= 3 (select |#length| 20))) (not (= (select |#valid| 16) 1)) (not (= (select |#valid| 28) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select .cse21 1) 102)) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= (select .cse12 2) 0)) .cse0 (not (= (select |#valid| 27) 1)) (not (= (select .cse14 1) 0)) (not (= 102 (select .cse21 2))) (not (= (select |#valid| 24) 1)) (not (= (select |#valid| 19) 1)) (not (= (select .cse23 0) 10)) (not (= (select .cse17 1) 80)) (not (= (select .cse23 1) 0)) (not (= (select |#length| 28) 2)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 22) 1)) (not (= 7 (select |#length| 25))) (not (= (select .cse13 3) 0)) (not (= 13 (select |#length| 16))) (not (= (select .cse10 0) 44)) (not (= (select .cse21 0) 79)) (not (= 110 (select .cse19 1))) (not (= (select |#valid| 8) 1)) (not (= (select .cse16 4) 0)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= (select .cse13 0) 79)) (not (= (select .cse18 2) 0)) .cse24 (not (= (select |#length| 22) 3)) (not (= (select .cse19 0) 79)) (not (= (select |#valid| 7) 1)) (not (= 112 (select .cse17 4))) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 5 (select |#length| 26))) (not (= 41 (select .cse25 0))) .cse7 (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (not (= (select .cse16 3) 84)) (not (= (select .cse25 1) 32)) (not (= 44 (select .cse17 0))) (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1|) (not (= (select |#length| 21) 4)) (not (= (select |#valid| 17) 1)) (not (= (select |#valid| 9) 1)) (not (= (select .cse10 5) 58)) (not (= (select .cse25 2) 0)) .cse26 (not (= (select .cse18 0) 79)) (not (= (select .cse20 1) 0)) .cse27 (not (= (select |#valid| 18) 1)) (not (= 77 (select .cse10 1))) (not (<= 2 |old(~waterLevel~0)|)))) (or .cse28 .cse11 .cse29 .cse4 (and (not (= ~waterLevel~0 1)) .cse5)) (or .cse11 .cse30 .cse4 (not (= |old(~waterLevel~0)| 2)) .cse3) (or .cse28 .cse11 .cse30 .cse4 .cse3) (or .cse11 (and (<= ~waterLevel~0 1) .cse9) .cse4 .cse7 (and .cse9 .cse5)) (or .cse28 .cse15 .cse31 .cse4 .cse22 .cse0 .cse6 .cse24 .cse32 (not (<= 0 (+ |old(~waterLevel~0)| 2147483648))) .cse26 .cse27) (or .cse15 .cse31 .cse4 .cse22 (< |old(~waterLevel~0)| 2) .cse0 .cse6 .cse24 .cse32 .cse7 .cse26 .cse27) (or .cse29 .cse30 .cse4 .cse6 .cse7)))) [2022-11-03 02:47:07,400 INFO L895 garLoopResultBuilder]: At program point L608(line 608) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not (<= |old(~waterLevel~0)| 2))) (or .cse1 .cse2 .cse0 (not (= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) .cse1 .cse2 .cse0))) [2022-11-03 02:47:07,400 INFO L895 garLoopResultBuilder]: At program point L608-1(lines 589 613) the Hoare annotation is: (let ((.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (= ~methaneLevelCritical~0 0))) (let ((.cse10 (= ~pumpRunning~0 0)) (.cse11 (<= ~waterLevel~0 1)) (.cse21 (= 1 ~systemActive~0)) (.cse16 (not .cse0)) (.cse5 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse6 (let ((.cse22 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse22) .cse12) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse22))))) (let ((.cse3 (and .cse10 .cse11 .cse21 .cse16 .cse5 .cse6)) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~pumpRunning~0 1)) (.cse8 (not (<= |old(~waterLevel~0)| 1))) (.cse13 (not (= |#NULL.offset| 0))) (.cse14 (and (= |timeShift_isMethaneAlarm_~retValue_acc~4#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_processEnvironment_~tmp~5#1| |timeShift_isMethaneAlarm_#res#1|))) (.cse1 (not .cse21)) (.cse15 (not (= ~head~0.offset 0))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse17 (not (= |#NULL.base| 0))) (.cse18 (not (<= 0 |#StackHeapBarrier|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse19 (not (= ~head~0.base 0))) (.cse20 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 (and .cse5 .cse6 .cse7) .cse2 .cse3 .cse4) (or .cse8 .cse9 .cse10 .cse1 (and (not (= ~waterLevel~0 1)) .cse7)) (or .cse9 (and .cse11 .cse12) .cse1 .cse4 (and .cse12 .cse7)) (or .cse8 .cse13 .cse14 .cse1 .cse15 .cse16 .cse2 .cse17 .cse18 (not (<= 0 (+ |old(~waterLevel~0)| 2147483648))) .cse19 .cse20) (or .cse13 .cse14 .cse1 .cse15 (< |old(~waterLevel~0)| 2) .cse16 .cse2 .cse17 .cse18 .cse4 .cse19 .cse20))))) [2022-11-03 02:47:07,400 INFO L899 garLoopResultBuilder]: For program point L542-1(lines 542 548) no Hoare annotation was computed. [2022-11-03 02:47:07,401 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 531 554) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 .cse2) (or .cse1 (not (= |old(~pumpRunning~0)| 1)) .cse2 (and .cse0 (= ~pumpRunning~0 1))))) [2022-11-03 02:47:07,401 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 531 554) no Hoare annotation was computed. [2022-11-03 02:47:07,401 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 870) no Hoare annotation was computed. [2022-11-03 02:47:07,401 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-11-03 02:47:07,401 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-11-03 02:47:07,402 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-11-03 02:47:07,402 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-11-03 02:47:07,402 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-11-03 02:47:07,402 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-11-03 02:47:07,402 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-11-03 02:47:07,402 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-11-03 02:47:07,403 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-11-03 02:47:07,403 INFO L895 garLoopResultBuilder]: At program point L762(lines 715 763) the Hoare annotation is: false [2022-11-03 02:47:07,403 INFO L899 garLoopResultBuilder]: For program point L717(lines 716 761) no Hoare annotation was computed. [2022-11-03 02:47:07,403 INFO L895 garLoopResultBuilder]: At program point L738(line 738) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2))) [2022-11-03 02:47:07,403 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-03 02:47:07,404 INFO L895 garLoopResultBuilder]: At program point L759(lines 716 761) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= ~waterLevel~0 2) (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) .cse0 .cse1))) [2022-11-03 02:47:07,404 INFO L899 garLoopResultBuilder]: For program point L726(lines 726 732) no Hoare annotation was computed. [2022-11-03 02:47:07,404 INFO L899 garLoopResultBuilder]: For program point L726-1(lines 726 732) no Hoare annotation was computed. [2022-11-03 02:47:07,405 INFO L895 garLoopResultBuilder]: At program point L140(lines 140 147) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 20)) (.cse5 (select |#memory_int| 22)) (.cse6 (select |#memory_int| 23)) (.cse9 (select |#memory_int| 28)) (.cse11 (select |#memory_int| 1)) (.cse8 (select |#memory_int| 18)) (.cse7 (select |#memory_int| 25)) (.cse2 (select |#memory_int| 17)) (.cse10 (select |#memory_int| 21)) (.cse3 (select |#memory_int| 27)) (.cse1 (select |#memory_int| 26)) (.cse4 (select |#memory_int| 19))) (and (= (select |#length| 15) 25) (= (select .cse0 0) 79) (= 9 (select |#length| 5)) (= (select .cse1 3) 84) (= (select |#length| 9) 21) (= (select .cse2 1) 110) (= 30 (select |#length| 7)) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (= (select |#length| 21) 4) (= (select .cse2 2) 0) (= 82 (select .cse1 1)) (= ~pumpRunning~0 0) (= (select |#valid| 26) 1) (= 67 (select .cse1 0)) (= (select .cse3 2) 0) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_main_~tmp~0#1|) (= (select .cse4 1) 80) (= (select .cse0 2) 0) (= 3 (select |#length| 20)) (= 41 (select .cse5 0)) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~11#1|) (= (select .cse3 1) 75) (= (select |#valid| 9) 1) (= 13 (select |#length| 16)) (= (select |#length| 12) 25) (= (select |#length| 28) 2) (= (select |#length| 19) 7) (= (select .cse6 0) 10) (= (select |#valid| 11) 1) (= (select |#valid| 27) 1) (= ~methaneLevelCritical~0 0) (= 58 (select .cse4 5)) (= 110 (select .cse0 1)) (= 30 (select |#length| 4)) (= (select |#length| 22) 3) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= (select |#length| 24) 13) (= (select |#length| 27) 3) (= 2 (select |#length| 1)) (= (select |#length| 8) 9) (= (select .cse7 5) 58) (= (select |#valid| 3) 1) (= (select |#valid| 7) 1) (= 5 (select |#length| 26)) (= 77 (select .cse7 1)) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_valid_product_~retValue_acc~11#1|) (= 2 (select |#length| 23)) (= (select |#valid| 18) 1) (= (select |#valid| 22) 1) (= 30 (select |#length| 13)) (= (select .cse8 3) 0) (= 1 ~systemActive~0) (= (select .cse7 6) 0) (= (select |#valid| 24) 1) (= 30 (select |#length| 10)) (= (select |#length| 17) 3) (= (select .cse1 4) 0) (= (select |#valid| 12) 1) (= (select |#valid| 28) 1) (= (select .cse9 1) 0) (= 102 (select .cse8 1)) (= (select |#valid| 4) 1) (= 102 (select .cse10 2)) (= (select .cse5 1) 32) (= 112 (select .cse4 4)) (= (select .cse8 2) 102) (= (select .cse5 2) 0) (= (select .cse4 6) 0) (= (select |#valid| 1) 1) (= (select |#valid| 20) 1) (= (select |#length| 6) 21) (= (select |#valid| 21) 1) (= (select |#valid| 14) 1) (= 9 (select |#length| 14)) (= (select |#valid| 0) 0) (= (select |#valid| 25) 1) (= 4 (select |#length| 18)) (= ~head~0.base 0) (= 44 (select .cse4 0)) (= 101 (select .cse7 2)) (= (select |#valid| 2) 1) (= |#NULL.offset| 0) (= 9 (select |#length| 11)) (= ~waterLevel~0 1) (= (select .cse6 1) 0) (= (select .cse7 0) 44) (= (select .cse11 0) 48) (= (select |#valid| 23) 1) (= 41 (select .cse9 0)) (= (select .cse10 3) 0) (= 116 (select .cse7 3)) (= 7 (select |#length| 25)) (= (select |#valid| 19) 1) (= (select |#valid| 16) 1) (= (select |#valid| 6) 1) (= (select .cse11 1) 0) (= (select .cse8 0) 79) (= (select .cse10 1) 102) (= 104 (select .cse7 4)) (= 79 (select .cse2 0)) (= (select .cse10 0) 79) (= (select |#valid| 17) 1) (= (select |#valid| 10) 1) (= (select .cse3 0) 79) (= (select |#valid| 8) 1) (= 117 (select .cse4 2)) (= (select |#valid| 13) 1) (= (select .cse1 2) 73) (< 0 |#StackHeapBarrier|) (= 109 (select .cse4 3)) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))) [2022-11-03 02:47:07,405 INFO L902 garLoopResultBuilder]: At program point L140-2(lines 140 147) the Hoare annotation is: true [2022-11-03 02:47:07,406 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-03 02:47:07,406 INFO L895 garLoopResultBuilder]: At program point L752-2(lines 746 757) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2))) [2022-11-03 02:47:07,406 INFO L899 garLoopResultBuilder]: For program point L736(lines 736 742) no Hoare annotation was computed. [2022-11-03 02:47:07,406 INFO L899 garLoopResultBuilder]: For program point L736-1(lines 736 742) no Hoare annotation was computed. [2022-11-03 02:47:07,406 INFO L902 garLoopResultBuilder]: At program point L765(lines 706 769) the Hoare annotation is: true [2022-11-03 02:47:07,407 INFO L895 garLoopResultBuilder]: At program point L728(line 728) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0 2)) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0 1)) (and .cse3 .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2) (and .cse3 (<= ~waterLevel~0 1) .cse0 .cse1))) [2022-11-03 02:47:07,407 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 563 587) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-03 02:47:07,409 INFO L895 garLoopResultBuilder]: At program point L577(line 577) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0 1)) (.cse3 (not (= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) .cse2 (or .cse3 (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0)))) (or .cse1 (not (= |old(~pumpRunning~0)| 1)) (not .cse2)) (let ((.cse5 (select |#memory_int| 17)) (.cse7 (select |#memory_int| 1)) (.cse14 (select |#memory_int| 23)) (.cse13 (select |#memory_int| 21)) (.cse6 (select |#memory_int| 18)) (.cse11 (select |#memory_int| 20)) (.cse8 (select |#memory_int| 26)) (.cse9 (select |#memory_int| 19)) (.cse15 (select |#memory_int| 22)) (.cse10 (select |#memory_int| 27)) (.cse12 (select |#memory_int| 28)) (.cse4 (select |#memory_int| 25))) (or .cse3 (not (= (select |#valid| 23) 1)) (not (= 101 (select .cse4 2))) (not (= (select |#length| 24) 13)) (not (= (select .cse4 6) 0)) (not (= (select |#length| 12) 25)) .cse0 (not (= 79 (select .cse5 0))) (not (= (select .cse6 2) 102)) (not (= (select .cse7 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= (select |#valid| 26) 1)) (not (= 102 (select .cse6 1))) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~9#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~9#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~6#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~6#1|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (not (= (select |#length| 27) 3)) (not (= 82 (select .cse8 1))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 117 (select .cse9 2))) (not (= 31 (select |#length| 2))) (not (= (select |#length| 17) 3)) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 58 (select .cse9 5))) (not (= 9 (select |#length| 14))) .cse1 (not (= 109 (select .cse9 3))) (not (= 4 (select |#length| 18))) (not (= (select |#length| 15) 25)) (not (= (select .cse5 1) 110)) (not (= 116 (select .cse4 3))) (not (= (select .cse10 1) 75)) (not (= (select |#valid| 6) 1)) (not (= 104 (select .cse4 4))) (not (= 67 (select .cse8 0))) (not (< 0 |#StackHeapBarrier|)) (not (= (select .cse9 6) 0)) (not (= (select .cse8 2) 73)) (not (= (select .cse11 2) 0)) (not (= (select |#valid| 3) 1)) (not (= 41 (select .cse12 0))) (not (= (select .cse13 3) 0)) (not (= (select |#length| 19) 7)) (not (= 2 (select |#length| 23))) (not (= (select |#valid| 25) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 20) 1)) (not (= (select |#valid| 21) 1)) (not (= (select |#valid| 11) 1)) (not (= 3 (select |#length| 20))) (not (= (select |#valid| 16) 1)) (not (= (select |#valid| 28) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select .cse13 1) 102)) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= (select .cse5 2) 0)) (not (= ~methaneLevelCritical~0 0)) (not (= (select |#valid| 27) 1)) (not (= (select .cse7 1) 0)) (not (= 102 (select .cse13 2))) (not (= (select |#valid| 24) 1)) (not (= (select |#valid| 19) 1)) (not (= (select .cse14 0) 10)) (not (= (select .cse9 1) 80)) (not (= (select .cse14 1) 0)) (not (= (select |#length| 28) 2)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 22) 1)) (not (= 7 (select |#length| 25))) (not (= (select .cse6 3) 0)) (not (= 13 (select |#length| 16))) (not (= (select .cse4 0) 44)) (not (= (select .cse13 0) 79)) (not (= 110 (select .cse11 1))) (not (= (select |#valid| 8) 1)) (not (= (select .cse8 4) 0)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= (select .cse6 0) 79)) (not (= (select .cse10 2) 0)) (not (= |#NULL.base| 0)) (not (= (select |#length| 22) 3)) (not (= (select .cse11 0) 79)) (not (= (select |#valid| 7) 1)) (not (= 112 (select .cse9 4))) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 5 (select |#length| 26))) (not (= 41 (select .cse15 0))) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (not (= (select .cse8 3) 84)) (not (= (select .cse15 1) 32)) (not (= 44 (select .cse9 0))) (not (= (select |#length| 21) 4)) (not (= (select |#valid| 17) 1)) (not (= (select |#valid| 9) 1)) (not (= (select .cse4 5) 58)) (not (= (select .cse15 2) 0)) (not (= ~head~0.base 0)) (not (= (select .cse10 0) 79)) (not (= (select .cse12 1) 0)) (not (= ~cleanupTimeShifts~0 4)) (not (= (select |#valid| 18) 1)) (not (= 77 (select .cse4 1))))))) [2022-11-03 02:47:07,409 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 563 587) no Hoare annotation was computed. [2022-11-03 02:47:07,411 INFO L895 garLoopResultBuilder]: At program point L571(lines 571 579) the Hoare annotation is: (let ((.cse123 (select |#memory_int| 22)) (.cse129 (select |#memory_int| 23)) (.cse128 (select |#memory_int| 21)) (.cse121 (select |#memory_int| 28)) (.cse126 (select |#memory_int| 20)) (.cse122 (select |#memory_int| 27)) (.cse124 (select |#memory_int| 19)) (.cse125 (select |#memory_int| 26)) (.cse130 (select |#memory_int| 1)) (.cse127 (select |#memory_int| 18)) (.cse131 (select |#memory_int| 17)) (.cse120 (select |#memory_int| 25))) (let ((.cse3 (not (<= ~waterLevel~0 2))) (.cse4 (< ~waterLevel~0 2)) (.cse6 (not (= (select |#valid| 23) 1))) (.cse7 (not (= 101 (select .cse120 2)))) (.cse8 (not (= (select |#length| 24) 13))) (.cse9 (not (= (select .cse120 6) 0))) (.cse10 (not (= (select |#length| 12) 25))) (.cse11 (not (= 79 (select .cse131 0)))) (.cse12 (not (= (select .cse127 2) 102))) (.cse13 (not (= (select .cse130 0) 48))) (.cse14 (not (= |#NULL.offset| 0))) (.cse15 (not (= 9 (select |#length| 11)))) (.cse16 (not (= (select |#valid| 26) 1))) (.cse17 (not (= 102 (select .cse127 1)))) (.cse33 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~9#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)) (.cse34 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~6#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (.cse35 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~6#1|)) (.cse36 (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (.cse18 (not (= (select |#length| 27) 3))) (.cse19 (not (= 82 (select .cse125 1)))) (.cse20 (not (= 9 (select |#length| 5)))) (.cse21 (not (= 30 (select |#length| 7)))) (.cse22 (not (= 117 (select .cse124 2)))) (.cse23 (not (= 31 (select |#length| 2)))) (.cse24 (not (= (select |#length| 17) 3))) (.cse25 (not (= (select |#valid| 12) 1))) (.cse26 (not (= 2 (select |#length| 1)))) (.cse27 (not (= 58 (select .cse124 5)))) (.cse28 (not (= 9 (select |#length| 14)))) (.cse29 (not (= 109 (select .cse124 3)))) (.cse30 (not (= 4 (select |#length| 18)))) (.cse31 (not (= (select |#length| 15) 25))) (.cse32 (not (= (select .cse131 1) 110))) (.cse37 (not (= 116 (select .cse120 3)))) (.cse38 (not (= (select .cse122 1) 75))) (.cse39 (not (= (select |#valid| 6) 1))) (.cse40 (not (= 104 (select .cse120 4)))) (.cse41 (not (= 67 (select .cse125 0)))) (.cse42 (not (< 0 |#StackHeapBarrier|))) (.cse43 (not (= (select .cse124 6) 0))) (.cse44 (not (= (select .cse125 2) 73))) (.cse45 (not (= (select .cse126 2) 0))) (.cse46 (not (= (select |#valid| 3) 1))) (.cse47 (not (= 41 (select .cse121 0)))) (.cse48 (not (= (select .cse128 3) 0))) (.cse49 (not (= (select |#length| 19) 7))) (.cse50 (not (= 2 (select |#length| 23)))) (.cse51 (not (= (select |#valid| 25) 1))) (.cse52 (not (= ~head~0.offset 0))) (.cse53 (not (= (select |#valid| 20) 1))) (.cse54 (not (= (select |#valid| 21) 1))) (.cse55 (not (= (select |#valid| 11) 1))) (.cse56 (not (= 3 (select |#length| 20)))) (.cse57 (not (= (select |#valid| 16) 1))) (.cse58 (not (= (select |#valid| 28) 1))) (.cse59 (not (= (select |#length| 9) 21))) (.cse60 (not (= 30 (select |#length| 10)))) (.cse61 (not (= (select .cse128 1) 102))) (.cse62 (not (= (select |#valid| 15) 1))) (.cse63 (not (= (select |#length| 6) 21))) (.cse64 (not (= 1 (select |#valid| 5)))) (.cse65 (not (= (select |#length| 8) 9))) (.cse66 (not (= (select |#length| 3) 12))) (.cse67 (not (= (select |#valid| 0) 0))) (.cse68 (not (= (select .cse131 2) 0))) (.cse69 (not (= ~methaneLevelCritical~0 0))) (.cse70 (not (= (select |#valid| 27) 1))) (.cse71 (not (= (select .cse130 1) 0))) (.cse72 (not (= 102 (select .cse128 2)))) (.cse73 (not (= (select |#valid| 24) 1))) (.cse74 (not (= (select |#valid| 19) 1))) (.cse75 (not (= (select .cse129 0) 10))) (.cse76 (not (= (select .cse124 1) 80))) (.cse77 (not (= (select .cse129 1) 0))) (.cse78 (not (= (select |#length| 28) 2))) (.cse79 (not (= (select |#valid| 1) 1))) (.cse80 (not (= (select |#valid| 22) 1))) (.cse81 (not (= 7 (select |#length| 25)))) (.cse82 (not (= (select .cse127 3) 0))) (.cse83 (not (= 13 (select |#length| 16)))) (.cse84 (not (= (select .cse120 0) 44))) (.cse85 (not (= (select .cse128 0) 79))) (.cse86 (not (= 110 (select .cse126 1)))) (.cse87 (not (= (select |#valid| 8) 1))) (.cse88 (not (= (select .cse125 4) 0))) (.cse89 (not (= 30 (select |#length| 13)))) (.cse90 (not (= (select |#valid| 4) 1))) (.cse91 (not (= (select .cse127 0) 79))) (.cse92 (not (= (select .cse122 2) 0))) (.cse93 (not (= |#NULL.base| 0))) (.cse94 (not (= (select |#length| 22) 3))) (.cse95 (not (= (select .cse126 0) 79))) (.cse96 (not (= (select |#valid| 7) 1))) (.cse97 (not (= 112 (select .cse124 4)))) (.cse98 (not (= (select |#valid| 10) 1))) (.cse99 (not (= (select |#valid| 14) 1))) (.cse100 (not (= (select |#valid| 13) 1))) (.cse101 (not (= 5 (select |#length| 26)))) (.cse102 (not (= 41 (select .cse123 0)))) (.cse103 (not (= 30 (select |#length| 4)))) (.cse104 (not (= (select |#valid| 2) 1))) (.cse105 (not (= (select .cse125 3) 84))) (.cse106 (not (= (select .cse123 1) 32))) (.cse107 (not (= 44 (select .cse124 0)))) (.cse108 (not (= (select |#length| 21) 4))) (.cse109 (not (= (select |#valid| 17) 1))) (.cse110 (not (= (select |#valid| 9) 1))) (.cse111 (not (= (select .cse120 5) 58))) (.cse112 (not (= (select .cse123 2) 0))) (.cse113 (not (= ~head~0.base 0))) (.cse114 (not (= (select .cse122 0) 79))) (.cse115 (not (= (select .cse121 1) 0))) (.cse116 (not (= ~cleanupTimeShifts~0 4))) (.cse117 (not (= (select |#valid| 18) 1))) (.cse118 (not (= 77 (select .cse120 1)))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (= ~pumpRunning~0 0)) (.cse119 (not (= ~waterLevel~0 1))) (.cse1 (not (<= ~waterLevel~0 1)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or .cse2 .cse0 .cse3 .cse4 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 1))) (or .cse6 .cse7 .cse8 .cse9 .cse10 .cse2 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse0 .cse29 .cse30 .cse31 .cse32 (and .cse33 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~9#1| 0) .cse34 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 1) .cse35 .cse36) .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse3 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse4 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118) (or .cse119 .cse6 .cse7 .cse8 .cse9 .cse10 .cse2 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 (and .cse33 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~9#1| 1) .cse34 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0) .cse35 .cse36) .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse0 .cse29 .cse30 .cse31 .cse32 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118) (or .cse2 .cse0 (and .cse5 (or .cse119 (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0))) .cse1)))) [2022-11-03 02:47:07,411 INFO L895 garLoopResultBuilder]: At program point L567(lines 567 584) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-03 02:47:07,411 INFO L895 garLoopResultBuilder]: At program point L582(line 582) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-03 02:47:07,412 INFO L899 garLoopResultBuilder]: For program point L582-1(lines 563 587) no Hoare annotation was computed. [2022-11-03 02:47:07,412 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 786 797) no Hoare annotation was computed. [2022-11-03 02:47:07,412 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 786 797) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2) (or .cse1 (not (= ~pumpRunning~0 1)) .cse2 .cse3))) [2022-11-03 02:47:07,415 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:47:07,417 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-03 02:47:07,490 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 03.11 02:47:07 BoogieIcfgContainer [2022-11-03 02:47:07,490 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-03 02:47:07,491 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-03 02:47:07,491 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-03 02:47:07,492 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-03 02:47:07,492 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:43:42" (3/4) ... [2022-11-03 02:47:07,495 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-03 02:47:07,502 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-03 02:47:07,502 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-03 02:47:07,502 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-03 02:47:07,502 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-03 02:47:07,503 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-03 02:47:07,503 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-03 02:47:07,503 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-03 02:47:07,511 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 73 nodes and edges [2022-11-03 02:47:07,512 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 24 nodes and edges [2022-11-03 02:47:07,512 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 13 nodes and edges [2022-11-03 02:47:07,513 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-03 02:47:07,513 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-03 02:47:07,514 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 02:47:07,514 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 02:47:07,543 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && unknown-#memory_int-unknown[20][0] == 79) && 9 == unknown-#length-unknown[5]) && unknown-#memory_int-unknown[26][3] == 84) && unknown-#length-unknown[9] == 21) && unknown-#memory_int-unknown[17][1] == 110) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && unknown-#length-unknown[21] == 4) && unknown-#memory_int-unknown[17][2] == 0) && 82 == unknown-#memory_int-unknown[26][1]) && pumpRunning == 0) && \valid[26] == 1) && 67 == unknown-#memory_int-unknown[26][0]) && unknown-#memory_int-unknown[27][2] == 0) && \result == tmp) && unknown-#memory_int-unknown[19][1] == 80) && unknown-#memory_int-unknown[20][2] == 0) && 3 == unknown-#length-unknown[20]) && 41 == unknown-#memory_int-unknown[22][0]) && 1 == retValue_acc) && unknown-#memory_int-unknown[27][1] == 75) && \valid[9] == 1) && 13 == unknown-#length-unknown[16]) && unknown-#length-unknown[12] == 25) && unknown-#length-unknown[28] == 2) && unknown-#length-unknown[19] == 7) && unknown-#memory_int-unknown[23][0] == 10) && \valid[11] == 1) && \valid[27] == 1) && methaneLevelCritical == 0) && 58 == unknown-#memory_int-unknown[19][5]) && 110 == unknown-#memory_int-unknown[20][1]) && 30 == unknown-#length-unknown[4]) && unknown-#length-unknown[22] == 3) && 31 == unknown-#length-unknown[2]) && head == 0) && unknown-#length-unknown[24] == 13) && unknown-#length-unknown[27] == 3) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && unknown-#memory_int-unknown[25][5] == 58) && \valid[3] == 1) && \valid[7] == 1) && 5 == unknown-#length-unknown[26]) && 77 == unknown-#memory_int-unknown[25][1]) && \result == retValue_acc) && 2 == unknown-#length-unknown[23]) && \valid[18] == 1) && \valid[22] == 1) && 30 == unknown-#length-unknown[13]) && unknown-#memory_int-unknown[18][3] == 0) && 1 == systemActive) && unknown-#memory_int-unknown[25][6] == 0) && \valid[24] == 1) && 30 == unknown-#length-unknown[10]) && unknown-#length-unknown[17] == 3) && unknown-#memory_int-unknown[26][4] == 0) && \valid[12] == 1) && \valid[28] == 1) && unknown-#memory_int-unknown[28][1] == 0) && 102 == unknown-#memory_int-unknown[18][1]) && \valid[4] == 1) && 102 == unknown-#memory_int-unknown[21][2]) && unknown-#memory_int-unknown[22][1] == 32) && 112 == unknown-#memory_int-unknown[19][4]) && unknown-#memory_int-unknown[18][2] == 102) && unknown-#memory_int-unknown[22][2] == 0) && unknown-#memory_int-unknown[19][6] == 0) && \valid[1] == 1) && \valid[20] == 1) && unknown-#length-unknown[6] == 21) && \valid[21] == 1) && \valid[14] == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && \valid[25] == 1) && 4 == unknown-#length-unknown[18]) && head == 0) && 44 == unknown-#memory_int-unknown[19][0]) && 101 == unknown-#memory_int-unknown[25][2]) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[23][1] == 0) && unknown-#memory_int-unknown[25][0] == 44) && unknown-#memory_int-unknown[1][0] == 48) && \valid[23] == 1) && 41 == unknown-#memory_int-unknown[28][0]) && unknown-#memory_int-unknown[21][3] == 0) && 116 == unknown-#memory_int-unknown[25][3]) && 7 == unknown-#length-unknown[25]) && \valid[19] == 1) && \valid[16] == 1) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && unknown-#memory_int-unknown[18][0] == 79) && unknown-#memory_int-unknown[21][1] == 102) && 104 == unknown-#memory_int-unknown[25][4]) && 79 == unknown-#memory_int-unknown[17][0]) && unknown-#memory_int-unknown[21][0] == 79) && \valid[17] == 1) && \valid[10] == 1) && unknown-#memory_int-unknown[27][0] == 79) && \valid[8] == 1) && 117 == unknown-#memory_int-unknown[19][2]) && \valid[13] == 1) && unknown-#memory_int-unknown[26][2] == 73) && 0 < unknown-#StackHeapBarrier-unknown) && 109 == unknown-#memory_int-unknown[19][3]) && cleanupTimeShifts == 4) && #NULL == 0 [2022-11-03 02:47:07,544 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) [2022-11-03 02:47:07,545 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || (((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))))) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || ((tmp == methaneLevelCritical && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || (((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))))) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || (!(waterLevel == 1) && pumpRunning == 1))) && ((((!(\old(pumpRunning) == 0) || (waterLevel <= 1 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((((((((((!(\old(waterLevel) <= 1) || !(#NULL == 0)) || (retValue_acc == \result && tmp == \result)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(waterLevel) + 2147483648)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((((((((!(#NULL == 0) || (retValue_acc == \result && tmp == \result)) || !(1 == systemActive)) || !(head == 0)) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || !(head == 0)) || !(cleanupTimeShifts == 4)) [2022-11-03 02:47:07,545 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) || pumpRunning == 1) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2022-11-03 02:47:07,545 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((aux-isMethaneLevelCritical()-aux == methaneLevelCritical && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-03 02:47:07,546 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(methaneLevelCritical == 0) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && !(tmp == 0)) || !(1 == systemActive)) || ((tmp == methaneLevelCritical && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(\valid[23] == 1) || !(101 == unknown-#memory_int-unknown[25][2])) || !(unknown-#length-unknown[24] == 13)) || !(unknown-#memory_int-unknown[25][6] == 0)) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(79 == unknown-#memory_int-unknown[17][0])) || !(unknown-#memory_int-unknown[18][2] == 102)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\valid[26] == 1)) || !(102 == unknown-#memory_int-unknown[18][1])) || !(unknown-#length-unknown[27] == 3)) || !(82 == unknown-#memory_int-unknown[26][1])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(117 == unknown-#memory_int-unknown[19][2])) || !(31 == unknown-#length-unknown[2])) || !(unknown-#length-unknown[17] == 3)) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(58 == unknown-#memory_int-unknown[19][5])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(109 == unknown-#memory_int-unknown[19][3])) || !(4 == unknown-#length-unknown[18])) || !(unknown-#length-unknown[15] == 25)) || !(unknown-#memory_int-unknown[17][1] == 110)) || !(116 == unknown-#memory_int-unknown[25][3])) || !(unknown-#memory_int-unknown[27][1] == 75)) || !(\valid[6] == 1)) || !(104 == unknown-#memory_int-unknown[25][4])) || !(67 == unknown-#memory_int-unknown[26][0])) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[19][6] == 0)) || !(unknown-#memory_int-unknown[26][2] == 73)) || !(unknown-#memory_int-unknown[20][2] == 0)) || !(\valid[3] == 1)) || !(41 == unknown-#memory_int-unknown[28][0])) || !(unknown-#memory_int-unknown[21][3] == 0)) || !(unknown-#length-unknown[19] == 7)) || !(2 == unknown-#length-unknown[23])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(3 == unknown-#length-unknown[20])) || !(\valid[16] == 1)) || !(\valid[28] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[21][1] == 102)) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[17][2] == 0)) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(102 == unknown-#memory_int-unknown[21][2])) || !(\valid[24] == 1)) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[23][0] == 10)) || !(unknown-#memory_int-unknown[19][1] == 80)) || !(unknown-#memory_int-unknown[23][1] == 0)) || !(unknown-#length-unknown[28] == 2)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(7 == unknown-#length-unknown[25])) || !(unknown-#memory_int-unknown[18][3] == 0)) || !(13 == unknown-#length-unknown[16])) || !(unknown-#memory_int-unknown[25][0] == 44)) || !(unknown-#memory_int-unknown[21][0] == 79)) || !(110 == unknown-#memory_int-unknown[20][1])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[26][4] == 0)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(unknown-#memory_int-unknown[18][0] == 79)) || !(unknown-#memory_int-unknown[27][2] == 0)) || !(#NULL == 0)) || !(unknown-#length-unknown[22] == 3)) || !(unknown-#memory_int-unknown[20][0] == 79)) || !(\valid[7] == 1)) || !(112 == unknown-#memory_int-unknown[19][4])) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(5 == unknown-#length-unknown[26])) || !(41 == unknown-#memory_int-unknown[22][0])) || !(\old(waterLevel) <= 2)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(unknown-#memory_int-unknown[26][3] == 84)) || !(unknown-#memory_int-unknown[22][1] == 32)) || !(44 == unknown-#memory_int-unknown[19][0])) || methaneLevelCritical == tmp) || !(unknown-#length-unknown[21] == 4)) || !(\valid[17] == 1)) || !(\valid[9] == 1)) || !(unknown-#memory_int-unknown[25][5] == 58)) || !(unknown-#memory_int-unknown[22][2] == 0)) || !(head == 0)) || !(unknown-#memory_int-unknown[27][0] == 79)) || !(unknown-#memory_int-unknown[28][1] == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(77 == unknown-#memory_int-unknown[25][1])) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || (!(waterLevel == 1) && pumpRunning == 1))) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || !(tmp == 0))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(tmp == 0))) && ((((!(\old(pumpRunning) == 0) || (waterLevel <= 1 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((((((((((!(\old(waterLevel) <= 1) || !(#NULL == 0)) || (retValue_acc == \result && tmp == \result)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(waterLevel) + 2147483648)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((((((((!(#NULL == 0) || (retValue_acc == \result && tmp == \result)) || !(1 == systemActive)) || !(head == 0)) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((pumpRunning == 0 || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) [2022-11-03 02:47:07,546 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(methaneLevelCritical == 0) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && !(tmp == 0)) || !(1 == systemActive)) || ((tmp == methaneLevelCritical && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(\valid[23] == 1) || !(101 == unknown-#memory_int-unknown[25][2])) || !(unknown-#length-unknown[24] == 13)) || !(unknown-#memory_int-unknown[25][6] == 0)) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(79 == unknown-#memory_int-unknown[17][0])) || !(unknown-#memory_int-unknown[18][2] == 102)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\valid[26] == 1)) || !(102 == unknown-#memory_int-unknown[18][1])) || !(unknown-#length-unknown[27] == 3)) || !(82 == unknown-#memory_int-unknown[26][1])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(117 == unknown-#memory_int-unknown[19][2])) || !(31 == unknown-#length-unknown[2])) || !(unknown-#length-unknown[17] == 3)) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(58 == unknown-#memory_int-unknown[19][5])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(109 == unknown-#memory_int-unknown[19][3])) || !(4 == unknown-#length-unknown[18])) || !(unknown-#length-unknown[15] == 25)) || !(unknown-#memory_int-unknown[17][1] == 110)) || !(116 == unknown-#memory_int-unknown[25][3])) || !(unknown-#memory_int-unknown[27][1] == 75)) || !(\valid[6] == 1)) || !(104 == unknown-#memory_int-unknown[25][4])) || !(67 == unknown-#memory_int-unknown[26][0])) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[19][6] == 0)) || !(unknown-#memory_int-unknown[26][2] == 73)) || !(unknown-#memory_int-unknown[20][2] == 0)) || !(\valid[3] == 1)) || !(41 == unknown-#memory_int-unknown[28][0])) || !(unknown-#memory_int-unknown[21][3] == 0)) || !(unknown-#length-unknown[19] == 7)) || !(2 == unknown-#length-unknown[23])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(3 == unknown-#length-unknown[20])) || !(\valid[16] == 1)) || !(\valid[28] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[21][1] == 102)) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[17][2] == 0)) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(102 == unknown-#memory_int-unknown[21][2])) || !(\valid[24] == 1)) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[23][0] == 10)) || !(unknown-#memory_int-unknown[19][1] == 80)) || !(unknown-#memory_int-unknown[23][1] == 0)) || !(unknown-#length-unknown[28] == 2)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(7 == unknown-#length-unknown[25])) || !(unknown-#memory_int-unknown[18][3] == 0)) || !(13 == unknown-#length-unknown[16])) || !(unknown-#memory_int-unknown[25][0] == 44)) || !(unknown-#memory_int-unknown[21][0] == 79)) || !(110 == unknown-#memory_int-unknown[20][1])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[26][4] == 0)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(unknown-#memory_int-unknown[18][0] == 79)) || !(unknown-#memory_int-unknown[27][2] == 0)) || !(#NULL == 0)) || !(unknown-#length-unknown[22] == 3)) || !(unknown-#memory_int-unknown[20][0] == 79)) || !(\valid[7] == 1)) || !(112 == unknown-#memory_int-unknown[19][4])) || !(\valid[10] == 1)) || ((((((\result == retValue_acc && retValue_acc == waterLevel) && \result == tmp___0) && pumpRunning == retValue_acc) && \result == tmp___1) && methaneLevelCritical == tmp) && retValue_acc == \result)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(5 == unknown-#length-unknown[26])) || !(41 == unknown-#memory_int-unknown[22][0])) || !(\old(waterLevel) <= 2)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(unknown-#memory_int-unknown[26][3] == 84)) || !(unknown-#memory_int-unknown[22][1] == 32)) || !(44 == unknown-#memory_int-unknown[19][0])) || !(unknown-#length-unknown[21] == 4)) || !(\valid[17] == 1)) || !(\valid[9] == 1)) || !(unknown-#memory_int-unknown[25][5] == 58)) || !(unknown-#memory_int-unknown[22][2] == 0)) || !(head == 0)) || !(unknown-#memory_int-unknown[27][0] == 79)) || !(unknown-#memory_int-unknown[28][1] == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(77 == unknown-#memory_int-unknown[25][1])) || !(2 <= \old(waterLevel)))) && (((((((((((!(#NULL == 0) || ((((((((((((1 <= systemActive && #NULL <= 0) && 0 <= head) && tmp == methaneLevelCritical) && 0 <= methaneLevelCritical) && head <= 0) && retValue_acc <= 0) && 0 <= #NULL) && 0 <= unknown-#StackHeapBarrier-unknown) && retValue_acc == \result) && tmp == \result) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel + 1) && head == 0) && 0 < \old(waterLevel)) && cleanupTimeShifts == 4) && #NULL == 0) || (((((pumpRunning == \old(pumpRunning) && head == 0) && \old(waterLevel) <= 0) && \old(waterLevel) == waterLevel) && cleanupTimeShifts == 4) && #NULL == 0))) && systemActive <= 1)) || !(1 == systemActive)) || !(head == 0)) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((!(waterLevel == 1) || !(\old(waterLevel) <= 1)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((pumpRunning == 0 && (\old(pumpRunning) == 0 || \old(waterLevel) <= 0)) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(tmp == 0))) && (((((((((((!(\old(waterLevel) <= 1) || !(#NULL == 0)) || ((((((((((((1 <= systemActive && #NULL <= 0) && 0 <= head) && tmp == methaneLevelCritical) && 0 <= methaneLevelCritical) && head <= 0) && retValue_acc <= 0) && 0 <= #NULL) && 0 <= unknown-#StackHeapBarrier-unknown) && retValue_acc == \result) && tmp == \result) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel + 1) && head == 0) && 0 < \old(waterLevel)) && cleanupTimeShifts == 4) && #NULL == 0) || (((((pumpRunning == \old(pumpRunning) && head == 0) && \old(waterLevel) <= 0) && \old(waterLevel) == waterLevel) && cleanupTimeShifts == 4) && #NULL == 0))) && systemActive <= 1)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(waterLevel) + 2147483648)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && 1 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == 0 && (\old(pumpRunning) == 0 || \old(waterLevel) <= 0)) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) [2022-11-03 02:47:07,547 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || ((tmp == methaneLevelCritical && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && (((((((((((!(\old(waterLevel) <= 1) || !(#NULL == 0)) || (retValue_acc == \result && tmp == \result)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(waterLevel) + 2147483648)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((((((((!(#NULL == 0) || (retValue_acc == \result && tmp == \result)) || !(1 == systemActive)) || !(head == 0)) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-03 02:47:07,547 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (((tmp___0 <= 1 && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == 1)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((!(waterLevel == 1) && tmp___0 <= 1) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || ((pumpRunning == 0 && tmp___0 <= 1) && \old(waterLevel) == waterLevel))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || methaneLevelCritical == 0) || !(1 == systemActive))) && ((((((((((!(\old(waterLevel) <= 1) || !(#NULL == 0)) || (retValue_acc == \result && tmp == \result)) || !(1 == systemActive)) || !(head == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(waterLevel) + 2147483648)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(\valid[23] == 1) || !(101 == unknown-#memory_int-unknown[25][2])) || !(unknown-#length-unknown[24] == 13)) || !(unknown-#memory_int-unknown[25][6] == 0)) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(79 == unknown-#memory_int-unknown[17][0])) || !(unknown-#memory_int-unknown[18][2] == 102)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\valid[26] == 1)) || !(102 == unknown-#memory_int-unknown[18][1])) || !(unknown-#length-unknown[27] == 3)) || !(82 == unknown-#memory_int-unknown[26][1])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(117 == unknown-#memory_int-unknown[19][2])) || !(31 == unknown-#length-unknown[2])) || !(unknown-#length-unknown[17] == 3)) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(58 == unknown-#memory_int-unknown[19][5])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(109 == unknown-#memory_int-unknown[19][3])) || !(4 == unknown-#length-unknown[18])) || !(unknown-#length-unknown[15] == 25)) || !(unknown-#memory_int-unknown[17][1] == 110)) || !(116 == unknown-#memory_int-unknown[25][3])) || !(unknown-#memory_int-unknown[27][1] == 75)) || !(\valid[6] == 1)) || !(104 == unknown-#memory_int-unknown[25][4])) || !(67 == unknown-#memory_int-unknown[26][0])) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[19][6] == 0)) || !(unknown-#memory_int-unknown[26][2] == 73)) || !(unknown-#memory_int-unknown[20][2] == 0)) || !(\valid[3] == 1)) || !(41 == unknown-#memory_int-unknown[28][0])) || !(unknown-#memory_int-unknown[21][3] == 0)) || !(unknown-#length-unknown[19] == 7)) || !(2 == unknown-#length-unknown[23])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(3 == unknown-#length-unknown[20])) || !(\valid[16] == 1)) || !(\valid[28] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[21][1] == 102)) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[17][2] == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(102 == unknown-#memory_int-unknown[21][2])) || !(\valid[24] == 1)) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[23][0] == 10)) || !(unknown-#memory_int-unknown[19][1] == 80)) || !(unknown-#memory_int-unknown[23][1] == 0)) || !(unknown-#length-unknown[28] == 2)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(7 == unknown-#length-unknown[25])) || !(unknown-#memory_int-unknown[18][3] == 0)) || !(13 == unknown-#length-unknown[16])) || !(unknown-#memory_int-unknown[25][0] == 44)) || !(unknown-#memory_int-unknown[21][0] == 79)) || !(110 == unknown-#memory_int-unknown[20][1])) || (((retValue_acc == waterLevel && \result == tmp___0) && methaneLevelCritical == tmp) && retValue_acc == \result)) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[26][4] == 0)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(unknown-#memory_int-unknown[18][0] == 79)) || !(unknown-#memory_int-unknown[27][2] == 0)) || !(#NULL == 0)) || !(unknown-#length-unknown[22] == 3)) || !(unknown-#memory_int-unknown[20][0] == 79)) || !(\valid[7] == 1)) || !(112 == unknown-#memory_int-unknown[19][4])) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(5 == unknown-#length-unknown[26])) || !(41 == unknown-#memory_int-unknown[22][0])) || !(\old(waterLevel) <= 2)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(unknown-#memory_int-unknown[26][3] == 84)) || !(unknown-#memory_int-unknown[22][1] == 32)) || !(44 == unknown-#memory_int-unknown[19][0])) || !(unknown-#length-unknown[21] == 4)) || !(\valid[17] == 1)) || !(\valid[9] == 1)) || !(unknown-#memory_int-unknown[25][5] == 58)) || !(unknown-#memory_int-unknown[22][2] == 0)) || !(head == 0)) || !(unknown-#memory_int-unknown[27][0] == 79)) || !(unknown-#memory_int-unknown[28][1] == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(77 == unknown-#memory_int-unknown[25][1])) || !(2 <= \old(waterLevel)))) && ((((((((((!(#NULL == 0) || (retValue_acc == \result && tmp == \result)) || !(1 == systemActive)) || !(head == 0)) || \old(waterLevel) < 2) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || !(head == 0)) || !(cleanupTimeShifts == 4)) [2022-11-03 02:47:07,548 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-03 02:47:07,548 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || waterLevel < 2) || (pumpRunning == 0 && tmp == 1))) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(\valid[23] == 1) || !(101 == unknown-#memory_int-unknown[25][2])) || !(unknown-#length-unknown[24] == 13)) || !(unknown-#memory_int-unknown[25][6] == 0)) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(79 == unknown-#memory_int-unknown[17][0])) || !(unknown-#memory_int-unknown[18][2] == 102)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\valid[26] == 1)) || !(102 == unknown-#memory_int-unknown[18][1])) || !(unknown-#length-unknown[27] == 3)) || !(82 == unknown-#memory_int-unknown[26][1])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(117 == unknown-#memory_int-unknown[19][2])) || !(31 == unknown-#length-unknown[2])) || !(unknown-#length-unknown[17] == 3)) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(58 == unknown-#memory_int-unknown[19][5])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(109 == unknown-#memory_int-unknown[19][3])) || !(4 == unknown-#length-unknown[18])) || !(unknown-#length-unknown[15] == 25)) || !(unknown-#memory_int-unknown[17][1] == 110)) || (((((retValue_acc == \result && retValue_acc == 0) && retValue_acc == \result) && tmp___0 == 1) && \result == tmp) && tmp == \result)) || !(116 == unknown-#memory_int-unknown[25][3])) || !(unknown-#memory_int-unknown[27][1] == 75)) || !(\valid[6] == 1)) || !(104 == unknown-#memory_int-unknown[25][4])) || !(67 == unknown-#memory_int-unknown[26][0])) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[19][6] == 0)) || !(unknown-#memory_int-unknown[26][2] == 73)) || !(unknown-#memory_int-unknown[20][2] == 0)) || !(\valid[3] == 1)) || !(41 == unknown-#memory_int-unknown[28][0])) || !(unknown-#memory_int-unknown[21][3] == 0)) || !(unknown-#length-unknown[19] == 7)) || !(2 == unknown-#length-unknown[23])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(3 == unknown-#length-unknown[20])) || !(\valid[16] == 1)) || !(\valid[28] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[21][1] == 102)) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[17][2] == 0)) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(102 == unknown-#memory_int-unknown[21][2])) || !(\valid[24] == 1)) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[23][0] == 10)) || !(unknown-#memory_int-unknown[19][1] == 80)) || !(unknown-#memory_int-unknown[23][1] == 0)) || !(unknown-#length-unknown[28] == 2)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(7 == unknown-#length-unknown[25])) || !(unknown-#memory_int-unknown[18][3] == 0)) || !(13 == unknown-#length-unknown[16])) || !(unknown-#memory_int-unknown[25][0] == 44)) || !(unknown-#memory_int-unknown[21][0] == 79)) || !(110 == unknown-#memory_int-unknown[20][1])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[26][4] == 0)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(waterLevel <= 2)) || !(unknown-#memory_int-unknown[18][0] == 79)) || !(unknown-#memory_int-unknown[27][2] == 0)) || !(#NULL == 0)) || !(unknown-#length-unknown[22] == 3)) || !(unknown-#memory_int-unknown[20][0] == 79)) || !(\valid[7] == 1)) || !(112 == unknown-#memory_int-unknown[19][4])) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || waterLevel < 2) || !(\valid[13] == 1)) || !(5 == unknown-#length-unknown[26])) || !(41 == unknown-#memory_int-unknown[22][0])) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(unknown-#memory_int-unknown[26][3] == 84)) || !(unknown-#memory_int-unknown[22][1] == 32)) || !(44 == unknown-#memory_int-unknown[19][0])) || !(unknown-#length-unknown[21] == 4)) || !(\valid[17] == 1)) || !(\valid[9] == 1)) || !(unknown-#memory_int-unknown[25][5] == 58)) || !(unknown-#memory_int-unknown[22][2] == 0)) || !(head == 0)) || !(unknown-#memory_int-unknown[27][0] == 79)) || !(unknown-#memory_int-unknown[28][1] == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(77 == unknown-#memory_int-unknown[25][1]))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(waterLevel == 1) || !(\valid[23] == 1)) || !(101 == unknown-#memory_int-unknown[25][2])) || !(unknown-#length-unknown[24] == 13)) || !(unknown-#memory_int-unknown[25][6] == 0)) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(79 == unknown-#memory_int-unknown[17][0])) || !(unknown-#memory_int-unknown[18][2] == 102)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\valid[26] == 1)) || !(102 == unknown-#memory_int-unknown[18][1])) || (((((retValue_acc == \result && retValue_acc == 1) && retValue_acc == \result) && tmp___0 == 0) && \result == tmp) && tmp == \result)) || !(unknown-#length-unknown[27] == 3)) || !(82 == unknown-#memory_int-unknown[26][1])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(117 == unknown-#memory_int-unknown[19][2])) || !(31 == unknown-#length-unknown[2])) || !(unknown-#length-unknown[17] == 3)) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(58 == unknown-#memory_int-unknown[19][5])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(109 == unknown-#memory_int-unknown[19][3])) || !(4 == unknown-#length-unknown[18])) || !(unknown-#length-unknown[15] == 25)) || !(unknown-#memory_int-unknown[17][1] == 110)) || !(116 == unknown-#memory_int-unknown[25][3])) || !(unknown-#memory_int-unknown[27][1] == 75)) || !(\valid[6] == 1)) || !(104 == unknown-#memory_int-unknown[25][4])) || !(67 == unknown-#memory_int-unknown[26][0])) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[19][6] == 0)) || !(unknown-#memory_int-unknown[26][2] == 73)) || !(unknown-#memory_int-unknown[20][2] == 0)) || !(\valid[3] == 1)) || !(41 == unknown-#memory_int-unknown[28][0])) || !(unknown-#memory_int-unknown[21][3] == 0)) || !(unknown-#length-unknown[19] == 7)) || !(2 == unknown-#length-unknown[23])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(3 == unknown-#length-unknown[20])) || !(\valid[16] == 1)) || !(\valid[28] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[21][1] == 102)) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[17][2] == 0)) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(102 == unknown-#memory_int-unknown[21][2])) || !(\valid[24] == 1)) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[23][0] == 10)) || !(unknown-#memory_int-unknown[19][1] == 80)) || !(unknown-#memory_int-unknown[23][1] == 0)) || !(unknown-#length-unknown[28] == 2)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(7 == unknown-#length-unknown[25])) || !(unknown-#memory_int-unknown[18][3] == 0)) || !(13 == unknown-#length-unknown[16])) || !(unknown-#memory_int-unknown[25][0] == 44)) || !(unknown-#memory_int-unknown[21][0] == 79)) || !(110 == unknown-#memory_int-unknown[20][1])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[26][4] == 0)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(unknown-#memory_int-unknown[18][0] == 79)) || !(unknown-#memory_int-unknown[27][2] == 0)) || !(#NULL == 0)) || !(unknown-#length-unknown[22] == 3)) || !(unknown-#memory_int-unknown[20][0] == 79)) || !(\valid[7] == 1)) || !(112 == unknown-#memory_int-unknown[19][4])) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(5 == unknown-#length-unknown[26])) || !(41 == unknown-#memory_int-unknown[22][0])) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(unknown-#memory_int-unknown[26][3] == 84)) || !(unknown-#memory_int-unknown[22][1] == 32)) || !(44 == unknown-#memory_int-unknown[19][0])) || !(unknown-#length-unknown[21] == 4)) || !(\valid[17] == 1)) || !(\valid[9] == 1)) || !(unknown-#memory_int-unknown[25][5] == 58)) || !(unknown-#memory_int-unknown[22][2] == 0)) || !(head == 0)) || !(unknown-#memory_int-unknown[27][0] == 79)) || !(unknown-#memory_int-unknown[28][1] == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(77 == unknown-#memory_int-unknown[25][1]))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && (!(waterLevel == 1) || tmp == 0))) || !(waterLevel <= 1)) [2022-11-03 02:47:07,571 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/witness.graphml [2022-11-03 02:47:07,571 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-03 02:47:07,572 INFO L158 Benchmark]: Toolchain (without parser) took 206227.83ms. Allocated memory was 115.3MB in the beginning and 524.3MB in the end (delta: 408.9MB). Free memory was 78.1MB in the beginning and 308.3MB in the end (delta: -230.2MB). Peak memory consumption was 178.5MB. Max. memory is 16.1GB. [2022-11-03 02:47:07,572 INFO L158 Benchmark]: CDTParser took 0.35ms. Allocated memory is still 115.3MB. Free memory is still 95.1MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 02:47:07,573 INFO L158 Benchmark]: CACSL2BoogieTranslator took 598.28ms. Allocated memory is still 115.3MB. Free memory was 77.9MB in the beginning and 84.4MB in the end (delta: -6.5MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-11-03 02:47:07,573 INFO L158 Benchmark]: Boogie Procedure Inliner took 91.26ms. Allocated memory is still 115.3MB. Free memory was 84.4MB in the beginning and 81.8MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 02:47:07,573 INFO L158 Benchmark]: Boogie Preprocessor took 40.92ms. Allocated memory is still 115.3MB. Free memory was 81.8MB in the beginning and 80.2MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 02:47:07,574 INFO L158 Benchmark]: RCFGBuilder took 884.32ms. Allocated memory is still 115.3MB. Free memory was 80.2MB in the beginning and 51.4MB in the end (delta: 28.9MB). Peak memory consumption was 29.4MB. Max. memory is 16.1GB. [2022-11-03 02:47:07,574 INFO L158 Benchmark]: TraceAbstraction took 204523.48ms. Allocated memory was 115.3MB in the beginning and 524.3MB in the end (delta: 408.9MB). Free memory was 50.8MB in the beginning and 314.6MB in the end (delta: -263.8MB). Peak memory consumption was 285.8MB. Max. memory is 16.1GB. [2022-11-03 02:47:07,574 INFO L158 Benchmark]: Witness Printer took 80.16ms. Allocated memory is still 524.3MB. Free memory was 314.6MB in the beginning and 308.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-03 02:47:07,576 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.35ms. Allocated memory is still 115.3MB. Free memory is still 95.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 598.28ms. Allocated memory is still 115.3MB. Free memory was 77.9MB in the beginning and 84.4MB in the end (delta: -6.5MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 91.26ms. Allocated memory is still 115.3MB. Free memory was 84.4MB in the beginning and 81.8MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 40.92ms. Allocated memory is still 115.3MB. Free memory was 81.8MB in the beginning and 80.2MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 884.32ms. Allocated memory is still 115.3MB. Free memory was 80.2MB in the beginning and 51.4MB in the end (delta: 28.9MB). Peak memory consumption was 29.4MB. Max. memory is 16.1GB. * TraceAbstraction took 204523.48ms. Allocated memory was 115.3MB in the beginning and 524.3MB in the end (delta: 408.9MB). Free memory was 50.8MB in the beginning and 314.6MB in the end (delta: -263.8MB). Peak memory consumption was 285.8MB. Max. memory is 16.1GB. * Witness Printer took 80.16ms. Allocated memory is still 524.3MB. Free memory was 314.6MB in the beginning and 308.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 870]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 58 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 204.3s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 44.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 62.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3063 SdHoareTripleChecker+Valid, 9.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3038 mSDsluCounter, 3390 SdHoareTripleChecker+Invalid, 7.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3300 mSDsCounter, 1622 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 5583 IncrementalHoareTripleChecker+Invalid, 7205 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1622 mSolverCounterUnsat, 832 mSDtfsCounter, 5583 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 888 GetRequests, 571 SyntacticMatches, 18 SemanticMatches, 299 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8126 ImplicationChecksByTransitivity, 100.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1140occurred in iteration=12, InterpolantAutomatonStates: 198, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.8s AutomataMinimizationTime, 13 MinimizatonAttempts, 352 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 35 LocationsWithAnnotation, 2005 PreInvPairs, 2378 NumberOfFragments, 7698 HoareAnnotationTreeSize, 2005 FomulaSimplifications, 9713 FormulaSimplificationTreeSizeReduction, 6.9s HoareSimplificationTime, 35 FomulaSimplificationsInter, 386175 FormulaSimplificationTreeSizeReductionInter, 55.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 6.9s InterpolantComputationTime, 814 NumberOfCodeBlocks, 814 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 994 ConstructedInterpolants, 0 QuantifiedInterpolants, 3632 SizeOfPredicates, 36 NumberOfNonLiveVariables, 1749 ConjunctsInSsa, 108 ConjunctsInUnsatCore, 20 InterpolantComputations, 10 PerfectInterpolantSequences, 300/448 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 16.1s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 10, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 91, DAG_INTERPRETER_EARLY_EXITS: 8, TOOLS_POST_APPLICATIONS: 112, TOOLS_POST_TIME: 4.8s, TOOLS_POST_CALL_APPLICATIONS: 49, TOOLS_POST_CALL_TIME: 6.1s, TOOLS_POST_RETURN_APPLICATIONS: 40, TOOLS_POST_RETURN_TIME: 3.5s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 199, TOOLS_QUANTIFIERELIM_TIME: 14.3s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.9s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 259, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 37, DOMAIN_JOIN_TIME: 1.0s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 1, DOMAIN_WIDEN_TIME: 0.0s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 3, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 91, DOMAIN_ISBOTTOM_TIME: 0.4s, LOOP_SUMMARIZER_APPLICATIONS: 2, LOOP_SUMMARIZER_CACHE_MISSES: 2, LOOP_SUMMARIZER_OVERALL_TIME: 6.6s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 6.6s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 3, CALL_SUMMARIZER_APPLICATIONS: 40, CALL_SUMMARIZER_CACHE_MISSES: 8, CALL_SUMMARIZER_OVERALL_TIME: 0.2s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.2s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 1335, DAG_COMPRESSION_RETAINED_NODES: 236, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 875]: Loop Invariant Derived loop invariant: (((((((((((((!(methaneLevelCritical == 0) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && !(tmp == 0)) || !(1 == systemActive)) || ((tmp == methaneLevelCritical && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(\valid[23] == 1) || !(101 == unknown-#memory_int-unknown[25][2])) || !(unknown-#length-unknown[24] == 13)) || !(unknown-#memory_int-unknown[25][6] == 0)) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(79 == unknown-#memory_int-unknown[17][0])) || !(unknown-#memory_int-unknown[18][2] == 102)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\valid[26] == 1)) || !(102 == unknown-#memory_int-unknown[18][1])) || !(unknown-#length-unknown[27] == 3)) || !(82 == unknown-#memory_int-unknown[26][1])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(117 == unknown-#memory_int-unknown[19][2])) || !(31 == unknown-#length-unknown[2])) || !(unknown-#length-unknown[17] == 3)) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(58 == unknown-#memory_int-unknown[19][5])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(109 == unknown-#memory_int-unknown[19][3])) || !(4 == unknown-#length-unknown[18])) || !(unknown-#length-unknown[15] == 25)) || !(unknown-#memory_int-unknown[17][1] == 110)) || !(116 == unknown-#memory_int-unknown[25][3])) || !(unknown-#memory_int-unknown[27][1] == 75)) || !(\valid[6] == 1)) || !(104 == unknown-#memory_int-unknown[25][4])) || !(67 == unknown-#memory_int-unknown[26][0])) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[19][6] == 0)) || !(unknown-#memory_int-unknown[26][2] == 73)) || !(unknown-#memory_int-unknown[20][2] == 0)) || !(\valid[3] == 1)) || !(41 == unknown-#memory_int-unknown[28][0])) || !(unknown-#memory_int-unknown[21][3] == 0)) || !(unknown-#length-unknown[19] == 7)) || !(2 == unknown-#length-unknown[23])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(3 == unknown-#length-unknown[20])) || !(\valid[16] == 1)) || !(\valid[28] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[21][1] == 102)) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[17][2] == 0)) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(102 == unknown-#memory_int-unknown[21][2])) || !(\valid[24] == 1)) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[23][0] == 10)) || !(unknown-#memory_int-unknown[19][1] == 80)) || !(unknown-#memory_int-unknown[23][1] == 0)) || !(unknown-#length-unknown[28] == 2)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(7 == unknown-#length-unknown[25])) || !(unknown-#memory_int-unknown[18][3] == 0)) || !(13 == unknown-#length-unknown[16])) || !(unknown-#memory_int-unknown[25][0] == 44)) || !(unknown-#memory_int-unknown[21][0] == 79)) || !(110 == unknown-#memory_int-unknown[20][1])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[26][4] == 0)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(unknown-#memory_int-unknown[18][0] == 79)) || !(unknown-#memory_int-unknown[27][2] == 0)) || !(#NULL == 0)) || !(unknown-#length-unknown[22] == 3)) || !(unknown-#memory_int-unknown[20][0] == 79)) || !(\valid[7] == 1)) || !(112 == unknown-#memory_int-unknown[19][4])) || !(\valid[10] == 1)) || ((((((\result == retValue_acc && retValue_acc == waterLevel) && \result == tmp___0) && pumpRunning == retValue_acc) && \result == tmp___1) && methaneLevelCritical == tmp) && retValue_acc == \result)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(5 == unknown-#length-unknown[26])) || !(41 == unknown-#memory_int-unknown[22][0])) || !(\old(waterLevel) <= 2)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(unknown-#memory_int-unknown[26][3] == 84)) || !(unknown-#memory_int-unknown[22][1] == 32)) || !(44 == unknown-#memory_int-unknown[19][0])) || !(unknown-#length-unknown[21] == 4)) || !(\valid[17] == 1)) || !(\valid[9] == 1)) || !(unknown-#memory_int-unknown[25][5] == 58)) || !(unknown-#memory_int-unknown[22][2] == 0)) || !(head == 0)) || !(unknown-#memory_int-unknown[27][0] == 79)) || !(unknown-#memory_int-unknown[28][1] == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(77 == unknown-#memory_int-unknown[25][1])) || !(2 <= \old(waterLevel)))) && (((((((((((!(#NULL == 0) || ((((((((((((1 <= systemActive && #NULL <= 0) && 0 <= head) && tmp == methaneLevelCritical) && 0 <= methaneLevelCritical) && head <= 0) && retValue_acc <= 0) && 0 <= #NULL) && 0 <= unknown-#StackHeapBarrier-unknown) && retValue_acc == \result) && tmp == \result) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel + 1) && head == 0) && 0 < \old(waterLevel)) && cleanupTimeShifts == 4) && #NULL == 0) || (((((pumpRunning == \old(pumpRunning) && head == 0) && \old(waterLevel) <= 0) && \old(waterLevel) == waterLevel) && cleanupTimeShifts == 4) && #NULL == 0))) && systemActive <= 1)) || !(1 == systemActive)) || !(head == 0)) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((!(waterLevel == 1) || !(\old(waterLevel) <= 1)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((pumpRunning == 0 && (\old(pumpRunning) == 0 || \old(waterLevel) <= 0)) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(tmp == 0))) && (((((((((((!(\old(waterLevel) <= 1) || !(#NULL == 0)) || ((((((((((((1 <= systemActive && #NULL <= 0) && 0 <= head) && tmp == methaneLevelCritical) && 0 <= methaneLevelCritical) && head <= 0) && retValue_acc <= 0) && 0 <= #NULL) && 0 <= unknown-#StackHeapBarrier-unknown) && retValue_acc == \result) && tmp == \result) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel + 1) && head == 0) && 0 < \old(waterLevel)) && cleanupTimeShifts == 4) && #NULL == 0) || (((((pumpRunning == \old(pumpRunning) && head == 0) && \old(waterLevel) <= 0) && \old(waterLevel) == waterLevel) && cleanupTimeShifts == 4) && #NULL == 0))) && systemActive <= 1)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(waterLevel) + 2147483648)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && 1 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == 0 && (\old(pumpRunning) == 0 || \old(waterLevel) <= 0)) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 635]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((aux-isMethaneLevelCritical()-aux == methaneLevelCritical && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 716]: Loop Invariant Derived loop invariant: (((1 == systemActive && splverifierCounter == 0) && waterLevel <= 2) && pumpRunning == 1) || (((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 140]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 706]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 715]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 571]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || waterLevel < 2) || (pumpRunning == 0 && tmp == 1))) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(\valid[23] == 1) || !(101 == unknown-#memory_int-unknown[25][2])) || !(unknown-#length-unknown[24] == 13)) || !(unknown-#memory_int-unknown[25][6] == 0)) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(79 == unknown-#memory_int-unknown[17][0])) || !(unknown-#memory_int-unknown[18][2] == 102)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\valid[26] == 1)) || !(102 == unknown-#memory_int-unknown[18][1])) || !(unknown-#length-unknown[27] == 3)) || !(82 == unknown-#memory_int-unknown[26][1])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(117 == unknown-#memory_int-unknown[19][2])) || !(31 == unknown-#length-unknown[2])) || !(unknown-#length-unknown[17] == 3)) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(58 == unknown-#memory_int-unknown[19][5])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(109 == unknown-#memory_int-unknown[19][3])) || !(4 == unknown-#length-unknown[18])) || !(unknown-#length-unknown[15] == 25)) || !(unknown-#memory_int-unknown[17][1] == 110)) || (((((retValue_acc == \result && retValue_acc == 0) && retValue_acc == \result) && tmp___0 == 1) && \result == tmp) && tmp == \result)) || !(116 == unknown-#memory_int-unknown[25][3])) || !(unknown-#memory_int-unknown[27][1] == 75)) || !(\valid[6] == 1)) || !(104 == unknown-#memory_int-unknown[25][4])) || !(67 == unknown-#memory_int-unknown[26][0])) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[19][6] == 0)) || !(unknown-#memory_int-unknown[26][2] == 73)) || !(unknown-#memory_int-unknown[20][2] == 0)) || !(\valid[3] == 1)) || !(41 == unknown-#memory_int-unknown[28][0])) || !(unknown-#memory_int-unknown[21][3] == 0)) || !(unknown-#length-unknown[19] == 7)) || !(2 == unknown-#length-unknown[23])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(3 == unknown-#length-unknown[20])) || !(\valid[16] == 1)) || !(\valid[28] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[21][1] == 102)) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[17][2] == 0)) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(102 == unknown-#memory_int-unknown[21][2])) || !(\valid[24] == 1)) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[23][0] == 10)) || !(unknown-#memory_int-unknown[19][1] == 80)) || !(unknown-#memory_int-unknown[23][1] == 0)) || !(unknown-#length-unknown[28] == 2)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(7 == unknown-#length-unknown[25])) || !(unknown-#memory_int-unknown[18][3] == 0)) || !(13 == unknown-#length-unknown[16])) || !(unknown-#memory_int-unknown[25][0] == 44)) || !(unknown-#memory_int-unknown[21][0] == 79)) || !(110 == unknown-#memory_int-unknown[20][1])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[26][4] == 0)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(waterLevel <= 2)) || !(unknown-#memory_int-unknown[18][0] == 79)) || !(unknown-#memory_int-unknown[27][2] == 0)) || !(#NULL == 0)) || !(unknown-#length-unknown[22] == 3)) || !(unknown-#memory_int-unknown[20][0] == 79)) || !(\valid[7] == 1)) || !(112 == unknown-#memory_int-unknown[19][4])) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || waterLevel < 2) || !(\valid[13] == 1)) || !(5 == unknown-#length-unknown[26])) || !(41 == unknown-#memory_int-unknown[22][0])) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(unknown-#memory_int-unknown[26][3] == 84)) || !(unknown-#memory_int-unknown[22][1] == 32)) || !(44 == unknown-#memory_int-unknown[19][0])) || !(unknown-#length-unknown[21] == 4)) || !(\valid[17] == 1)) || !(\valid[9] == 1)) || !(unknown-#memory_int-unknown[25][5] == 58)) || !(unknown-#memory_int-unknown[22][2] == 0)) || !(head == 0)) || !(unknown-#memory_int-unknown[27][0] == 79)) || !(unknown-#memory_int-unknown[28][1] == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(77 == unknown-#memory_int-unknown[25][1]))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(waterLevel == 1) || !(\valid[23] == 1)) || !(101 == unknown-#memory_int-unknown[25][2])) || !(unknown-#length-unknown[24] == 13)) || !(unknown-#memory_int-unknown[25][6] == 0)) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(79 == unknown-#memory_int-unknown[17][0])) || !(unknown-#memory_int-unknown[18][2] == 102)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\valid[26] == 1)) || !(102 == unknown-#memory_int-unknown[18][1])) || (((((retValue_acc == \result && retValue_acc == 1) && retValue_acc == \result) && tmp___0 == 0) && \result == tmp) && tmp == \result)) || !(unknown-#length-unknown[27] == 3)) || !(82 == unknown-#memory_int-unknown[26][1])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(117 == unknown-#memory_int-unknown[19][2])) || !(31 == unknown-#length-unknown[2])) || !(unknown-#length-unknown[17] == 3)) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(58 == unknown-#memory_int-unknown[19][5])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(109 == unknown-#memory_int-unknown[19][3])) || !(4 == unknown-#length-unknown[18])) || !(unknown-#length-unknown[15] == 25)) || !(unknown-#memory_int-unknown[17][1] == 110)) || !(116 == unknown-#memory_int-unknown[25][3])) || !(unknown-#memory_int-unknown[27][1] == 75)) || !(\valid[6] == 1)) || !(104 == unknown-#memory_int-unknown[25][4])) || !(67 == unknown-#memory_int-unknown[26][0])) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[19][6] == 0)) || !(unknown-#memory_int-unknown[26][2] == 73)) || !(unknown-#memory_int-unknown[20][2] == 0)) || !(\valid[3] == 1)) || !(41 == unknown-#memory_int-unknown[28][0])) || !(unknown-#memory_int-unknown[21][3] == 0)) || !(unknown-#length-unknown[19] == 7)) || !(2 == unknown-#length-unknown[23])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(3 == unknown-#length-unknown[20])) || !(\valid[16] == 1)) || !(\valid[28] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[21][1] == 102)) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[17][2] == 0)) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(102 == unknown-#memory_int-unknown[21][2])) || !(\valid[24] == 1)) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[23][0] == 10)) || !(unknown-#memory_int-unknown[19][1] == 80)) || !(unknown-#memory_int-unknown[23][1] == 0)) || !(unknown-#length-unknown[28] == 2)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(7 == unknown-#length-unknown[25])) || !(unknown-#memory_int-unknown[18][3] == 0)) || !(13 == unknown-#length-unknown[16])) || !(unknown-#memory_int-unknown[25][0] == 44)) || !(unknown-#memory_int-unknown[21][0] == 79)) || !(110 == unknown-#memory_int-unknown[20][1])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[26][4] == 0)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(unknown-#memory_int-unknown[18][0] == 79)) || !(unknown-#memory_int-unknown[27][2] == 0)) || !(#NULL == 0)) || !(unknown-#length-unknown[22] == 3)) || !(unknown-#memory_int-unknown[20][0] == 79)) || !(\valid[7] == 1)) || !(112 == unknown-#memory_int-unknown[19][4])) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(5 == unknown-#length-unknown[26])) || !(41 == unknown-#memory_int-unknown[22][0])) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(unknown-#memory_int-unknown[26][3] == 84)) || !(unknown-#memory_int-unknown[22][1] == 32)) || !(44 == unknown-#memory_int-unknown[19][0])) || !(unknown-#length-unknown[21] == 4)) || !(\valid[17] == 1)) || !(\valid[9] == 1)) || !(unknown-#memory_int-unknown[25][5] == 58)) || !(unknown-#memory_int-unknown[22][2] == 0)) || !(head == 0)) || !(unknown-#memory_int-unknown[27][0] == 79)) || !(unknown-#memory_int-unknown[28][1] == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(77 == unknown-#memory_int-unknown[25][1]))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && (!(waterLevel == 1) || tmp == 0))) || !(waterLevel <= 1)) - InvariantResult [Line: 140]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && unknown-#memory_int-unknown[20][0] == 79) && 9 == unknown-#length-unknown[5]) && unknown-#memory_int-unknown[26][3] == 84) && unknown-#length-unknown[9] == 21) && unknown-#memory_int-unknown[17][1] == 110) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && unknown-#length-unknown[21] == 4) && unknown-#memory_int-unknown[17][2] == 0) && 82 == unknown-#memory_int-unknown[26][1]) && pumpRunning == 0) && \valid[26] == 1) && 67 == unknown-#memory_int-unknown[26][0]) && unknown-#memory_int-unknown[27][2] == 0) && \result == tmp) && unknown-#memory_int-unknown[19][1] == 80) && unknown-#memory_int-unknown[20][2] == 0) && 3 == unknown-#length-unknown[20]) && 41 == unknown-#memory_int-unknown[22][0]) && 1 == retValue_acc) && unknown-#memory_int-unknown[27][1] == 75) && \valid[9] == 1) && 13 == unknown-#length-unknown[16]) && unknown-#length-unknown[12] == 25) && unknown-#length-unknown[28] == 2) && unknown-#length-unknown[19] == 7) && unknown-#memory_int-unknown[23][0] == 10) && \valid[11] == 1) && \valid[27] == 1) && methaneLevelCritical == 0) && 58 == unknown-#memory_int-unknown[19][5]) && 110 == unknown-#memory_int-unknown[20][1]) && 30 == unknown-#length-unknown[4]) && unknown-#length-unknown[22] == 3) && 31 == unknown-#length-unknown[2]) && head == 0) && unknown-#length-unknown[24] == 13) && unknown-#length-unknown[27] == 3) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && unknown-#memory_int-unknown[25][5] == 58) && \valid[3] == 1) && \valid[7] == 1) && 5 == unknown-#length-unknown[26]) && 77 == unknown-#memory_int-unknown[25][1]) && \result == retValue_acc) && 2 == unknown-#length-unknown[23]) && \valid[18] == 1) && \valid[22] == 1) && 30 == unknown-#length-unknown[13]) && unknown-#memory_int-unknown[18][3] == 0) && 1 == systemActive) && unknown-#memory_int-unknown[25][6] == 0) && \valid[24] == 1) && 30 == unknown-#length-unknown[10]) && unknown-#length-unknown[17] == 3) && unknown-#memory_int-unknown[26][4] == 0) && \valid[12] == 1) && \valid[28] == 1) && unknown-#memory_int-unknown[28][1] == 0) && 102 == unknown-#memory_int-unknown[18][1]) && \valid[4] == 1) && 102 == unknown-#memory_int-unknown[21][2]) && unknown-#memory_int-unknown[22][1] == 32) && 112 == unknown-#memory_int-unknown[19][4]) && unknown-#memory_int-unknown[18][2] == 102) && unknown-#memory_int-unknown[22][2] == 0) && unknown-#memory_int-unknown[19][6] == 0) && \valid[1] == 1) && \valid[20] == 1) && unknown-#length-unknown[6] == 21) && \valid[21] == 1) && \valid[14] == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && \valid[25] == 1) && 4 == unknown-#length-unknown[18]) && head == 0) && 44 == unknown-#memory_int-unknown[19][0]) && 101 == unknown-#memory_int-unknown[25][2]) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[23][1] == 0) && unknown-#memory_int-unknown[25][0] == 44) && unknown-#memory_int-unknown[1][0] == 48) && \valid[23] == 1) && 41 == unknown-#memory_int-unknown[28][0]) && unknown-#memory_int-unknown[21][3] == 0) && 116 == unknown-#memory_int-unknown[25][3]) && 7 == unknown-#length-unknown[25]) && \valid[19] == 1) && \valid[16] == 1) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && unknown-#memory_int-unknown[18][0] == 79) && unknown-#memory_int-unknown[21][1] == 102) && 104 == unknown-#memory_int-unknown[25][4]) && 79 == unknown-#memory_int-unknown[17][0]) && unknown-#memory_int-unknown[21][0] == 79) && \valid[17] == 1) && \valid[10] == 1) && unknown-#memory_int-unknown[27][0] == 79) && \valid[8] == 1) && 117 == unknown-#memory_int-unknown[19][2]) && \valid[13] == 1) && unknown-#memory_int-unknown[26][2] == 73) && 0 < unknown-#StackHeapBarrier-unknown) && 109 == unknown-#memory_int-unknown[19][3]) && cleanupTimeShifts == 4) && #NULL == 0 - InvariantResult [Line: 531]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) - InvariantResult [Line: 589]: Loop Invariant Derived loop invariant: ((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || (((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))))) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || ((tmp == methaneLevelCritical && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || (((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))))) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || (!(waterLevel == 1) && pumpRunning == 1))) && ((((!(\old(pumpRunning) == 0) || (waterLevel <= 1 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((((((((((!(\old(waterLevel) <= 1) || !(#NULL == 0)) || (retValue_acc == \result && tmp == \result)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(waterLevel) + 2147483648)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((((((((!(#NULL == 0) || (retValue_acc == \result && tmp == \result)) || !(1 == systemActive)) || !(head == 0)) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || !(head == 0)) || !(cleanupTimeShifts == 4)) - InvariantResult [Line: 567]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) || pumpRunning == 1) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 870]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (((tmp___0 <= 1 && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == 1)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((!(waterLevel == 1) && tmp___0 <= 1) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || ((pumpRunning == 0 && tmp___0 <= 1) && \old(waterLevel) == waterLevel))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || methaneLevelCritical == 0) || !(1 == systemActive))) && ((((((((((!(\old(waterLevel) <= 1) || !(#NULL == 0)) || (retValue_acc == \result && tmp == \result)) || !(1 == systemActive)) || !(head == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(waterLevel) + 2147483648)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(\valid[23] == 1) || !(101 == unknown-#memory_int-unknown[25][2])) || !(unknown-#length-unknown[24] == 13)) || !(unknown-#memory_int-unknown[25][6] == 0)) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(79 == unknown-#memory_int-unknown[17][0])) || !(unknown-#memory_int-unknown[18][2] == 102)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\valid[26] == 1)) || !(102 == unknown-#memory_int-unknown[18][1])) || !(unknown-#length-unknown[27] == 3)) || !(82 == unknown-#memory_int-unknown[26][1])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(117 == unknown-#memory_int-unknown[19][2])) || !(31 == unknown-#length-unknown[2])) || !(unknown-#length-unknown[17] == 3)) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(58 == unknown-#memory_int-unknown[19][5])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(109 == unknown-#memory_int-unknown[19][3])) || !(4 == unknown-#length-unknown[18])) || !(unknown-#length-unknown[15] == 25)) || !(unknown-#memory_int-unknown[17][1] == 110)) || !(116 == unknown-#memory_int-unknown[25][3])) || !(unknown-#memory_int-unknown[27][1] == 75)) || !(\valid[6] == 1)) || !(104 == unknown-#memory_int-unknown[25][4])) || !(67 == unknown-#memory_int-unknown[26][0])) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[19][6] == 0)) || !(unknown-#memory_int-unknown[26][2] == 73)) || !(unknown-#memory_int-unknown[20][2] == 0)) || !(\valid[3] == 1)) || !(41 == unknown-#memory_int-unknown[28][0])) || !(unknown-#memory_int-unknown[21][3] == 0)) || !(unknown-#length-unknown[19] == 7)) || !(2 == unknown-#length-unknown[23])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(3 == unknown-#length-unknown[20])) || !(\valid[16] == 1)) || !(\valid[28] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[21][1] == 102)) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[17][2] == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(102 == unknown-#memory_int-unknown[21][2])) || !(\valid[24] == 1)) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[23][0] == 10)) || !(unknown-#memory_int-unknown[19][1] == 80)) || !(unknown-#memory_int-unknown[23][1] == 0)) || !(unknown-#length-unknown[28] == 2)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(7 == unknown-#length-unknown[25])) || !(unknown-#memory_int-unknown[18][3] == 0)) || !(13 == unknown-#length-unknown[16])) || !(unknown-#memory_int-unknown[25][0] == 44)) || !(unknown-#memory_int-unknown[21][0] == 79)) || !(110 == unknown-#memory_int-unknown[20][1])) || (((retValue_acc == waterLevel && \result == tmp___0) && methaneLevelCritical == tmp) && retValue_acc == \result)) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[26][4] == 0)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(unknown-#memory_int-unknown[18][0] == 79)) || !(unknown-#memory_int-unknown[27][2] == 0)) || !(#NULL == 0)) || !(unknown-#length-unknown[22] == 3)) || !(unknown-#memory_int-unknown[20][0] == 79)) || !(\valid[7] == 1)) || !(112 == unknown-#memory_int-unknown[19][4])) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(5 == unknown-#length-unknown[26])) || !(41 == unknown-#memory_int-unknown[22][0])) || !(\old(waterLevel) <= 2)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(unknown-#memory_int-unknown[26][3] == 84)) || !(unknown-#memory_int-unknown[22][1] == 32)) || !(44 == unknown-#memory_int-unknown[19][0])) || !(unknown-#length-unknown[21] == 4)) || !(\valid[17] == 1)) || !(\valid[9] == 1)) || !(unknown-#memory_int-unknown[25][5] == 58)) || !(unknown-#memory_int-unknown[22][2] == 0)) || !(head == 0)) || !(unknown-#memory_int-unknown[27][0] == 79)) || !(unknown-#memory_int-unknown[28][1] == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(77 == unknown-#memory_int-unknown[25][1])) || !(2 <= \old(waterLevel)))) && ((((((((((!(#NULL == 0) || (retValue_acc == \result && tmp == \result)) || !(1 == systemActive)) || !(head == 0)) || \old(waterLevel) < 2) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || !(head == 0)) || !(cleanupTimeShifts == 4)) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 884]: Loop Invariant Derived loop invariant: ((((((((((((((!(methaneLevelCritical == 0) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && !(tmp == 0)) || !(1 == systemActive)) || ((tmp == methaneLevelCritical && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(\valid[23] == 1) || !(101 == unknown-#memory_int-unknown[25][2])) || !(unknown-#length-unknown[24] == 13)) || !(unknown-#memory_int-unknown[25][6] == 0)) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(79 == unknown-#memory_int-unknown[17][0])) || !(unknown-#memory_int-unknown[18][2] == 102)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\valid[26] == 1)) || !(102 == unknown-#memory_int-unknown[18][1])) || !(unknown-#length-unknown[27] == 3)) || !(82 == unknown-#memory_int-unknown[26][1])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(117 == unknown-#memory_int-unknown[19][2])) || !(31 == unknown-#length-unknown[2])) || !(unknown-#length-unknown[17] == 3)) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(58 == unknown-#memory_int-unknown[19][5])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(109 == unknown-#memory_int-unknown[19][3])) || !(4 == unknown-#length-unknown[18])) || !(unknown-#length-unknown[15] == 25)) || !(unknown-#memory_int-unknown[17][1] == 110)) || !(116 == unknown-#memory_int-unknown[25][3])) || !(unknown-#memory_int-unknown[27][1] == 75)) || !(\valid[6] == 1)) || !(104 == unknown-#memory_int-unknown[25][4])) || !(67 == unknown-#memory_int-unknown[26][0])) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[19][6] == 0)) || !(unknown-#memory_int-unknown[26][2] == 73)) || !(unknown-#memory_int-unknown[20][2] == 0)) || !(\valid[3] == 1)) || !(41 == unknown-#memory_int-unknown[28][0])) || !(unknown-#memory_int-unknown[21][3] == 0)) || !(unknown-#length-unknown[19] == 7)) || !(2 == unknown-#length-unknown[23])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(3 == unknown-#length-unknown[20])) || !(\valid[16] == 1)) || !(\valid[28] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[21][1] == 102)) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[17][2] == 0)) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(102 == unknown-#memory_int-unknown[21][2])) || !(\valid[24] == 1)) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[23][0] == 10)) || !(unknown-#memory_int-unknown[19][1] == 80)) || !(unknown-#memory_int-unknown[23][1] == 0)) || !(unknown-#length-unknown[28] == 2)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(7 == unknown-#length-unknown[25])) || !(unknown-#memory_int-unknown[18][3] == 0)) || !(13 == unknown-#length-unknown[16])) || !(unknown-#memory_int-unknown[25][0] == 44)) || !(unknown-#memory_int-unknown[21][0] == 79)) || !(110 == unknown-#memory_int-unknown[20][1])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[26][4] == 0)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(unknown-#memory_int-unknown[18][0] == 79)) || !(unknown-#memory_int-unknown[27][2] == 0)) || !(#NULL == 0)) || !(unknown-#length-unknown[22] == 3)) || !(unknown-#memory_int-unknown[20][0] == 79)) || !(\valid[7] == 1)) || !(112 == unknown-#memory_int-unknown[19][4])) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(5 == unknown-#length-unknown[26])) || !(41 == unknown-#memory_int-unknown[22][0])) || !(\old(waterLevel) <= 2)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(unknown-#memory_int-unknown[26][3] == 84)) || !(unknown-#memory_int-unknown[22][1] == 32)) || !(44 == unknown-#memory_int-unknown[19][0])) || methaneLevelCritical == tmp) || !(unknown-#length-unknown[21] == 4)) || !(\valid[17] == 1)) || !(\valid[9] == 1)) || !(unknown-#memory_int-unknown[25][5] == 58)) || !(unknown-#memory_int-unknown[22][2] == 0)) || !(head == 0)) || !(unknown-#memory_int-unknown[27][0] == 79)) || !(unknown-#memory_int-unknown[28][1] == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(77 == unknown-#memory_int-unknown[25][1])) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || (!(waterLevel == 1) && pumpRunning == 1))) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || !(tmp == 0))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(tmp == 0))) && ((((!(\old(pumpRunning) == 0) || (waterLevel <= 1 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((((((((((!(\old(waterLevel) <= 1) || !(#NULL == 0)) || (retValue_acc == \result && tmp == \result)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(waterLevel) + 2147483648)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((((((((!(#NULL == 0) || (retValue_acc == \result && tmp == \result)) || !(1 == systemActive)) || !(head == 0)) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((pumpRunning == 0 || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 597]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || ((tmp == methaneLevelCritical && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && (((((((((((!(\old(waterLevel) <= 1) || !(#NULL == 0)) || (retValue_acc == \result && tmp == \result)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(0 <= \old(waterLevel) + 2147483648)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((((((((!(#NULL == 0) || (retValue_acc == \result && tmp == \result)) || !(1 == systemActive)) || !(head == 0)) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) RESULT: Ultimate proved your program to be correct! [2022-11-03 02:47:07,665 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6b38e5ba-d653-4b99-844c-e8c50d7ab4db/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE