./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4583285deb29d8014ded34089a46614a743cea13eee9bbb990cdfd770bfce36e --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-19 07:40:49,026 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-19 07:40:49,028 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-19 07:40:49,052 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-19 07:40:49,052 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-19 07:40:49,054 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-19 07:40:49,055 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-19 07:40:49,057 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-19 07:40:49,059 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-19 07:40:49,060 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-19 07:40:49,061 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-19 07:40:49,062 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-19 07:40:49,062 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-19 07:40:49,063 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-19 07:40:49,064 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-19 07:40:49,066 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-19 07:40:49,067 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-19 07:40:49,068 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-19 07:40:49,069 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-19 07:40:49,071 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-19 07:40:49,073 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-19 07:40:49,074 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-19 07:40:49,075 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-19 07:40:49,076 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-19 07:40:49,080 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-19 07:40:49,081 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-19 07:40:49,081 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-19 07:40:49,082 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-19 07:40:49,082 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-19 07:40:49,084 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-19 07:40:49,084 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-19 07:40:49,085 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-19 07:40:49,086 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-19 07:40:49,087 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-19 07:40:49,088 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-19 07:40:49,088 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-19 07:40:49,089 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-19 07:40:49,089 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-19 07:40:49,090 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-19 07:40:49,091 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-19 07:40:49,091 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-19 07:40:49,092 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-19 07:40:49,114 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-19 07:40:49,115 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-19 07:40:49,115 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-19 07:40:49,115 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-19 07:40:49,116 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-19 07:40:49,116 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-19 07:40:49,117 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-19 07:40:49,117 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-19 07:40:49,117 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-19 07:40:49,118 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-19 07:40:49,118 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-19 07:40:49,118 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-19 07:40:49,119 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-19 07:40:49,119 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-19 07:40:49,119 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-19 07:40:49,120 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-19 07:40:49,120 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-19 07:40:49,120 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-19 07:40:49,121 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-19 07:40:49,121 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-19 07:40:49,122 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-19 07:40:49,122 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-19 07:40:49,122 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-19 07:40:49,122 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-19 07:40:49,123 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-19 07:40:49,123 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-19 07:40:49,123 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-19 07:40:49,124 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-19 07:40:49,124 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-19 07:40:49,124 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-19 07:40:49,125 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-19 07:40:49,125 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-19 07:40:49,125 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 07:40:49,125 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-19 07:40:49,126 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-19 07:40:49,126 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-19 07:40:49,126 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-19 07:40:49,127 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-19 07:40:49,127 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-19 07:40:49,127 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-19 07:40:49,127 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-19 07:40:49,128 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4583285deb29d8014ded34089a46614a743cea13eee9bbb990cdfd770bfce36e [2022-11-19 07:40:49,439 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-19 07:40:49,470 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-19 07:40:49,473 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-19 07:40:49,474 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-19 07:40:49,475 INFO L275 PluginConnector]: CDTParser initialized [2022-11-19 07:40:49,476 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c [2022-11-19 07:40:49,547 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/data/0c266854e/4a3f5191fbef404bb76cfd7e2dfd7961/FLAGbf0f4d6d2 [2022-11-19 07:40:50,063 INFO L306 CDTParser]: Found 1 translation units. [2022-11-19 07:40:50,063 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c [2022-11-19 07:40:50,075 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/data/0c266854e/4a3f5191fbef404bb76cfd7e2dfd7961/FLAGbf0f4d6d2 [2022-11-19 07:40:50,400 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/data/0c266854e/4a3f5191fbef404bb76cfd7e2dfd7961 [2022-11-19 07:40:50,405 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-19 07:40:50,407 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-19 07:40:50,409 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-19 07:40:50,409 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-19 07:40:50,413 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-19 07:40:50,414 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:40:50" (1/1) ... [2022-11-19 07:40:50,415 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7defffa8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:40:50, skipping insertion in model container [2022-11-19 07:40:50,415 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:40:50" (1/1) ... [2022-11-19 07:40:50,423 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-19 07:40:50,460 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-19 07:40:50,814 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2022-11-19 07:40:50,820 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 07:40:50,835 INFO L203 MainTranslator]: Completed pre-run [2022-11-19 07:40:50,925 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2022-11-19 07:40:50,926 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 07:40:50,943 INFO L208 MainTranslator]: Completed translation [2022-11-19 07:40:50,943 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:40:50 WrapperNode [2022-11-19 07:40:50,943 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-19 07:40:50,944 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-19 07:40:50,945 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-19 07:40:50,945 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-19 07:40:50,952 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:40:50" (1/1) ... [2022-11-19 07:40:50,965 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:40:50" (1/1) ... [2022-11-19 07:40:50,990 INFO L138 Inliner]: procedures = 58, calls = 102, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 209 [2022-11-19 07:40:50,991 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-19 07:40:50,992 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-19 07:40:50,992 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-19 07:40:50,992 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-19 07:40:51,001 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:40:50" (1/1) ... [2022-11-19 07:40:51,001 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:40:50" (1/1) ... [2022-11-19 07:40:51,004 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:40:50" (1/1) ... [2022-11-19 07:40:51,004 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:40:50" (1/1) ... [2022-11-19 07:40:51,010 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:40:50" (1/1) ... [2022-11-19 07:40:51,015 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:40:50" (1/1) ... [2022-11-19 07:40:51,016 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:40:50" (1/1) ... [2022-11-19 07:40:51,017 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:40:50" (1/1) ... [2022-11-19 07:40:51,020 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-19 07:40:51,020 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-19 07:40:51,021 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-19 07:40:51,021 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-19 07:40:51,022 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:40:50" (1/1) ... [2022-11-19 07:40:51,028 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 07:40:51,040 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:40:51,053 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-19 07:40:51,064 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-19 07:40:51,097 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-19 07:40:51,097 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-19 07:40:51,097 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-19 07:40:51,098 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-19 07:40:51,098 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-19 07:40:51,098 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-19 07:40:51,098 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-19 07:40:51,099 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-19 07:40:51,099 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-19 07:40:51,099 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 07:40:51,099 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 07:40:51,099 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-19 07:40:51,100 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-19 07:40:51,100 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-19 07:40:51,100 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-19 07:40:51,100 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-19 07:40:51,100 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-19 07:40:51,101 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-19 07:40:51,101 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-19 07:40:51,101 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-19 07:40:51,183 INFO L235 CfgBuilder]: Building ICFG [2022-11-19 07:40:51,185 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-19 07:40:51,444 INFO L276 CfgBuilder]: Performing block encoding [2022-11-19 07:40:51,650 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-19 07:40:51,650 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-19 07:40:51,660 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:40:51 BoogieIcfgContainer [2022-11-19 07:40:51,660 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-19 07:40:51,662 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-19 07:40:51,663 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-19 07:40:51,676 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-19 07:40:51,676 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 07:40:50" (1/3) ... [2022-11-19 07:40:51,677 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2316138f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:40:51, skipping insertion in model container [2022-11-19 07:40:51,678 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:40:50" (2/3) ... [2022-11-19 07:40:51,681 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2316138f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:40:51, skipping insertion in model container [2022-11-19 07:40:51,681 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:40:51" (3/3) ... [2022-11-19 07:40:51,682 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product52.cil.c [2022-11-19 07:40:51,706 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-19 07:40:51,706 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-19 07:40:51,757 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-19 07:40:51,764 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5043af18, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-19 07:40:51,764 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-19 07:40:51,769 INFO L276 IsEmpty]: Start isEmpty. Operand has 64 states, 41 states have (on average 1.4634146341463414) internal successors, (60), 50 states have internal predecessors, (60), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-19 07:40:51,779 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-19 07:40:51,779 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:40:51,780 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:40:51,780 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:40:51,785 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:40:51,786 INFO L85 PathProgramCache]: Analyzing trace with hash 1871913479, now seen corresponding path program 1 times [2022-11-19 07:40:51,795 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:40:51,796 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [286575610] [2022-11-19 07:40:51,796 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:40:51,796 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:40:51,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:40:51,996 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:40:51,997 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:40:52,005 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [286575610] [2022-11-19 07:40:52,006 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [286575610] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:40:52,006 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:40:52,007 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-19 07:40:52,008 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1765265183] [2022-11-19 07:40:52,009 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:40:52,014 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-19 07:40:52,016 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:40:52,051 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-19 07:40:52,053 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-19 07:40:52,055 INFO L87 Difference]: Start difference. First operand has 64 states, 41 states have (on average 1.4634146341463414) internal successors, (60), 50 states have internal predecessors, (60), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:40:52,179 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:40:52,180 INFO L93 Difference]: Finished difference Result 126 states and 173 transitions. [2022-11-19 07:40:52,184 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-19 07:40:52,186 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-11-19 07:40:52,186 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:40:52,195 INFO L225 Difference]: With dead ends: 126 [2022-11-19 07:40:52,196 INFO L226 Difference]: Without dead ends: 59 [2022-11-19 07:40:52,199 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-19 07:40:52,202 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 65 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:40:52,204 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 65 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:40:52,221 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-11-19 07:40:52,245 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 59. [2022-11-19 07:40:52,248 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 38 states have (on average 1.368421052631579) internal successors, (52), 46 states have internal predecessors, (52), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2022-11-19 07:40:52,254 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 77 transitions. [2022-11-19 07:40:52,256 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 77 transitions. Word has length 17 [2022-11-19 07:40:52,259 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:40:52,260 INFO L495 AbstractCegarLoop]: Abstraction has 59 states and 77 transitions. [2022-11-19 07:40:52,260 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:40:52,261 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 77 transitions. [2022-11-19 07:40:52,264 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-19 07:40:52,268 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:40:52,269 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:40:52,269 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-19 07:40:52,269 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:40:52,270 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:40:52,271 INFO L85 PathProgramCache]: Analyzing trace with hash 1788829300, now seen corresponding path program 1 times [2022-11-19 07:40:52,271 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:40:52,272 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [592318329] [2022-11-19 07:40:52,273 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:40:52,273 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:40:52,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:40:52,443 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:40:52,443 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:40:52,444 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [592318329] [2022-11-19 07:40:52,444 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [592318329] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:40:52,444 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:40:52,444 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 07:40:52,445 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [845088942] [2022-11-19 07:40:52,445 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:40:52,446 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 07:40:52,446 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:40:52,447 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 07:40:52,447 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:40:52,448 INFO L87 Difference]: Start difference. First operand 59 states and 77 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:40:52,490 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:40:52,491 INFO L93 Difference]: Finished difference Result 90 states and 116 transitions. [2022-11-19 07:40:52,491 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 07:40:52,491 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-11-19 07:40:52,492 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:40:52,493 INFO L225 Difference]: With dead ends: 90 [2022-11-19 07:40:52,493 INFO L226 Difference]: Without dead ends: 51 [2022-11-19 07:40:52,494 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:40:52,495 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 14 mSDsluCounter, 35 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 86 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 07:40:52,496 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 86 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 07:40:52,497 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51 states. [2022-11-19 07:40:52,503 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51. [2022-11-19 07:40:52,504 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 33 states have (on average 1.393939393939394) internal successors, (46), 41 states have internal predecessors, (46), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 7 states have call predecessors, (10), 10 states have call successors, (10) [2022-11-19 07:40:52,505 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 66 transitions. [2022-11-19 07:40:52,505 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 66 transitions. Word has length 18 [2022-11-19 07:40:52,505 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:40:52,506 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 66 transitions. [2022-11-19 07:40:52,506 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:40:52,506 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 66 transitions. [2022-11-19 07:40:52,507 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-19 07:40:52,507 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:40:52,508 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:40:52,508 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-19 07:40:52,508 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:40:52,509 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:40:52,509 INFO L85 PathProgramCache]: Analyzing trace with hash 605785607, now seen corresponding path program 1 times [2022-11-19 07:40:52,509 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:40:52,509 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1557351883] [2022-11-19 07:40:52,510 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:40:52,510 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:40:52,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:40:52,622 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:40:52,623 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:40:52,623 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1557351883] [2022-11-19 07:40:52,623 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1557351883] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:40:52,624 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:40:52,624 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 07:40:52,624 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2082316384] [2022-11-19 07:40:52,625 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:40:52,625 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 07:40:52,625 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:40:52,626 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 07:40:52,626 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 07:40:52,626 INFO L87 Difference]: Start difference. First operand 51 states and 66 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:40:52,722 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:40:52,722 INFO L93 Difference]: Finished difference Result 134 states and 174 transitions. [2022-11-19 07:40:52,722 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 07:40:52,723 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2022-11-19 07:40:52,723 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:40:52,724 INFO L225 Difference]: With dead ends: 134 [2022-11-19 07:40:52,724 INFO L226 Difference]: Without dead ends: 85 [2022-11-19 07:40:52,725 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-19 07:40:52,727 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 89 mSDsluCounter, 74 mSDsCounter, 0 mSdLazyCounter, 47 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 93 SdHoareTripleChecker+Valid, 135 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 47 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:40:52,727 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [93 Valid, 135 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 47 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:40:52,728 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-11-19 07:40:52,741 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 82. [2022-11-19 07:40:52,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 54 states have (on average 1.3888888888888888) internal successors, (75), 65 states have internal predecessors, (75), 15 states have call successors, (15), 12 states have call predecessors, (15), 12 states have return successors, (16), 11 states have call predecessors, (16), 15 states have call successors, (16) [2022-11-19 07:40:52,743 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 106 transitions. [2022-11-19 07:40:52,744 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 106 transitions. Word has length 21 [2022-11-19 07:40:52,744 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:40:52,744 INFO L495 AbstractCegarLoop]: Abstraction has 82 states and 106 transitions. [2022-11-19 07:40:52,745 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:40:52,745 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 106 transitions. [2022-11-19 07:40:52,746 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-19 07:40:52,746 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:40:52,746 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:40:52,747 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-19 07:40:52,747 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:40:52,748 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:40:52,748 INFO L85 PathProgramCache]: Analyzing trace with hash 2039617653, now seen corresponding path program 1 times [2022-11-19 07:40:52,748 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:40:52,748 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1547093334] [2022-11-19 07:40:52,749 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:40:52,749 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:40:52,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:40:52,893 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:40:52,893 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:40:52,894 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1547093334] [2022-11-19 07:40:52,894 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1547093334] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:40:52,894 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:40:52,894 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 07:40:52,895 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [395302722] [2022-11-19 07:40:52,895 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:40:52,895 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 07:40:52,896 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:40:52,896 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 07:40:52,896 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 07:40:52,897 INFO L87 Difference]: Start difference. First operand 82 states and 106 transitions. Second operand has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:40:52,989 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:40:52,990 INFO L93 Difference]: Finished difference Result 199 states and 267 transitions. [2022-11-19 07:40:52,990 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 07:40:52,990 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-11-19 07:40:52,991 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:40:52,992 INFO L225 Difference]: With dead ends: 199 [2022-11-19 07:40:52,992 INFO L226 Difference]: Without dead ends: 119 [2022-11-19 07:40:52,993 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-19 07:40:52,994 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 36 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 51 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 157 SdHoareTripleChecker+Invalid, 59 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 51 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:40:52,995 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 157 Invalid, 59 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 51 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:40:52,996 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 119 states. [2022-11-19 07:40:53,015 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 119 to 112. [2022-11-19 07:40:53,015 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 112 states, 76 states have (on average 1.3026315789473684) internal successors, (99), 86 states have internal predecessors, (99), 18 states have call successors, (18), 17 states have call predecessors, (18), 17 states have return successors, (24), 17 states have call predecessors, (24), 18 states have call successors, (24) [2022-11-19 07:40:53,017 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 112 states to 112 states and 141 transitions. [2022-11-19 07:40:53,018 INFO L78 Accepts]: Start accepts. Automaton has 112 states and 141 transitions. Word has length 24 [2022-11-19 07:40:53,018 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:40:53,018 INFO L495 AbstractCegarLoop]: Abstraction has 112 states and 141 transitions. [2022-11-19 07:40:53,019 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:40:53,019 INFO L276 IsEmpty]: Start isEmpty. Operand 112 states and 141 transitions. [2022-11-19 07:40:53,020 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-19 07:40:53,020 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:40:53,020 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:40:53,021 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-19 07:40:53,021 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:40:53,021 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:40:53,022 INFO L85 PathProgramCache]: Analyzing trace with hash 1680772318, now seen corresponding path program 1 times [2022-11-19 07:40:53,022 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:40:53,022 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [929081497] [2022-11-19 07:40:53,022 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:40:53,023 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:40:53,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:40:53,110 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:40:53,110 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:40:53,110 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [929081497] [2022-11-19 07:40:53,110 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [929081497] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:40:53,111 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:40:53,111 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 07:40:53,113 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [993987548] [2022-11-19 07:40:53,116 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:40:53,118 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 07:40:53,118 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:40:53,119 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 07:40:53,120 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:40:53,120 INFO L87 Difference]: Start difference. First operand 112 states and 141 transitions. Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-19 07:40:53,212 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:40:53,213 INFO L93 Difference]: Finished difference Result 186 states and 241 transitions. [2022-11-19 07:40:53,213 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 07:40:53,218 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 29 [2022-11-19 07:40:53,219 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:40:53,227 INFO L225 Difference]: With dead ends: 186 [2022-11-19 07:40:53,227 INFO L226 Difference]: Without dead ends: 184 [2022-11-19 07:40:53,227 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:40:53,232 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 42 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:40:53,235 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 108 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:40:53,237 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2022-11-19 07:40:53,285 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 169. [2022-11-19 07:40:53,287 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 113 states have (on average 1.3097345132743363) internal successors, (148), 129 states have internal predecessors, (148), 29 states have call successors, (29), 27 states have call predecessors, (29), 26 states have return successors, (45), 25 states have call predecessors, (45), 29 states have call successors, (45) [2022-11-19 07:40:53,296 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 222 transitions. [2022-11-19 07:40:53,296 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 222 transitions. Word has length 29 [2022-11-19 07:40:53,296 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:40:53,296 INFO L495 AbstractCegarLoop]: Abstraction has 169 states and 222 transitions. [2022-11-19 07:40:53,297 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-19 07:40:53,297 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 222 transitions. [2022-11-19 07:40:53,302 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-19 07:40:53,302 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:40:53,303 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:40:53,303 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-19 07:40:53,303 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:40:53,303 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:40:53,304 INFO L85 PathProgramCache]: Analyzing trace with hash -522628244, now seen corresponding path program 1 times [2022-11-19 07:40:53,304 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:40:53,304 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [71423627] [2022-11-19 07:40:53,304 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:40:53,304 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:40:53,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:40:53,410 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-11-19 07:40:53,410 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:40:53,410 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [71423627] [2022-11-19 07:40:53,410 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [71423627] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:40:53,411 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:40:53,411 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 07:40:53,411 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1522579478] [2022-11-19 07:40:53,411 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:40:53,411 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 07:40:53,413 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:40:53,413 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 07:40:53,414 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 07:40:53,414 INFO L87 Difference]: Start difference. First operand 169 states and 222 transitions. Second operand has 4 states, 3 states have (on average 14.666666666666666) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-19 07:40:53,565 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:40:53,565 INFO L93 Difference]: Finished difference Result 337 states and 443 transitions. [2022-11-19 07:40:53,566 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-19 07:40:53,567 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 14.666666666666666) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) Word has length 60 [2022-11-19 07:40:53,567 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:40:53,571 INFO L225 Difference]: With dead ends: 337 [2022-11-19 07:40:53,571 INFO L226 Difference]: Without dead ends: 170 [2022-11-19 07:40:53,575 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 07:40:53,580 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 82 mSDsluCounter, 44 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 82 SdHoareTripleChecker+Valid, 116 SdHoareTripleChecker+Invalid, 84 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:40:53,583 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [82 Valid, 116 Invalid, 84 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:40:53,585 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 170 states. [2022-11-19 07:40:53,624 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 170 to 159. [2022-11-19 07:40:53,625 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 107 states have (on average 1.2990654205607477) internal successors, (139), 121 states have internal predecessors, (139), 26 states have call successors, (26), 25 states have call predecessors, (26), 25 states have return successors, (36), 24 states have call predecessors, (36), 26 states have call successors, (36) [2022-11-19 07:40:53,626 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 201 transitions. [2022-11-19 07:40:53,627 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 201 transitions. Word has length 60 [2022-11-19 07:40:53,627 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:40:53,627 INFO L495 AbstractCegarLoop]: Abstraction has 159 states and 201 transitions. [2022-11-19 07:40:53,627 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 14.666666666666666) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-19 07:40:53,628 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 201 transitions. [2022-11-19 07:40:53,631 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-11-19 07:40:53,632 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:40:53,632 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:40:53,632 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-19 07:40:53,633 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:40:53,633 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:40:53,633 INFO L85 PathProgramCache]: Analyzing trace with hash -1539119106, now seen corresponding path program 1 times [2022-11-19 07:40:53,634 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:40:53,635 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1309560426] [2022-11-19 07:40:53,635 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:40:53,635 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:40:53,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:40:53,841 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 19 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-19 07:40:53,841 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:40:53,841 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1309560426] [2022-11-19 07:40:53,842 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1309560426] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:40:53,842 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [384853443] [2022-11-19 07:40:53,842 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:40:53,842 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:40:53,842 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:40:53,850 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:40:53,873 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-19 07:40:53,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:40:53,983 INFO L263 TraceCheckSpWp]: Trace formula consists of 290 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-19 07:40:53,989 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:40:54,109 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:40:54,110 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 07:40:54,110 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [384853443] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:40:54,110 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 07:40:54,110 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5] total 6 [2022-11-19 07:40:54,110 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [334005329] [2022-11-19 07:40:54,113 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:40:54,113 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 07:40:54,113 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:40:54,114 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 07:40:54,114 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-19 07:40:54,114 INFO L87 Difference]: Start difference. First operand 159 states and 201 transitions. Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-19 07:40:54,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:40:54,182 INFO L93 Difference]: Finished difference Result 307 states and 397 transitions. [2022-11-19 07:40:54,182 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 07:40:54,182 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) Word has length 57 [2022-11-19 07:40:54,184 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:40:54,186 INFO L225 Difference]: With dead ends: 307 [2022-11-19 07:40:54,186 INFO L226 Difference]: Without dead ends: 150 [2022-11-19 07:40:54,187 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 59 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-19 07:40:54,188 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 28 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 40 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 111 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 40 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 07:40:54,188 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 111 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 40 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 07:40:54,189 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2022-11-19 07:40:54,220 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 150. [2022-11-19 07:40:54,221 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 150 states, 102 states have (on average 1.2549019607843137) internal successors, (128), 114 states have internal predecessors, (128), 24 states have call successors, (24), 23 states have call predecessors, (24), 23 states have return successors, (31), 23 states have call predecessors, (31), 24 states have call successors, (31) [2022-11-19 07:40:54,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 150 states to 150 states and 183 transitions. [2022-11-19 07:40:54,223 INFO L78 Accepts]: Start accepts. Automaton has 150 states and 183 transitions. Word has length 57 [2022-11-19 07:40:54,223 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:40:54,223 INFO L495 AbstractCegarLoop]: Abstraction has 150 states and 183 transitions. [2022-11-19 07:40:54,223 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-19 07:40:54,224 INFO L276 IsEmpty]: Start isEmpty. Operand 150 states and 183 transitions. [2022-11-19 07:40:54,225 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-19 07:40:54,226 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:40:54,226 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:40:54,240 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-11-19 07:40:54,435 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:40:54,435 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:40:54,436 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:40:54,436 INFO L85 PathProgramCache]: Analyzing trace with hash 215137069, now seen corresponding path program 1 times [2022-11-19 07:40:54,436 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:40:54,436 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [995308600] [2022-11-19 07:40:54,436 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:40:54,437 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:40:54,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:40:54,817 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 18 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 07:40:54,817 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:40:54,818 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [995308600] [2022-11-19 07:40:54,818 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [995308600] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:40:54,818 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [208351473] [2022-11-19 07:40:54,818 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:40:54,818 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:40:54,819 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:40:54,821 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:40:54,842 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-19 07:40:54,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:40:54,952 INFO L263 TraceCheckSpWp]: Trace formula consists of 295 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-19 07:40:54,955 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:40:55,412 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:40:55,413 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 07:40:55,413 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [208351473] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:40:55,413 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 07:40:55,413 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [9] total 17 [2022-11-19 07:40:55,413 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1116699109] [2022-11-19 07:40:55,414 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:40:55,415 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-19 07:40:55,415 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:40:55,416 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-19 07:40:55,417 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=55, Invalid=217, Unknown=0, NotChecked=0, Total=272 [2022-11-19 07:40:55,417 INFO L87 Difference]: Start difference. First operand 150 states and 183 transitions. Second operand has 10 states, 9 states have (on average 5.222222222222222) internal successors, (47), 9 states have internal predecessors, (47), 4 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 2 states have call predecessors, (6), 4 states have call successors, (6) [2022-11-19 07:40:56,006 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:40:56,006 INFO L93 Difference]: Finished difference Result 412 states and 508 transitions. [2022-11-19 07:40:56,007 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-19 07:40:56,007 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 5.222222222222222) internal successors, (47), 9 states have internal predecessors, (47), 4 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 2 states have call predecessors, (6), 4 states have call successors, (6) Word has length 60 [2022-11-19 07:40:56,008 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:40:56,009 INFO L225 Difference]: With dead ends: 412 [2022-11-19 07:40:56,009 INFO L226 Difference]: Without dead ends: 264 [2022-11-19 07:40:56,011 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 74 GetRequests, 53 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 80 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=114, Invalid=392, Unknown=0, NotChecked=0, Total=506 [2022-11-19 07:40:56,011 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 189 mSDsluCounter, 285 mSDsCounter, 0 mSdLazyCounter, 407 mSolverCounterSat, 71 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 199 SdHoareTripleChecker+Valid, 354 SdHoareTripleChecker+Invalid, 478 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 71 IncrementalHoareTripleChecker+Valid, 407 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-19 07:40:56,012 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [199 Valid, 354 Invalid, 478 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [71 Valid, 407 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-19 07:40:56,012 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 264 states. [2022-11-19 07:40:56,053 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 264 to 251. [2022-11-19 07:40:56,055 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 251 states, 175 states have (on average 1.262857142857143) internal successors, (221), 192 states have internal predecessors, (221), 37 states have call successors, (37), 36 states have call predecessors, (37), 38 states have return successors, (44), 38 states have call predecessors, (44), 37 states have call successors, (44) [2022-11-19 07:40:56,057 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 251 states to 251 states and 302 transitions. [2022-11-19 07:40:56,058 INFO L78 Accepts]: Start accepts. Automaton has 251 states and 302 transitions. Word has length 60 [2022-11-19 07:40:56,058 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:40:56,058 INFO L495 AbstractCegarLoop]: Abstraction has 251 states and 302 transitions. [2022-11-19 07:40:56,058 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 5.222222222222222) internal successors, (47), 9 states have internal predecessors, (47), 4 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 2 states have call predecessors, (6), 4 states have call successors, (6) [2022-11-19 07:40:56,059 INFO L276 IsEmpty]: Start isEmpty. Operand 251 states and 302 transitions. [2022-11-19 07:40:56,061 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-11-19 07:40:56,061 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:40:56,061 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:40:56,079 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-19 07:40:56,274 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:40:56,274 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:40:56,275 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:40:56,275 INFO L85 PathProgramCache]: Analyzing trace with hash 1039553112, now seen corresponding path program 1 times [2022-11-19 07:40:56,275 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:40:56,275 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [18338557] [2022-11-19 07:40:56,275 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:40:56,275 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:40:56,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:40:56,435 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 18 proven. 1 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-19 07:40:56,436 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:40:56,436 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [18338557] [2022-11-19 07:40:56,436 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [18338557] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:40:56,436 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1649653447] [2022-11-19 07:40:56,436 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:40:56,437 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:40:56,437 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:40:56,438 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:40:56,466 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-19 07:40:56,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:40:56,544 INFO L263 TraceCheckSpWp]: Trace formula consists of 301 conjuncts, 34 conjunts are in the unsatisfiable core [2022-11-19 07:40:56,550 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:40:56,979 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 13 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:40:56,979 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:40:57,647 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 11 proven. 3 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-19 07:40:57,647 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1649653447] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:40:57,647 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1524969744] [2022-11-19 07:40:57,673 INFO L159 IcfgInterpreter]: Started Sifa with 40 locations of interest [2022-11-19 07:40:57,674 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:40:57,678 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:40:57,684 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:40:57,684 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:41:00,437 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 116 for LOIs [2022-11-19 07:41:00,451 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 123 for LOIs [2022-11-19 07:41:01,951 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 119 for LOIs [2022-11-19 07:41:02,122 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 135 for LOIs [2022-11-19 07:41:02,158 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:41:16,023 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1524969744] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:41:16,024 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:41:16,024 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [21] imperfect sequences [7, 12, 14] total 49 [2022-11-19 07:41:16,025 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1425021525] [2022-11-19 07:41:16,025 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:41:16,025 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-19 07:41:16,026 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:41:16,026 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-19 07:41:16,027 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=344, Invalid=2008, Unknown=0, NotChecked=0, Total=2352 [2022-11-19 07:41:16,028 INFO L87 Difference]: Start difference. First operand 251 states and 302 transitions. Second operand has 22 states, 18 states have (on average 1.7777777777777777) internal successors, (32), 18 states have internal predecessors, (32), 5 states have call successors, (6), 5 states have call predecessors, (6), 4 states have return successors, (6), 5 states have call predecessors, (6), 5 states have call successors, (6) [2022-11-19 07:41:24,881 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:41:24,882 INFO L93 Difference]: Finished difference Result 656 states and 800 transitions. [2022-11-19 07:41:24,882 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-11-19 07:41:24,883 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 18 states have (on average 1.7777777777777777) internal successors, (32), 18 states have internal predecessors, (32), 5 states have call successors, (6), 5 states have call predecessors, (6), 4 states have return successors, (6), 5 states have call predecessors, (6), 5 states have call successors, (6) Word has length 63 [2022-11-19 07:41:24,883 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:41:24,885 INFO L225 Difference]: With dead ends: 656 [2022-11-19 07:41:24,885 INFO L226 Difference]: Without dead ends: 407 [2022-11-19 07:41:24,887 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 205 GetRequests, 140 SyntacticMatches, 7 SemanticMatches, 58 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1181 ImplicationChecksByTransitivity, 20.6s TimeCoverageRelationStatistics Valid=550, Invalid=2990, Unknown=0, NotChecked=0, Total=3540 [2022-11-19 07:41:24,888 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 175 mSDsluCounter, 464 mSDsCounter, 0 mSdLazyCounter, 1247 mSolverCounterSat, 76 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 178 SdHoareTripleChecker+Valid, 539 SdHoareTripleChecker+Invalid, 1323 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 76 IncrementalHoareTripleChecker+Valid, 1247 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-11-19 07:41:24,888 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [178 Valid, 539 Invalid, 1323 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [76 Valid, 1247 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-11-19 07:41:24,889 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 407 states. [2022-11-19 07:41:24,975 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 407 to 369. [2022-11-19 07:41:24,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 369 states, 259 states have (on average 1.2586872586872586) internal successors, (326), 279 states have internal predecessors, (326), 53 states have call successors, (53), 52 states have call predecessors, (53), 56 states have return successors, (64), 55 states have call predecessors, (64), 53 states have call successors, (64) [2022-11-19 07:41:24,978 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 369 states to 369 states and 443 transitions. [2022-11-19 07:41:24,979 INFO L78 Accepts]: Start accepts. Automaton has 369 states and 443 transitions. Word has length 63 [2022-11-19 07:41:24,979 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:41:24,979 INFO L495 AbstractCegarLoop]: Abstraction has 369 states and 443 transitions. [2022-11-19 07:41:24,979 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 18 states have (on average 1.7777777777777777) internal successors, (32), 18 states have internal predecessors, (32), 5 states have call successors, (6), 5 states have call predecessors, (6), 4 states have return successors, (6), 5 states have call predecessors, (6), 5 states have call successors, (6) [2022-11-19 07:41:24,980 INFO L276 IsEmpty]: Start isEmpty. Operand 369 states and 443 transitions. [2022-11-19 07:41:24,981 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-11-19 07:41:24,981 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:41:24,981 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:41:24,992 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-11-19 07:41:25,191 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:41:25,192 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:41:25,192 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:41:25,193 INFO L85 PathProgramCache]: Analyzing trace with hash 744251358, now seen corresponding path program 1 times [2022-11-19 07:41:25,193 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:41:25,193 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1543840647] [2022-11-19 07:41:25,193 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:41:25,193 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:41:25,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:41:25,831 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 7 proven. 13 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 07:41:25,831 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:41:25,831 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1543840647] [2022-11-19 07:41:25,832 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1543840647] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:41:25,832 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [608332283] [2022-11-19 07:41:25,832 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:41:25,832 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:41:25,832 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:41:25,835 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:41:25,844 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-19 07:41:25,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:41:25,943 INFO L263 TraceCheckSpWp]: Trace formula consists of 307 conjuncts, 34 conjunts are in the unsatisfiable core [2022-11-19 07:41:25,946 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:41:26,339 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 13 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:41:26,340 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:41:26,912 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 11 proven. 3 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-19 07:41:26,912 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [608332283] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:41:26,912 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1521570140] [2022-11-19 07:41:26,915 INFO L159 IcfgInterpreter]: Started Sifa with 43 locations of interest [2022-11-19 07:41:26,915 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:41:26,916 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:41:26,916 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:41:26,916 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:41:30,496 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 143 for LOIs [2022-11-19 07:41:30,521 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 37 for LOIs [2022-11-19 07:41:30,779 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 67 for LOIs [2022-11-19 07:41:31,052 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 24 for LOIs [2022-11-19 07:41:31,054 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 32 for LOIs [2022-11-19 07:41:31,057 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 40 for LOIs [2022-11-19 07:41:31,060 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:41:38,249 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7180#(and (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| 0)) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (= ~head~0.offset 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= |old(~pumpRunning~0)| 2147483647) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~1#1|) (<= 0 ~methAndRunningLastTime~0) (not (= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)) (<= 0 |old(~methAndRunningLastTime~0)|) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| 1) (<= |old(~methAndRunningLastTime~0)| 1) (<= 0 ~head~0.base) (<= 0 ~methaneLevelCritical~0) (<= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 2147483647) (<= ~head~0.base 0) (= |#NULL.offset| 0) (not (= ~methAndRunningLastTime~0 0)) (<= ~methAndRunningLastTime~0 1) (<= 0 (+ |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 2147483648)) (<= 0 |#StackHeapBarrier|) (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| ~methaneLevelCritical~0) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-19 07:41:38,249 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 07:41:38,249 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:41:38,249 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 12, 14] total 35 [2022-11-19 07:41:38,249 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1394136675] [2022-11-19 07:41:38,250 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 07:41:38,250 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-11-19 07:41:38,250 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:41:38,251 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-11-19 07:41:38,252 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=462, Invalid=3828, Unknown=0, NotChecked=0, Total=4290 [2022-11-19 07:41:38,252 INFO L87 Difference]: Start difference. First operand 369 states and 443 transitions. Second operand has 35 states, 30 states have (on average 3.7333333333333334) internal successors, (112), 30 states have internal predecessors, (112), 15 states have call successors, (24), 12 states have call predecessors, (24), 11 states have return successors, (21), 9 states have call predecessors, (21), 14 states have call successors, (21) [2022-11-19 07:41:42,028 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:41:42,028 INFO L93 Difference]: Finished difference Result 1051 states and 1290 transitions. [2022-11-19 07:41:42,029 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2022-11-19 07:41:42,029 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 30 states have (on average 3.7333333333333334) internal successors, (112), 30 states have internal predecessors, (112), 15 states have call successors, (24), 12 states have call predecessors, (24), 11 states have return successors, (21), 9 states have call predecessors, (21), 14 states have call successors, (21) Word has length 66 [2022-11-19 07:41:42,029 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:41:42,033 INFO L225 Difference]: With dead ends: 1051 [2022-11-19 07:41:42,033 INFO L226 Difference]: Without dead ends: 768 [2022-11-19 07:41:42,037 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 271 GetRequests, 155 SyntacticMatches, 4 SemanticMatches, 112 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4789 ImplicationChecksByTransitivity, 9.6s TimeCoverageRelationStatistics Valid=1452, Invalid=11430, Unknown=0, NotChecked=0, Total=12882 [2022-11-19 07:41:42,038 INFO L413 NwaCegarLoop]: 135 mSDtfsCounter, 1670 mSDsluCounter, 1280 mSDsCounter, 0 mSdLazyCounter, 2160 mSolverCounterSat, 896 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1674 SdHoareTripleChecker+Valid, 1415 SdHoareTripleChecker+Invalid, 3056 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 896 IncrementalHoareTripleChecker+Valid, 2160 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-11-19 07:41:42,038 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1674 Valid, 1415 Invalid, 3056 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [896 Valid, 2160 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-11-19 07:41:42,039 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 768 states. [2022-11-19 07:41:42,137 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 768 to 623. [2022-11-19 07:41:42,139 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 623 states, 442 states have (on average 1.253393665158371) internal successors, (554), 476 states have internal predecessors, (554), 88 states have call successors, (88), 87 states have call predecessors, (88), 92 states have return successors, (102), 90 states have call predecessors, (102), 88 states have call successors, (102) [2022-11-19 07:41:42,141 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 623 states to 623 states and 744 transitions. [2022-11-19 07:41:42,141 INFO L78 Accepts]: Start accepts. Automaton has 623 states and 744 transitions. Word has length 66 [2022-11-19 07:41:42,142 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:41:42,142 INFO L495 AbstractCegarLoop]: Abstraction has 623 states and 744 transitions. [2022-11-19 07:41:42,142 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 30 states have (on average 3.7333333333333334) internal successors, (112), 30 states have internal predecessors, (112), 15 states have call successors, (24), 12 states have call predecessors, (24), 11 states have return successors, (21), 9 states have call predecessors, (21), 14 states have call successors, (21) [2022-11-19 07:41:42,142 INFO L276 IsEmpty]: Start isEmpty. Operand 623 states and 744 transitions. [2022-11-19 07:41:42,147 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2022-11-19 07:41:42,147 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:41:42,147 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:41:42,153 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-19 07:41:42,352 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-19 07:41:42,352 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:41:42,353 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:41:42,353 INFO L85 PathProgramCache]: Analyzing trace with hash -244726395, now seen corresponding path program 1 times [2022-11-19 07:41:42,353 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:41:42,353 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [399006929] [2022-11-19 07:41:42,353 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:41:42,353 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:41:42,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:41:42,539 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 72 proven. 9 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2022-11-19 07:41:42,539 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:41:42,539 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [399006929] [2022-11-19 07:41:42,539 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [399006929] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:41:42,539 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [802681929] [2022-11-19 07:41:42,539 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:41:42,539 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:41:42,540 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:41:42,541 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:41:42,568 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-19 07:41:42,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:41:42,667 INFO L263 TraceCheckSpWp]: Trace formula consists of 471 conjuncts, 39 conjunts are in the unsatisfiable core [2022-11-19 07:41:42,671 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:41:43,339 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 67 proven. 57 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-11-19 07:41:43,339 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:41:44,416 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 72 proven. 32 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2022-11-19 07:41:44,417 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [802681929] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:41:44,417 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2085936384] [2022-11-19 07:41:44,424 INFO L159 IcfgInterpreter]: Started Sifa with 43 locations of interest [2022-11-19 07:41:44,424 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:41:44,424 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:41:44,425 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:41:44,425 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:41:47,884 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 25 for LOIs [2022-11-19 07:41:47,888 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 30 for LOIs [2022-11-19 07:41:48,203 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 63 for LOIs [2022-11-19 07:41:48,439 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 23 for LOIs [2022-11-19 07:41:48,441 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 35 for LOIs [2022-11-19 07:41:48,443 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 31 for LOIs [2022-11-19 07:41:48,445 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:41:53,961 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [2085936384] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:41:53,961 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:41:53,961 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [28] imperfect sequences [7, 17, 17] total 63 [2022-11-19 07:41:53,961 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1090045825] [2022-11-19 07:41:53,962 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:41:53,962 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-11-19 07:41:53,962 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:41:53,963 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-11-19 07:41:53,964 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=529, Invalid=3377, Unknown=0, NotChecked=0, Total=3906 [2022-11-19 07:41:53,964 INFO L87 Difference]: Start difference. First operand 623 states and 744 transitions. Second operand has 29 states, 20 states have (on average 1.75) internal successors, (35), 24 states have internal predecessors, (35), 7 states have call successors, (7), 6 states have call predecessors, (7), 6 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-19 07:42:05,290 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:42:05,290 INFO L93 Difference]: Finished difference Result 1707 states and 2139 transitions. [2022-11-19 07:42:05,290 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 58 states. [2022-11-19 07:42:05,291 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 20 states have (on average 1.75) internal successors, (35), 24 states have internal predecessors, (35), 7 states have call successors, (7), 6 states have call predecessors, (7), 6 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) Word has length 113 [2022-11-19 07:42:05,291 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:42:05,297 INFO L225 Difference]: With dead ends: 1707 [2022-11-19 07:42:05,297 INFO L226 Difference]: Without dead ends: 1086 [2022-11-19 07:42:05,301 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 391 GetRequests, 272 SyntacticMatches, 14 SemanticMatches, 105 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3828 ImplicationChecksByTransitivity, 14.5s TimeCoverageRelationStatistics Valid=1614, Invalid=9728, Unknown=0, NotChecked=0, Total=11342 [2022-11-19 07:42:05,302 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 226 mSDsluCounter, 684 mSDsCounter, 0 mSdLazyCounter, 2452 mSolverCounterSat, 238 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 229 SdHoareTripleChecker+Valid, 764 SdHoareTripleChecker+Invalid, 2690 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 238 IncrementalHoareTripleChecker+Valid, 2452 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.7s IncrementalHoareTripleChecker+Time [2022-11-19 07:42:05,302 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [229 Valid, 764 Invalid, 2690 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [238 Valid, 2452 Invalid, 0 Unknown, 0 Unchecked, 2.7s Time] [2022-11-19 07:42:05,303 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1086 states. [2022-11-19 07:42:05,477 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1086 to 902. [2022-11-19 07:42:05,479 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 902 states, 646 states have (on average 1.238390092879257) internal successors, (800), 684 states have internal predecessors, (800), 126 states have call successors, (126), 123 states have call predecessors, (126), 129 states have return successors, (147), 128 states have call predecessors, (147), 126 states have call successors, (147) [2022-11-19 07:42:05,484 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 902 states to 902 states and 1073 transitions. [2022-11-19 07:42:05,484 INFO L78 Accepts]: Start accepts. Automaton has 902 states and 1073 transitions. Word has length 113 [2022-11-19 07:42:05,485 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:42:05,485 INFO L495 AbstractCegarLoop]: Abstraction has 902 states and 1073 transitions. [2022-11-19 07:42:05,485 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 20 states have (on average 1.75) internal successors, (35), 24 states have internal predecessors, (35), 7 states have call successors, (7), 6 states have call predecessors, (7), 6 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-19 07:42:05,486 INFO L276 IsEmpty]: Start isEmpty. Operand 902 states and 1073 transitions. [2022-11-19 07:42:05,488 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2022-11-19 07:42:05,488 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:42:05,489 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:42:05,496 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-19 07:42:05,696 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-19 07:42:05,696 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:42:05,697 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:42:05,697 INFO L85 PathProgramCache]: Analyzing trace with hash -1515969141, now seen corresponding path program 1 times [2022-11-19 07:42:05,697 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:42:05,697 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1654972788] [2022-11-19 07:42:05,697 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:42:05,697 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:42:05,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:42:05,857 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 72 proven. 9 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2022-11-19 07:42:05,857 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:42:05,857 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1654972788] [2022-11-19 07:42:05,857 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1654972788] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:42:05,857 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [380517886] [2022-11-19 07:42:05,858 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:42:05,858 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:42:05,858 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:42:05,859 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:42:05,890 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-19 07:42:05,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:42:05,987 INFO L263 TraceCheckSpWp]: Trace formula consists of 477 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-19 07:42:05,990 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:42:06,205 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 67 trivial. 0 not checked. [2022-11-19 07:42:06,206 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 07:42:06,206 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [380517886] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:42:06,206 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 07:42:06,206 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [7] total 14 [2022-11-19 07:42:06,207 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1958250212] [2022-11-19 07:42:06,207 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:42:06,208 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-19 07:42:06,208 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:42:06,208 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-19 07:42:06,209 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=142, Unknown=0, NotChecked=0, Total=182 [2022-11-19 07:42:06,209 INFO L87 Difference]: Start difference. First operand 902 states and 1073 transitions. Second operand has 10 states, 8 states have (on average 6.75) internal successors, (54), 7 states have internal predecessors, (54), 3 states have call successors, (11), 4 states have call predecessors, (11), 5 states have return successors, (11), 5 states have call predecessors, (11), 3 states have call successors, (11) [2022-11-19 07:42:07,130 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:42:07,130 INFO L93 Difference]: Finished difference Result 2389 states and 2890 transitions. [2022-11-19 07:42:07,131 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-19 07:42:07,131 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 8 states have (on average 6.75) internal successors, (54), 7 states have internal predecessors, (54), 3 states have call successors, (11), 4 states have call predecessors, (11), 5 states have return successors, (11), 5 states have call predecessors, (11), 3 states have call successors, (11) Word has length 116 [2022-11-19 07:42:07,131 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:42:07,141 INFO L225 Difference]: With dead ends: 2389 [2022-11-19 07:42:07,141 INFO L226 Difference]: Without dead ends: 1841 [2022-11-19 07:42:07,144 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 133 GetRequests, 113 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 53 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=95, Invalid=367, Unknown=0, NotChecked=0, Total=462 [2022-11-19 07:42:07,145 INFO L413 NwaCegarLoop]: 47 mSDtfsCounter, 208 mSDsluCounter, 168 mSDsCounter, 0 mSdLazyCounter, 650 mSolverCounterSat, 83 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 216 SdHoareTripleChecker+Valid, 215 SdHoareTripleChecker+Invalid, 733 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 83 IncrementalHoareTripleChecker+Valid, 650 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-19 07:42:07,145 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [216 Valid, 215 Invalid, 733 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [83 Valid, 650 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-19 07:42:07,147 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1841 states. [2022-11-19 07:42:07,532 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1841 to 1787. [2022-11-19 07:42:07,535 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1787 states, 1287 states have (on average 1.2470862470862472) internal successors, (1605), 1363 states have internal predecessors, (1605), 246 states have call successors, (246), 241 states have call predecessors, (246), 253 states have return successors, (291), 252 states have call predecessors, (291), 246 states have call successors, (291) [2022-11-19 07:42:07,542 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1787 states to 1787 states and 2142 transitions. [2022-11-19 07:42:07,543 INFO L78 Accepts]: Start accepts. Automaton has 1787 states and 2142 transitions. Word has length 116 [2022-11-19 07:42:07,543 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:42:07,544 INFO L495 AbstractCegarLoop]: Abstraction has 1787 states and 2142 transitions. [2022-11-19 07:42:07,544 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 8 states have (on average 6.75) internal successors, (54), 7 states have internal predecessors, (54), 3 states have call successors, (11), 4 states have call predecessors, (11), 5 states have return successors, (11), 5 states have call predecessors, (11), 3 states have call successors, (11) [2022-11-19 07:42:07,544 INFO L276 IsEmpty]: Start isEmpty. Operand 1787 states and 2142 transitions. [2022-11-19 07:42:07,548 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2022-11-19 07:42:07,548 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:42:07,548 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:42:07,565 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-19 07:42:07,754 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-19 07:42:07,754 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:42:07,755 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:42:07,755 INFO L85 PathProgramCache]: Analyzing trace with hash 342131089, now seen corresponding path program 2 times [2022-11-19 07:42:07,755 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:42:07,755 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [786390098] [2022-11-19 07:42:07,756 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:42:07,756 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:42:07,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:42:08,889 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 52 proven. 58 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-19 07:42:08,889 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:42:08,889 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [786390098] [2022-11-19 07:42:08,890 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [786390098] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:42:08,890 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1526477932] [2022-11-19 07:42:08,890 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-19 07:42:08,890 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:42:08,890 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:42:08,892 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:42:08,898 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-19 07:42:09,000 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-19 07:42:09,000 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 07:42:09,002 INFO L263 TraceCheckSpWp]: Trace formula consists of 301 conjuncts, 33 conjunts are in the unsatisfiable core [2022-11-19 07:42:09,006 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:42:09,252 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 86 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-11-19 07:42:09,252 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 07:42:09,253 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1526477932] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:42:09,253 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 07:42:09,253 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [20] total 25 [2022-11-19 07:42:09,253 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1444721800] [2022-11-19 07:42:09,253 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:42:09,253 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-19 07:42:09,254 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:42:09,254 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-19 07:42:09,254 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=78, Invalid=522, Unknown=0, NotChecked=0, Total=600 [2022-11-19 07:42:09,255 INFO L87 Difference]: Start difference. First operand 1787 states and 2142 transitions. Second operand has 8 states, 8 states have (on average 7.875) internal successors, (63), 8 states have internal predecessors, (63), 4 states have call successors, (11), 4 states have call predecessors, (11), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2022-11-19 07:42:10,118 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:42:10,118 INFO L93 Difference]: Finished difference Result 3662 states and 4467 transitions. [2022-11-19 07:42:10,119 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-19 07:42:10,119 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 7.875) internal successors, (63), 8 states have internal predecessors, (63), 4 states have call successors, (11), 4 states have call predecessors, (11), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) Word has length 116 [2022-11-19 07:42:10,120 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:42:10,121 INFO L225 Difference]: With dead ends: 3662 [2022-11-19 07:42:10,121 INFO L226 Difference]: Without dead ends: 0 [2022-11-19 07:42:10,128 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 141 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 165 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=103, Invalid=709, Unknown=0, NotChecked=0, Total=812 [2022-11-19 07:42:10,129 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 151 mSDsluCounter, 330 mSDsCounter, 0 mSdLazyCounter, 278 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 154 SdHoareTripleChecker+Valid, 443 SdHoareTripleChecker+Invalid, 318 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 278 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-19 07:42:10,129 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [154 Valid, 443 Invalid, 318 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 278 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-19 07:42:10,130 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-19 07:42:10,131 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-19 07:42:10,131 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:42:10,131 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-19 07:42:10,131 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 116 [2022-11-19 07:42:10,132 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:42:10,132 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-19 07:42:10,132 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 7.875) internal successors, (63), 8 states have internal predecessors, (63), 4 states have call successors, (11), 4 states have call predecessors, (11), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2022-11-19 07:42:10,132 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-19 07:42:10,132 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-19 07:42:10,135 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-19 07:42:10,143 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-11-19 07:42:10,341 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-19 07:42:10,343 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-19 07:42:51,443 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 229 236) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (= ~pumpRunning~0 1))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (<= 1 ~waterLevel~0)) .cse2 (not (= ~methaneLevelCritical~0 1)) .cse3) (or .cse0 (not (<= 2 ~waterLevel~0)) .cse1 .cse2 .cse3))) [2022-11-19 07:42:51,443 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 229 236) no Hoare annotation was computed. [2022-11-19 07:42:51,444 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 162 168) no Hoare annotation was computed. [2022-11-19 07:42:51,444 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 162 168) the Hoare annotation is: true [2022-11-19 07:42:51,444 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 558 569) the Hoare annotation is: (let ((.cse4 (not (= 0 ~systemActive~0))) (.cse8 (not (<= 2 ~waterLevel~0))) (.cse9 (not (= ~pumpRunning~0 1))) (.cse5 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse6 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse0 (not (= ~pumpRunning~0 0))) (.cse7 (not (= 1 ~systemActive~0))) (.cse1 (= ~methaneLevelCritical~0 1)) (.cse2 (not (= |old(~methaneLevelCritical~0)| 1))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse6 .cse3 .cse4) (or .cse5 .cse7 .cse6 .cse8 .cse9) (or .cse7 .cse8 .cse1 .cse9 .cse2) (or .cse5 .cse0 .cse7 .cse6 .cse3) (or .cse0 .cse7 .cse1 .cse2 .cse3))) [2022-11-19 07:42:51,444 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 558 569) no Hoare annotation was computed. [2022-11-19 07:42:51,444 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 570 578) the Hoare annotation is: true [2022-11-19 07:42:51,445 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 570 578) no Hoare annotation was computed. [2022-11-19 07:42:51,445 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 356 385) no Hoare annotation was computed. [2022-11-19 07:42:51,445 INFO L902 garLoopResultBuilder]: At program point L381(lines 356 385) the Hoare annotation is: true [2022-11-19 07:42:51,445 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 356 385) the Hoare annotation is: true [2022-11-19 07:42:51,445 INFO L899 garLoopResultBuilder]: For program point L377(line 377) no Hoare annotation was computed. [2022-11-19 07:42:51,445 INFO L899 garLoopResultBuilder]: For program point L370(lines 370 374) no Hoare annotation was computed. [2022-11-19 07:42:51,445 INFO L902 garLoopResultBuilder]: At program point L370-1(lines 370 374) the Hoare annotation is: true [2022-11-19 07:42:51,446 INFO L902 garLoopResultBuilder]: At program point L366-2(lines 366 380) the Hoare annotation is: true [2022-11-19 07:42:51,446 INFO L902 garLoopResultBuilder]: At program point L362(line 362) the Hoare annotation is: true [2022-11-19 07:42:51,446 INFO L899 garLoopResultBuilder]: For program point L362-1(line 362) no Hoare annotation was computed. [2022-11-19 07:42:51,446 INFO L899 garLoopResultBuilder]: For program point L478(lines 478 488) no Hoare annotation was computed. [2022-11-19 07:42:51,449 INFO L895 garLoopResultBuilder]: At program point L474(lines 474 491) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (<= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse21 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse22 (or .cse0 .cse8)) (.cse31 (<= ~waterLevel~0 1))) (let ((.cse17 (and .cse31 (<= 1 ~waterLevel~0))) (.cse16 (not (<= 1 |old(~pumpRunning~0)|))) (.cse19 (not (= |timeShift_processEnvironment_~tmp~2#1| 0))) (.cse20 (= |timeShift_processEnvironment_~tmp~2#1| 1)) (.cse9 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| ~methaneLevelCritical~0)) (.cse18 (not (= |old(~pumpRunning~0)| 1))) (.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse13 (= ~methAndRunningLastTime~0 0)) (.cse7 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse14 (= ~pumpRunning~0 1)) (.cse15 (not (<= 2 |old(~waterLevel~0)|))) (.cse32 (and .cse6 .cse22)) (.cse12 (not (= ~methaneLevelCritical~0 1))) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (= 0 ~systemActive~0))) (.cse24 (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| 0)) (.cse25 (<= 0 |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1|)) (.cse23 (not (= |#NULL.offset| 0))) (.cse10 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse11 (not .cse21)) (.cse26 (not (= ~head~0.offset 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse27 (not (= |#NULL.base| 0))) (.cse28 (not (<= 0 |#StackHeapBarrier|))) (.cse29 (not (= ~head~0.base 0))) (.cse30 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 (and .cse6 .cse7 .cse8 .cse9) .cse10 .cse11 .cse12) (or .cse0 .cse10 .cse11 .cse12 (and .cse13 .cse7 .cse8 .cse9 .cse14) .cse15) (or .cse11 .cse16 .cse1 .cse17 .cse18 .cse2) (or .cse11 .cse16 .cse17 .cse18 .cse12 .cse2) (or .cse11 .cse16 .cse1 .cse18 (and .cse6 .cse19 .cse20 .cse21 .cse7 .cse22) .cse15) (or .cse5 .cse0 .cse10 .cse11 .cse1 (and .cse6 .cse7 .cse8)) (or .cse11 .cse16 .cse18 .cse12 (and .cse6 .cse19 .cse20 .cse21 .cse7 .cse9 .cse22) .cse15) (or .cse23 .cse10 .cse11 (and .cse24 (<= ~methAndRunningLastTime~0 0) (= (ite (= ~waterLevel~0 0) 1 0) 0) .cse25 (<= 0 ~methAndRunningLastTime~0)) .cse26 .cse1 .cse18 .cse27 .cse28 .cse29 .cse30 .cse15) (or .cse5 .cse0 .cse31 .cse12 .cse4) (or .cse5 .cse0 .cse31 .cse1 .cse4) (or .cse0 .cse32 .cse12 .cse4) (or .cse0 .cse10 .cse11 .cse1 (and .cse13 .cse7 .cse8 .cse14) .cse15) (or .cse0 .cse1 .cse32 .cse4) (or .cse0 .cse12 .cse2 .cse3 .cse4) (or .cse0 (and .cse24 .cse25 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) .cse23 .cse10 .cse11 .cse26 .cse1 .cse27 .cse28 .cse29 .cse30))))) [2022-11-19 07:42:51,450 INFO L895 garLoopResultBuilder]: At program point L474-1(lines 466 494) the Hoare annotation is: (let ((.cse13 (not (= |old(~pumpRunning~0)| 0))) (.cse28 (<= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse19 (= 1 ~systemActive~0)) (.cse16 (= ~pumpRunning~0 0)) (.cse14 (= ~methAndRunningLastTime~0 0)) (.cse23 (or .cse13 .cse28)) (.cse30 (<= ~waterLevel~0 1))) (let ((.cse0 (not (= |#NULL.offset| 0))) (.cse5 (not (= ~head~0.offset 0))) (.cse8 (not (= |#NULL.base| 0))) (.cse2 (<= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| 0)) (.cse3 (<= 0 |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1|)) (.cse9 (not (<= 0 |#StackHeapBarrier|))) (.cse10 (not (= ~head~0.base 0))) (.cse11 (not (= ~cleanupTimeShifts~0 4))) (.cse31 (and .cse30 (<= 1 ~waterLevel~0))) (.cse25 (and .cse16 .cse14 .cse23)) (.cse29 (= ~pumpRunning~0 1)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse22 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| ~methaneLevelCritical~0)) (.cse32 (not (<= |old(~waterLevel~0)| 1))) (.cse4 (not .cse19)) (.cse15 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (= |old(~pumpRunning~0)| 1))) (.cse17 (not (= |timeShift_processEnvironment_~tmp~2#1| 0))) (.cse18 (= |timeShift_processEnvironment_~tmp~2#1| 1)) (.cse20 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse12 (not (<= 2 |old(~waterLevel~0)|))) (.cse24 (not (= ~methaneLevelCritical~0 1))) (.cse26 (not (= |old(~waterLevel~0)| 2))) (.cse27 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse21 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 (and .cse2 (= (ite (= ~waterLevel~0 0) 1 0) 0) .cse3) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (or .cse13 .cse0 .cse1 .cse4 .cse5 .cse6 .cse8 (and .cse2 .cse14 .cse3) .cse9 .cse10 .cse11) (or .cse4 .cse15 .cse7 (and .cse16 .cse17 .cse14 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23) .cse24 .cse12) (or .cse13 .cse25 .cse24 .cse21) (or .cse13 .cse6 .cse26 .cse27 .cse21) (or .cse13 .cse1 .cse4 (and (<= 2 ~waterLevel~0) .cse20 .cse28 .cse29) (and .cse16 .cse14 .cse30 .cse20 .cse28 .cse21) .cse6) (or .cse4 .cse15 .cse6 .cse31 .cse7 .cse26) (or .cse4 .cse15 .cse31 .cse7 .cse24 .cse26) (or .cse13 .cse25 .cse6 .cse21) (or .cse13 .cse1 .cse4 (and .cse20 .cse28 .cse22 .cse29) .cse24 .cse12) (or .cse32 .cse13 .cse1 .cse4 .cse24 (and .cse16 .cse14 .cse20 .cse28 .cse21 .cse22)) (or .cse32 .cse13 .cse30 .cse24 .cse21) (or .cse32 .cse13 .cse30 .cse6 .cse21) (or .cse4 .cse15 .cse6 .cse7 (and .cse16 .cse17 .cse14 .cse18 .cse19 .cse20 .cse21 .cse23) .cse12) (or .cse13 .cse24 .cse26 .cse27 .cse21))))) [2022-11-19 07:42:51,450 INFO L895 garLoopResultBuilder]: At program point L210(line 210) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (= 0 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6) (or .cse0 .cse2 .cse5 .cse3) (or .cse4 .cse1 .cse6) (or .cse4 .cse7 .cse0 .cse1) (or .cse4 .cse7 .cse0 .cse5))) [2022-11-19 07:42:51,451 INFO L895 garLoopResultBuilder]: At program point L206(line 206) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= 1 ~systemActive~0))) (let ((.cse2 (not (= 0 ~systemActive~0))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse3 (let ((.cse10 (+ ~waterLevel~0 1))) (and .cse0 (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse9 (<= .cse10 |old(~waterLevel~0)|) (<= |old(~waterLevel~0)| .cse10) (= ~pumpRunning~0 1)))) (.cse4 (not .cse9)) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (not (= ~methaneLevelCritical~0 1))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse6 .cse7) (or .cse0 .cse5 .cse2) (or .cse0 .cse8 .cse4 .cse5) (or .cse0 .cse8 .cse4 .cse1) (or (not (= |#NULL.offset| 0)) .cse8 .cse4 (and (= |timeShift_isLowWaterLevel_~tmp___0~2#1| |timeShift_isLowWaterLevel_~retValue_acc~3#1|) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (= |timeShift_isLowWaterSensorDry_~retValue_acc~10#1| |timeShift_isLowWaterSensorDry_#res#1|) (= |timeShift_isLowWaterLevel_~tmp___0~2#1| 1) (= |timeShift_isLowWaterSensorDry_#res#1| |timeShift_isLowWaterLevel_~tmp~4#1|) (= |timeShift_isLowWaterLevel_~retValue_acc~3#1| |timeShift_isLowWaterLevel_#res#1|) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (not (= ~head~0.offset 0)) .cse5 .cse6 (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)) .cse7) (or .cse3 .cse4 .cse6 .cse1 .cse7)))) [2022-11-19 07:42:51,451 INFO L899 garLoopResultBuilder]: For program point L479(lines 479 485) no Hoare annotation was computed. [2022-11-19 07:42:51,451 INFO L895 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (<= ~waterLevel~0 |old(~waterLevel~0)|) (<= |old(~waterLevel~0)| ~waterLevel~0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse3 .cse5 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse3 .cse5) (or .cse0 .cse4 .cse8) (or .cse3 .cse6 .cse4 .cse7) (or .cse0 .cse5 .cse8))) [2022-11-19 07:42:51,451 INFO L895 garLoopResultBuilder]: At program point L215-1(lines 196 220) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0)) (.cse11 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (<= |old(~waterLevel~0)| ~waterLevel~0)) (.cse25 (= 1 ~systemActive~0)) (.cse10 (<= ~waterLevel~0 1))) (let ((.cse2 (not (= 0 ~systemActive~0))) (.cse6 (and .cse10 (<= 1 ~waterLevel~0))) (.cse8 (not (= |old(~waterLevel~0)| 2))) (.cse1 (not (= ~methaneLevelCritical~0 1))) (.cse14 (= ~methAndRunningLastTime~0 0)) (.cse15 (= ~pumpRunning~0 1)) (.cse18 (not (<= |old(~waterLevel~0)| 1))) (.cse19 (not (= |#NULL.offset| 0))) (.cse13 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse20 (not (= ~head~0.offset 0))) (.cse21 (not (= |#NULL.base| 0))) (.cse22 (not (<= 0 |#StackHeapBarrier|))) (.cse23 (not (= ~head~0.base 0))) (.cse24 (not (= ~cleanupTimeShifts~0 4))) (.cse3 (not .cse25)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (= |old(~pumpRunning~0)| 1))) (.cse16 (and .cse9 (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse25 .cse11 (or .cse0 .cse12))) (.cse17 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse5 .cse2) (or .cse3 .cse4 .cse6 .cse7 .cse1 .cse8) (or (and .cse9 .cse10 .cse11 .cse12) .cse0 .cse13 .cse3 (and .cse14 (<= 2 ~waterLevel~0) .cse11 .cse12 .cse15) .cse1) (or .cse3 .cse4 .cse7 .cse16 .cse1 .cse17) (or .cse18 .cse0 .cse13 .cse3 .cse5 (and .cse9 .cse11 .cse12)) (or .cse19 .cse13 .cse3 .cse20 .cse5 .cse7 .cse21 (and (<= ~methAndRunningLastTime~0 0) (= (ite (= ~waterLevel~0 0) 1 0) 0) (<= 0 ~methAndRunningLastTime~0)) .cse22 .cse23 .cse24 .cse17) (or .cse0 .cse13 .cse3 .cse5 (and .cse14 .cse11 .cse12 .cse15) .cse17) (or .cse18 .cse0 .cse19 .cse13 .cse3 .cse20 .cse5 .cse21 .cse22 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse23 .cse24) (or .cse3 .cse4 .cse5 .cse7 .cse16 .cse17)))) [2022-11-19 07:42:51,451 INFO L899 garLoopResultBuilder]: For program point L149-1(lines 149 155) no Hoare annotation was computed. [2022-11-19 07:42:51,452 INFO L895 garLoopResultBuilder]: At program point L472(line 472) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse13 (<= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse10 (= ~pumpRunning~0 0)) (.cse12 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse27 (or .cse0 .cse13)) (.cse28 (= 1 ~systemActive~0)) (.cse11 (<= ~waterLevel~0 1))) (let ((.cse7 (and .cse11 (<= 1 ~waterLevel~0))) (.cse15 (= ~methAndRunningLastTime~0 0)) (.cse16 (= ~pumpRunning~0 1)) (.cse19 (not (<= |old(~waterLevel~0)| 1))) (.cse20 (not (= |#NULL.offset| 0))) (.cse14 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse21 (not (= ~head~0.offset 0))) (.cse22 (not (= |#NULL.base| 0))) (.cse23 (not (<= 0 |#StackHeapBarrier|))) (.cse24 (not (= ~head~0.base 0))) (.cse25 (not (= ~cleanupTimeShifts~0 4))) (.cse5 (not .cse28)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (= |old(~pumpRunning~0)| 1))) (.cse17 (and .cse10 (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse28 .cse12 .cse27)) (.cse18 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse26 (and .cse10 .cse27)) (.cse9 (not (= ~methaneLevelCritical~0 1))) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse1 .cse7 .cse8 .cse2) (or .cse5 .cse6 .cse7 .cse8 .cse9 .cse2) (or (and .cse10 .cse11 .cse12 .cse13) .cse0 .cse14 .cse5 (and .cse15 (<= 2 ~waterLevel~0) .cse12 .cse13 .cse16) .cse9) (or .cse5 .cse6 .cse8 .cse17 .cse9 .cse18) (or .cse19 .cse0 .cse14 .cse5 .cse1 (and .cse10 .cse12 .cse13)) (or .cse19 .cse0 .cse11 .cse9 .cse4) (or .cse19 .cse0 .cse11 .cse1 .cse4) (or .cse20 .cse14 .cse5 .cse21 .cse1 .cse8 .cse22 (and (<= ~methAndRunningLastTime~0 0) (= (ite (= ~waterLevel~0 0) 1 0) 0) (<= 0 ~methAndRunningLastTime~0)) .cse23 .cse24 .cse25 .cse18) (or .cse0 .cse26 .cse9 .cse4) (or .cse0 .cse14 .cse5 .cse1 (and .cse15 .cse12 .cse13 .cse16) .cse18) (or .cse19 .cse0 .cse20 .cse14 .cse5 .cse21 .cse1 .cse22 .cse23 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse24 .cse25) (or .cse5 .cse6 .cse1 .cse8 .cse17 .cse18) (or .cse0 .cse1 .cse26 .cse4) (or .cse0 .cse9 .cse2 .cse3 .cse4))))) [2022-11-19 07:42:51,452 INFO L899 garLoopResultBuilder]: For program point L472-1(line 472) no Hoare annotation was computed. [2022-11-19 07:42:51,452 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 138 161) the Hoare annotation is: (let ((.cse15 (= 1 ~systemActive~0)) (.cse16 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (= ~pumpRunning~0 0)) (.cse18 (= 0 ~systemActive~0)) (.cse13 (= ~methAndRunningLastTime~0 0)) (.cse14 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse17 (= ~pumpRunning~0 1))) (let ((.cse7 (and .cse13 .cse14 .cse17)) (.cse1 (and .cse16 .cse12 .cse14 .cse18)) (.cse3 (not .cse18)) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse10 (and .cse16 .cse15 .cse14 .cse17)) (.cse9 (not (= ~methaneLevelCritical~0 1))) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not .cse15)) (.cse11 (and .cse12 .cse13 .cse14)) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse2 .cse6 .cse7 .cse8) (or .cse4 .cse5 .cse6 .cse7 .cse9 .cse8) (or .cse5 .cse2 .cse6 .cse10 .cse8) (or .cse0 .cse4 .cse5 .cse11 .cse9) (or .cse0 .cse1 .cse9 .cse3) (or .cse5 .cse6 .cse10 .cse9 .cse8) (or .cse0 .cse4 .cse5 .cse11 .cse2)))) [2022-11-19 07:42:51,452 INFO L899 garLoopResultBuilder]: For program point L142-1(lines 141 160) no Hoare annotation was computed. [2022-11-19 07:42:51,453 INFO L895 garLoopResultBuilder]: At program point L1005(line 1005) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (= 0 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6) (or .cse0 .cse2 .cse5 .cse3) (or .cse4 .cse1 .cse6) (or .cse4 .cse7 .cse0 .cse1) (or .cse4 .cse7 .cse0 .cse5))) [2022-11-19 07:42:51,453 INFO L899 garLoopResultBuilder]: For program point L204(lines 204 212) no Hoare annotation was computed. [2022-11-19 07:42:51,453 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 138 161) no Hoare annotation was computed. [2022-11-19 07:42:51,453 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1005) no Hoare annotation was computed. [2022-11-19 07:42:51,453 INFO L895 garLoopResultBuilder]: At program point L200(lines 200 217) the Hoare annotation is: (let ((.cse18 (+ ~waterLevel~0 1)) (.cse8 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse14 (<= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse15 (= 1 ~systemActive~0)) (.cse6 (or .cse0 .cse14)) (.cse4 (let ((.cse19 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (<= .cse18 |old(~waterLevel~0)|) (and (not (< 0 ~waterLevel~0)) .cse19) (and .cse8 .cse19)))) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse16 (<= |old(~waterLevel~0)| .cse18)) (.cse17 (= ~pumpRunning~0 1))) (let ((.cse7 (not (= 0 ~systemActive~0))) (.cse10 (and .cse4 .cse5 .cse16 .cse17)) (.cse3 (not (= ~methaneLevelCritical~0 1))) (.cse11 (not (= |old(~pumpRunning~0)| 1))) (.cse13 (and .cse4 .cse15 .cse16 .cse17 .cse6)) (.cse12 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not .cse15)) (.cse9 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6)) (or .cse0 .cse3 .cse7) (or .cse0 .cse8 .cse1 .cse2 .cse3) (or .cse0 .cse9 .cse7) (or .cse1 .cse10 .cse2 .cse9 .cse11 .cse12) (or .cse1 .cse10 .cse2 .cse11 .cse3 .cse12) (or .cse2 .cse11 .cse3 .cse13 .cse12) (or .cse2 .cse9 .cse11 .cse13 .cse12) (or (and .cse4 .cse8 .cse5 .cse14) .cse0 .cse1 .cse2 .cse9))))) [2022-11-19 07:42:51,453 INFO L895 garLoopResultBuilder]: At program point L337(line 337) the Hoare annotation is: (let ((.cse1 (<= 2 ~waterLevel~0))) (let ((.cse0 (let ((.cse2 (<= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse3 (<= |ULTIMATE.start_test_~tmp___2~0#1| 2147483647)) (.cse4 (<= ~methAndRunningLastTime~0 0)) (.cse5 (<= 1 |ULTIMATE.start_valid_product_~retValue_acc~6#1|)) (.cse6 (= ~head~0.offset 0)) (.cse8 (<= 0 ~methAndRunningLastTime~0)) (.cse9 (<= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse10 (<= 0 (+ |ULTIMATE.start_test_~tmp~0#1| 2147483648))) (.cse11 (<= ~methaneLevelCritical~0 0)) (.cse13 (= |ULTIMATE.start_test_~tmp___0~0#1| 0)) (.cse14 (<= 0 ~methaneLevelCritical~0)) (.cse15 (= ~head~0.base 0)) (.cse16 (= |#NULL.offset| 0)) (.cse17 (<= |ULTIMATE.start_valid_product_~retValue_acc~6#1| 1)) (.cse18 (<= 0 (+ |ULTIMATE.start_test_~tmp___2~0#1| 2147483648))) (.cse19 (<= |ULTIMATE.start_test_~tmp~0#1| 2147483647)) (.cse20 (<= 0 |#StackHeapBarrier|)) (.cse22 (= ~cleanupTimeShifts~0 4)) (.cse23 (= |#NULL.base| 0)) (.cse7 (= 1 ~systemActive~0)) (.cse12 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse24 (= |ULTIMATE.start_main_~tmp~5#1| 1)) (.cse25 (not (= 0 ~systemActive~0))) (.cse21 (= ~pumpRunning~0 1))) (or (and .cse2 .cse3 (<= |ULTIMATE.start_main_~tmp~5#1| 1) .cse4 .cse5 .cse6 (not (= |ULTIMATE.start_test_~tmp~0#1| 0)) (<= 1 |ULTIMATE.start_main_~tmp~5#1|) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23) (and .cse2 .cse3 (not (= (ite (= ~waterLevel~0 0) 1 0) 0)) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse24 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse25 .cse21 .cse22 .cse23) (and .cse1 .cse7 .cse12 .cse24 .cse25 .cse21))))) (or (and .cse0 (= ~methaneLevelCritical~0 1)) (and (= ~methaneLevelCritical~0 0) .cse1 .cse0)))) [2022-11-19 07:42:51,454 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-19 07:42:51,454 INFO L902 garLoopResultBuilder]: At program point L119(lines 56 123) the Hoare annotation is: true [2022-11-19 07:42:51,454 INFO L899 garLoopResultBuilder]: For program point L86(lines 86 92) no Hoare annotation was computed. [2022-11-19 07:42:51,454 INFO L899 garLoopResultBuilder]: For program point L86-1(lines 86 92) no Hoare annotation was computed. [2022-11-19 07:42:51,454 INFO L895 garLoopResultBuilder]: At program point L78(line 78) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse3 (= ~methaneLevelCritical~0 1)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~5#1| 1)) (.cse9 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse4 .cse5 .cse7) (and .cse0 .cse1 .cse3 .cse4 .cse5 .cse7) (and .cse0 .cse1 .cse6 .cse2 .cse4 .cse5) (and .cse8 .cse2 .cse3 .cse4 .cse5 .cse9) (and .cse6 .cse8 .cse2 .cse4 .cse5 .cse9))) [2022-11-19 07:42:51,454 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-19 07:42:51,455 INFO L895 garLoopResultBuilder]: At program point L442(lines 442 449) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (and (= (select |#length| 15) 25) (= 9 (select |#length| 5)) (= (select |#length| 9) 21) (= 30 (select |#length| 7)) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= (select |#valid| 9) 1) (= (select |#length| 12) 25) (= (select |#valid| 11) 1) (= ~methaneLevelCritical~0 0) (= 30 (select |#length| 4)) (= |ULTIMATE.start_valid_product_~retValue_acc~6#1| |ULTIMATE.start_valid_product_#res#1|) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= 2 (select |#length| 1)) (= (select |#length| 8) 9) (= (select |#valid| 3) 1) (= (select |#valid| 7) 1) (= 30 (select |#length| 13)) (= 1 ~systemActive~0) (= 30 (select |#length| 10)) (= (select |#valid| 12) 1) (= (select |#valid| 4) 1) (= (select |#valid| 1) 1) (= (select |#length| 6) 21) (= (select |#valid| 14) 1) (= |ULTIMATE.start_main_~tmp~5#1| 1) (= 9 (select |#length| 14)) (= (select |#valid| 0) 0) (= ~head~0.base 0) (= (select |#valid| 2) 1) (= |#NULL.offset| 0) (= 9 (select |#length| 11)) (= ~waterLevel~0 1) (= (select .cse0 0) 48) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_main_~tmp~5#1|) (= (select |#valid| 6) 1) (= (select .cse0 1) 0) (= (select |#valid| 10) 1) (= (select |#valid| 8) 1) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))) [2022-11-19 07:42:51,455 INFO L902 garLoopResultBuilder]: At program point L442-2(lines 442 449) the Hoare annotation is: true [2022-11-19 07:42:51,455 INFO L895 garLoopResultBuilder]: At program point L116(lines 65 117) the Hoare annotation is: false [2022-11-19 07:42:51,455 INFO L899 garLoopResultBuilder]: For program point L335(lines 335 341) no Hoare annotation was computed. [2022-11-19 07:42:51,455 INFO L895 garLoopResultBuilder]: At program point L335-1(lines 335 341) the Hoare annotation is: (let ((.cse0 (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse1 (let ((.cse3 (= ~pumpRunning~0 0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~5#1| 1))) (or (and .cse3 .cse4 .cse5 (not .cse2)) (and .cse3 (= ~methAndRunningLastTime~0 0) .cse4 .cse5))))) (or (and (= 1 ~systemActive~0) .cse1) (and .cse1 (or (< 1 ~waterLevel~0) .cse2))))))) (or (and .cse0 (= ~methaneLevelCritical~0 1)) (and (= ~methaneLevelCritical~0 0) .cse0))) [2022-11-19 07:42:51,455 INFO L899 garLoopResultBuilder]: For program point L104(lines 104 110) no Hoare annotation was computed. [2022-11-19 07:42:51,456 INFO L895 garLoopResultBuilder]: At program point L104-2(lines 96 111) the Hoare annotation is: (let ((.cse1 (= ~methAndRunningLastTime~0 0)) (.cse3 (= ~methaneLevelCritical~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (= 0 ~systemActive~0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~5#1| 1)) (.cse9 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse7 .cse2 .cse4 .cse5) (and .cse8 .cse2 .cse3 .cse4 .cse5 .cse9) (and .cse0 .cse7 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse4 .cse5 .cse9))) [2022-11-19 07:42:51,456 INFO L899 garLoopResultBuilder]: For program point L67(lines 66 115) no Hoare annotation was computed. [2022-11-19 07:42:51,456 INFO L895 garLoopResultBuilder]: At program point L96(lines 96 111) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse3 (= ~methaneLevelCritical~0 1)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~5#1| 1)) (.cse9 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse4 .cse5 .cse7) (and .cse0 .cse1 .cse3 .cse4 .cse5 .cse7) (and .cse0 .cse1 .cse6 .cse2 .cse4 .cse5) (and .cse8 .cse2 .cse3 .cse4 .cse5 .cse9) (and .cse6 .cse8 .cse2 .cse4 .cse5 .cse9))) [2022-11-19 07:42:51,456 INFO L895 garLoopResultBuilder]: At program point L88(line 88) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse3 (= ~methaneLevelCritical~0 1)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~5#1| 1)) (.cse9 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse4 .cse5 .cse7) (and .cse0 .cse1 .cse3 .cse4 .cse5 .cse7) (and .cse0 .cse1 .cse6 .cse2 .cse4 .cse5) (and .cse8 .cse2 .cse3 .cse4 .cse5 .cse9) (and .cse6 .cse8 .cse2 .cse4 .cse5 .cse9))) [2022-11-19 07:42:51,456 INFO L895 garLoopResultBuilder]: At program point L113(lines 66 115) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse3 (= ~methaneLevelCritical~0 1)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~5#1| 1)) (.cse9 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse4 .cse5 .cse7) (and .cse0 .cse1 .cse3 .cse4 .cse5 .cse7) (and .cse0 .cse1 .cse6 .cse2 .cse4 .cse5) (and .cse8 .cse2 .cse3 .cse4 .cse5 .cse9) (and .cse6 .cse8 .cse2 .cse4 .cse5 .cse9))) [2022-11-19 07:42:51,457 INFO L899 garLoopResultBuilder]: For program point L76(lines 76 82) no Hoare annotation was computed. [2022-11-19 07:42:51,457 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 76 82) no Hoare annotation was computed. [2022-11-19 07:42:51,457 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 170 194) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 1)) .cse3) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3))) [2022-11-19 07:42:51,457 INFO L895 garLoopResultBuilder]: At program point L184(line 184) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) (< ~waterLevel~0 2) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 1)) .cse3) (or .cse0 (not (= |#NULL.offset| 0)) .cse2 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~2#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~9#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~9#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1|)) (not (= ~head~0.offset 0)) .cse4 (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) .cse3 (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))) (or .cse0 .cse1 .cse2 .cse4 .cse3))) [2022-11-19 07:42:51,458 INFO L895 garLoopResultBuilder]: At program point L178(lines 178 186) the Hoare annotation is: (let ((.cse2 (< ~waterLevel~0 2))) (let ((.cse1 (not .cse2))) (let ((.cse8 (= ~pumpRunning~0 0)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse9 (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (.cse7 (not (= ~methAndRunningLastTime~0 0))) (.cse10 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 1)))) (and (or (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~2#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (let ((.cse0 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~9#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|))) (or (and .cse0 .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~9#1| 0)) (and .cse0 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~9#1| 1) .cse2))) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1|) (let ((.cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 0))) (or (and .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 1)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (not .cse3))))) .cse4 (not (= |#NULL.offset| 0)) .cse5 (not (= ~head~0.offset 0)) .cse6 (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) .cse7 (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))) (or .cse4 .cse8 .cse5 .cse6 .cse7) (or .cse4 .cse5 (and .cse8 (or .cse9 .cse10)) (not (= ~methaneLevelCritical~0 1)) .cse7) (or .cse4 .cse5 .cse6 .cse9 .cse7 .cse10))))) [2022-11-19 07:42:51,458 INFO L895 garLoopResultBuilder]: At program point L174(lines 174 191) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 1)) .cse3) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3))) [2022-11-19 07:42:51,458 INFO L895 garLoopResultBuilder]: At program point L189(line 189) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 1)) .cse2) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-11-19 07:42:51,458 INFO L899 garLoopResultBuilder]: For program point L189-1(lines 170 194) no Hoare annotation was computed. [2022-11-19 07:42:51,459 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 170 194) no Hoare annotation was computed. [2022-11-19 07:42:51,459 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 546 557) no Hoare annotation was computed. [2022-11-19 07:42:51,459 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 546 557) the Hoare annotation is: (let ((.cse6 (not (= ~pumpRunning~0 1))) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (= 0 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse2 .cse8) (or .cse5 .cse1 .cse6 .cse2 .cse8) (or .cse0 .cse7 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse1 .cse2 .cse3) (or .cse0 .cse5 .cse7 .cse2 .cse3))) [2022-11-19 07:42:51,462 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:42:51,464 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-19 07:42:51,556 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 07:42:51 BoogieIcfgContainer [2022-11-19 07:42:51,556 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-19 07:42:51,557 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-19 07:42:51,557 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-19 07:42:51,557 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-19 07:42:51,558 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:40:51" (3/4) ... [2022-11-19 07:42:51,561 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-19 07:42:51,568 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-19 07:42:51,570 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-19 07:42:51,570 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-19 07:42:51,570 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-19 07:42:51,570 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-19 07:42:51,570 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-19 07:42:51,571 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 07:42:51,571 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-19 07:42:51,583 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 46 nodes and edges [2022-11-19 07:42:51,584 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 13 nodes and edges [2022-11-19 07:42:51,585 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-19 07:42:51,585 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-19 07:42:51,586 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-19 07:42:51,615 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && pumpRunning == 0) && methAndRunningLastTime == 0) && \valid[9] == 1) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && retValue_acc == \result) && 31 == unknown-#length-unknown[2]) && head == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && 30 == unknown-#length-unknown[13]) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && tmp == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[1][0] == 48) && \result == tmp) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 [2022-11-19 07:42:51,616 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel) && 0 == systemActive)) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (((pumpRunning == \old(pumpRunning) && 1 == systemActive) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 1))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel) && 0 == systemActive)) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (((pumpRunning == \old(pumpRunning) && 1 == systemActive) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) [2022-11-19 07:42:51,617 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || ((((waterLevel + 1 <= \old(waterLevel) || (!(0 < waterLevel) && waterLevel <= \old(waterLevel))) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && methAndRunningLastTime == 0) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((((!(\old(methAndRunningLastTime) == 0) || (((((waterLevel + 1 <= \old(waterLevel) || (!(0 < waterLevel) && waterLevel <= \old(waterLevel))) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(2 <= \old(waterLevel)))) && (((((!(\old(methAndRunningLastTime) == 0) || (((((waterLevel + 1 <= \old(waterLevel) || (!(0 < waterLevel) && waterLevel <= \old(waterLevel))) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && pumpRunning == 1)) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || ((((((waterLevel + 1 <= \old(waterLevel) || (!(0 < waterLevel) && waterLevel <= \old(waterLevel))) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && pumpRunning == 1) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((((((waterLevel + 1 <= \old(waterLevel) || (!(0 < waterLevel) && waterLevel <= \old(waterLevel))) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && pumpRunning == 1) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel)))) && (((((((((waterLevel + 1 <= \old(waterLevel) || (!(0 < waterLevel) && waterLevel <= \old(waterLevel))) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-11-19 07:42:51,618 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(0 == systemActive)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((methAndRunningLastTime == 0 && 2 <= waterLevel) && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(pumpRunning) == 1)) || ((((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel))) && (((((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || ((methAndRunningLastTime <= 0 && (if waterLevel == 0 then 1 else 0) == 0) && 0 <= methAndRunningLastTime)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((methAndRunningLastTime == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(#NULL == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || \old(methAndRunningLastTime) == methAndRunningLastTime) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel))) [2022-11-19 07:42:51,618 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(methAndRunningLastTime == 0)) [2022-11-19 07:42:51,619 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || \old(waterLevel) == waterLevel) || !(0 == systemActive)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || ((((methAndRunningLastTime == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (((((pumpRunning == 0 && !(tmp == 0)) && tmp == 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || ((((((pumpRunning == 0 && !(tmp == 0)) && tmp == 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel)))) && (((((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((tmp <= 0 && methAndRunningLastTime <= 0) && (if waterLevel == 0 then 1 else 0) == 0) && 0 <= tmp) && 0 <= methAndRunningLastTime)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || waterLevel <= 1) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || waterLevel <= 1) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((methAndRunningLastTime == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2)) || \old(waterLevel) == waterLevel) || !(0 == systemActive))) && ((((((((((!(\old(pumpRunning) == 0) || ((tmp <= 0 && 0 <= tmp) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(#NULL == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) [2022-11-19 07:42:51,620 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || ((tmp <= 0 && (if waterLevel == 0 then 1 else 0) == 0) && 0 <= tmp)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel))) && ((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || ((tmp <= 0 && methAndRunningLastTime == 0) && 0 <= tmp)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(pumpRunning) == 1)) || ((((((((pumpRunning == 0 && !(tmp == 0)) && methAndRunningLastTime == 0) && tmp == 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && !(0 == systemActive)) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || \old(waterLevel) == waterLevel) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((2 <= waterLevel && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && pumpRunning == 1)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((waterLevel <= \old(waterLevel) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && !(0 == systemActive)) && tmp == methaneLevelCritical))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || waterLevel <= 1) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || waterLevel <= 1) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (((((((pumpRunning == 0 && !(tmp == 0)) && methAndRunningLastTime == 0) && tmp == 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && !(0 == systemActive)) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2)) || \old(waterLevel) == waterLevel) || !(0 == systemActive)) [2022-11-19 07:42:51,621 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) [2022-11-19 07:42:51,623 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((retValue_acc == \result && (((retValue_acc == \result && !(waterLevel < 2)) && retValue_acc == 0) || ((retValue_acc == \result && retValue_acc == 1) && waterLevel < 2))) && tmp == \result) && \result == tmp) && ((tmp == 0 && tmp___0 == 1) || (tmp___0 == 0 && !(tmp == 0)))) || !(\old(pumpRunning) == 0)) || !(#NULL == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(methAndRunningLastTime == 0)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && ((waterLevel < 2 && tmp == 0) || (!(waterLevel < 2) && tmp == 1)))) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (waterLevel < 2 && tmp == 0)) || !(methAndRunningLastTime == 0)) || (!(waterLevel < 2) && tmp == 1)) [2022-11-19 07:42:51,669 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/witness.graphml [2022-11-19 07:42:51,670 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-19 07:42:51,671 INFO L158 Benchmark]: Toolchain (without parser) took 121263.06ms. Allocated memory was 121.6MB in the beginning and 809.5MB in the end (delta: 687.9MB). Free memory was 82.3MB in the beginning and 671.3MB in the end (delta: -589.0MB). Peak memory consumption was 98.8MB. Max. memory is 16.1GB. [2022-11-19 07:42:51,671 INFO L158 Benchmark]: CDTParser took 0.25ms. Allocated memory is still 121.6MB. Free memory is still 99.5MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-19 07:42:51,671 INFO L158 Benchmark]: CACSL2BoogieTranslator took 534.62ms. Allocated memory is still 121.6MB. Free memory was 82.1MB in the beginning and 89.5MB in the end (delta: -7.4MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-11-19 07:42:51,673 INFO L158 Benchmark]: Boogie Procedure Inliner took 46.59ms. Allocated memory is still 121.6MB. Free memory was 89.5MB in the beginning and 87.1MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-19 07:42:51,673 INFO L158 Benchmark]: Boogie Preprocessor took 28.37ms. Allocated memory is still 121.6MB. Free memory was 87.1MB in the beginning and 85.4MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-19 07:42:51,674 INFO L158 Benchmark]: RCFGBuilder took 640.02ms. Allocated memory is still 121.6MB. Free memory was 85.4MB in the beginning and 60.3MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. [2022-11-19 07:42:51,674 INFO L158 Benchmark]: TraceAbstraction took 119893.87ms. Allocated memory was 121.6MB in the beginning and 809.5MB in the end (delta: 687.9MB). Free memory was 59.5MB in the beginning and 676.5MB in the end (delta: -617.0MB). Peak memory consumption was 468.1MB. Max. memory is 16.1GB. [2022-11-19 07:42:51,674 INFO L158 Benchmark]: Witness Printer took 112.93ms. Allocated memory is still 809.5MB. Free memory was 676.5MB in the beginning and 671.3MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-19 07:42:51,679 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.25ms. Allocated memory is still 121.6MB. Free memory is still 99.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 534.62ms. Allocated memory is still 121.6MB. Free memory was 82.1MB in the beginning and 89.5MB in the end (delta: -7.4MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 46.59ms. Allocated memory is still 121.6MB. Free memory was 89.5MB in the beginning and 87.1MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 28.37ms. Allocated memory is still 121.6MB. Free memory was 87.1MB in the beginning and 85.4MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 640.02ms. Allocated memory is still 121.6MB. Free memory was 85.4MB in the beginning and 60.3MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. * TraceAbstraction took 119893.87ms. Allocated memory was 121.6MB in the beginning and 809.5MB in the end (delta: 687.9MB). Free memory was 59.5MB in the beginning and 676.5MB in the end (delta: -617.0MB). Peak memory consumption was 468.1MB. Max. memory is 16.1GB. * Witness Printer took 112.93ms. Allocated memory is still 809.5MB. Free memory was 676.5MB in the beginning and 671.3MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1005]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 64 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 119.7s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 27.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 41.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2949 SdHoareTripleChecker+Valid, 8.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2910 mSDsluCounter, 4508 SdHoareTripleChecker+Invalid, 7.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3547 mSDsCounter, 1433 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 7487 IncrementalHoareTripleChecker+Invalid, 8920 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1433 mSolverCounterUnsat, 961 mSDtfsCounter, 7487 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1304 GetRequests, 922 SyntacticMatches, 25 SemanticMatches, 357 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10096 ImplicationChecksByTransitivity, 45.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1787occurred in iteration=12, InterpolantAutomatonStates: 203, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.0s AutomataMinimizationTime, 13 MinimizatonAttempts, 470 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 37 LocationsWithAnnotation, 3042 PreInvPairs, 3717 NumberOfFragments, 5111 HoareAnnotationTreeSize, 3042 FomulaSimplifications, 32132 FormulaSimplificationTreeSizeReduction, 11.8s HoareSimplificationTime, 37 FomulaSimplificationsInter, 491464 FormulaSimplificationTreeSizeReductionInter, 29.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 8.2s InterpolantComputationTime, 1351 NumberOfCodeBlocks, 1298 NumberOfCodeBlocksAsserted, 21 NumberOfCheckSat, 1570 ConstructedInterpolants, 0 QuantifiedInterpolants, 5303 SizeOfPredicates, 68 NumberOfNonLiveVariables, 2442 ConjunctsInSsa, 184 ConjunctsInUnsatCore, 23 InterpolantComputations, 10 PerfectInterpolantSequences, 976/1187 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 8.5s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 12, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 106, DAG_INTERPRETER_EARLY_EXITS: 6, TOOLS_POST_APPLICATIONS: 133, TOOLS_POST_TIME: 2.9s, TOOLS_POST_CALL_APPLICATIONS: 67, TOOLS_POST_CALL_TIME: 3.3s, TOOLS_POST_RETURN_APPLICATIONS: 56, TOOLS_POST_RETURN_TIME: 1.2s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 254, TOOLS_QUANTIFIERELIM_TIME: 7.3s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.3s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 316, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 60, DOMAIN_JOIN_TIME: 0.8s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 2, DOMAIN_WIDEN_TIME: 0.0s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 4, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 106, DOMAIN_ISBOTTOM_TIME: 0.2s, LOOP_SUMMARIZER_APPLICATIONS: 2, LOOP_SUMMARIZER_CACHE_MISSES: 2, LOOP_SUMMARIZER_OVERALL_TIME: 4.4s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 4.4s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 4, CALL_SUMMARIZER_APPLICATIONS: 56, CALL_SUMMARIZER_CACHE_MISSES: 11, CALL_SUMMARIZER_OVERALL_TIME: 0.2s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.2s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 1492, DAG_COMPRESSION_RETAINED_NODES: 273, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 56]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 200]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || ((((waterLevel + 1 <= \old(waterLevel) || (!(0 < waterLevel) && waterLevel <= \old(waterLevel))) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && methAndRunningLastTime == 0) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((((!(\old(methAndRunningLastTime) == 0) || (((((waterLevel + 1 <= \old(waterLevel) || (!(0 < waterLevel) && waterLevel <= \old(waterLevel))) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(2 <= \old(waterLevel)))) && (((((!(\old(methAndRunningLastTime) == 0) || (((((waterLevel + 1 <= \old(waterLevel) || (!(0 < waterLevel) && waterLevel <= \old(waterLevel))) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && pumpRunning == 1)) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || ((((((waterLevel + 1 <= \old(waterLevel) || (!(0 < waterLevel) && waterLevel <= \old(waterLevel))) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && pumpRunning == 1) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((((((waterLevel + 1 <= \old(waterLevel) || (!(0 < waterLevel) && waterLevel <= \old(waterLevel))) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && pumpRunning == 1) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel)))) && (((((((((waterLevel + 1 <= \old(waterLevel) || (!(0 < waterLevel) && waterLevel <= \old(waterLevel))) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 466]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || ((tmp <= 0 && (if waterLevel == 0 then 1 else 0) == 0) && 0 <= tmp)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel))) && ((((((((((!(\old(pumpRunning) == 0) || !(#NULL == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || ((tmp <= 0 && methAndRunningLastTime == 0) && 0 <= tmp)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(pumpRunning) == 1)) || ((((((((pumpRunning == 0 && !(tmp == 0)) && methAndRunningLastTime == 0) && tmp == 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && !(0 == systemActive)) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || \old(waterLevel) == waterLevel) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((2 <= waterLevel && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && pumpRunning == 1)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((waterLevel <= \old(waterLevel) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && !(0 == systemActive)) && tmp == methaneLevelCritical))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || waterLevel <= 1) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || waterLevel <= 1) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (((((((pumpRunning == 0 && !(tmp == 0)) && methAndRunningLastTime == 0) && tmp == 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && !(0 == systemActive)) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2)) || \old(waterLevel) == waterLevel) || !(0 == systemActive)) - InvariantResult [Line: 138]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel) && 0 == systemActive)) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (((pumpRunning == \old(pumpRunning) && 1 == systemActive) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 1))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel) && 0 == systemActive)) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (((pumpRunning == \old(pumpRunning) && 1 == systemActive) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 196]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(0 == systemActive)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((methAndRunningLastTime == 0 && 2 <= waterLevel) && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(pumpRunning) == 1)) || ((((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel))) && (((((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || ((methAndRunningLastTime <= 0 && (if waterLevel == 0 then 1 else 0) == 0) && 0 <= methAndRunningLastTime)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((methAndRunningLastTime == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(#NULL == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || \old(methAndRunningLastTime) == methAndRunningLastTime) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 474]: Loop Invariant Derived loop invariant: ((((((((((((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || \old(waterLevel) == waterLevel) || !(0 == systemActive)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || ((((methAndRunningLastTime == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && tmp == methaneLevelCritical) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (waterLevel <= 1 && 1 <= waterLevel)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (((((pumpRunning == 0 && !(tmp == 0)) && tmp == 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || ((((((pumpRunning == 0 && !(tmp == 0)) && tmp == 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(2 <= \old(waterLevel)))) && (((((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((tmp <= 0 && methAndRunningLastTime <= 0) && (if waterLevel == 0 then 1 else 0) == 0) && 0 <= tmp) && 0 <= methAndRunningLastTime)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || waterLevel <= 1) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || waterLevel <= 1) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((methAndRunningLastTime == 0 && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2)) || \old(waterLevel) == waterLevel) || !(0 == systemActive))) && ((((((((((!(\old(pumpRunning) == 0) || ((tmp <= 0 && 0 <= tmp) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(#NULL == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) - InvariantResult [Line: 366]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && pumpRunning == 0) && methAndRunningLastTime == 0) && \valid[9] == 1) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && retValue_acc == \result) && 31 == unknown-#length-unknown[2]) && head == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && 30 == unknown-#length-unknown[13]) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && tmp == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[1][0] == 48) && \result == tmp) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 - InvariantResult [Line: 96]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && tmp == 1) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && splverifierCounter == 0) && tmp == 1) && 0 == systemActive)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 1) && splverifierCounter == 0) && tmp == 1) && 0 == systemActive)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && tmp == 1)) || (((((2 <= waterLevel && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && tmp == 1) && pumpRunning == 1)) || (((((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && tmp == 1) && pumpRunning == 1) - InvariantResult [Line: 335]: Loop Invariant Derived loop invariant: (((1 == systemActive && ((((pumpRunning == 0 && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && tmp == 1))) || (((((pumpRunning == 0 && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && tmp == 1)) && (1 < waterLevel || 0 == systemActive))) && methaneLevelCritical == 1) || (methaneLevelCritical == 0 && ((1 == systemActive && ((((pumpRunning == 0 && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && tmp == 1))) || (((((pumpRunning == 0 && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && tmp == 1)) && (1 < waterLevel || 0 == systemActive)))) - InvariantResult [Line: 178]: Loop Invariant Derived loop invariant: ((((((((((((((((retValue_acc == \result && (((retValue_acc == \result && !(waterLevel < 2)) && retValue_acc == 0) || ((retValue_acc == \result && retValue_acc == 1) && waterLevel < 2))) && tmp == \result) && \result == tmp) && ((tmp == 0 && tmp___0 == 1) || (tmp___0 == 0 && !(tmp == 0)))) || !(\old(pumpRunning) == 0)) || !(#NULL == 0)) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(methAndRunningLastTime == 0)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && ((waterLevel < 2 && tmp == 0) || (!(waterLevel < 2) && tmp == 1)))) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (waterLevel < 2 && tmp == 0)) || !(methAndRunningLastTime == 0)) || (!(waterLevel < 2) && tmp == 1)) - InvariantResult [Line: 174]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 1)) || !(0 == systemActive))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && tmp == 1) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && splverifierCounter == 0) && tmp == 1) && 0 == systemActive)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 1) && splverifierCounter == 0) && tmp == 1) && 0 == systemActive)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && tmp == 1)) || (((((2 <= waterLevel && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && tmp == 1) && pumpRunning == 1)) || (((((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && tmp == 1) && pumpRunning == 1) - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 356]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-11-19 07:42:51,744 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48e1004d-385f-442a-9d9c-ddfc29f7d3f6/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE