./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash bff509ff7af2b9788fd6216f7196709183d48c973cf9a066c9793f96467b2abf --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-19 06:41:33,509 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-19 06:41:33,512 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-19 06:41:33,534 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-19 06:41:33,534 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-19 06:41:33,536 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-19 06:41:33,538 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-19 06:41:33,540 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-19 06:41:33,542 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-19 06:41:33,543 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-19 06:41:33,544 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-19 06:41:33,546 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-19 06:41:33,546 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-19 06:41:33,548 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-19 06:41:33,549 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-19 06:41:33,551 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-19 06:41:33,552 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-19 06:41:33,553 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-19 06:41:33,555 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-19 06:41:33,558 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-19 06:41:33,559 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-19 06:41:33,561 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-19 06:41:33,563 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-19 06:41:33,564 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-19 06:41:33,570 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-19 06:41:33,580 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-19 06:41:33,581 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-19 06:41:33,582 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-19 06:41:33,583 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-19 06:41:33,584 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-19 06:41:33,584 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-19 06:41:33,585 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-19 06:41:33,586 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-19 06:41:33,587 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-19 06:41:33,589 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-19 06:41:33,589 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-19 06:41:33,590 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-19 06:41:33,595 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-19 06:41:33,596 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-19 06:41:33,598 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-19 06:41:33,599 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-19 06:41:33,600 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-19 06:41:33,645 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-19 06:41:33,654 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-19 06:41:33,655 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-19 06:41:33,655 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-19 06:41:33,656 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-19 06:41:33,656 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-19 06:41:33,656 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-19 06:41:33,657 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-19 06:41:33,657 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-19 06:41:33,657 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-19 06:41:33,658 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-19 06:41:33,659 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-19 06:41:33,660 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-19 06:41:33,661 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-19 06:41:33,661 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-19 06:41:33,661 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-19 06:41:33,662 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-19 06:41:33,662 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-19 06:41:33,663 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-19 06:41:33,664 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-19 06:41:33,664 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-19 06:41:33,664 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-19 06:41:33,665 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-19 06:41:33,666 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-19 06:41:33,667 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-19 06:41:33,667 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-19 06:41:33,667 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-19 06:41:33,667 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-19 06:41:33,668 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-19 06:41:33,668 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-19 06:41:33,668 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-19 06:41:33,669 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-19 06:41:33,669 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 06:41:33,669 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-19 06:41:33,670 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-19 06:41:33,670 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-19 06:41:33,670 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-19 06:41:33,670 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-19 06:41:33,671 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-19 06:41:33,671 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-19 06:41:33,671 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-19 06:41:33,671 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> bff509ff7af2b9788fd6216f7196709183d48c973cf9a066c9793f96467b2abf [2022-11-19 06:41:34,020 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-19 06:41:34,049 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-19 06:41:34,052 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-19 06:41:34,054 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-19 06:41:34,055 INFO L275 PluginConnector]: CDTParser initialized [2022-11-19 06:41:34,056 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/../../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c [2022-11-19 06:41:34,155 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/data/23ab2a888/70b39977052045f1aedf9a37ca986b45/FLAG1bb232ebc [2022-11-19 06:41:34,794 INFO L306 CDTParser]: Found 1 translation units. [2022-11-19 06:41:34,795 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c [2022-11-19 06:41:34,819 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/data/23ab2a888/70b39977052045f1aedf9a37ca986b45/FLAG1bb232ebc [2022-11-19 06:41:35,033 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/data/23ab2a888/70b39977052045f1aedf9a37ca986b45 [2022-11-19 06:41:35,037 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-19 06:41:35,041 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-19 06:41:35,047 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-19 06:41:35,047 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-19 06:41:35,052 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-19 06:41:35,053 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 06:41:35" (1/1) ... [2022-11-19 06:41:35,055 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5aeab944 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:41:35, skipping insertion in model container [2022-11-19 06:41:35,056 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 06:41:35" (1/1) ... [2022-11-19 06:41:35,066 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-19 06:41:35,148 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-19 06:41:35,492 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c[2985,2998] [2022-11-19 06:41:35,599 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 06:41:35,609 INFO L203 MainTranslator]: Completed pre-run [2022-11-19 06:41:35,630 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c[2985,2998] [2022-11-19 06:41:35,691 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 06:41:35,711 INFO L208 MainTranslator]: Completed translation [2022-11-19 06:41:35,712 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:41:35 WrapperNode [2022-11-19 06:41:35,712 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-19 06:41:35,713 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-19 06:41:35,714 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-19 06:41:35,714 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-19 06:41:35,729 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:41:35" (1/1) ... [2022-11-19 06:41:35,758 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:41:35" (1/1) ... [2022-11-19 06:41:35,805 INFO L138 Inliner]: procedures = 59, calls = 107, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 225 [2022-11-19 06:41:35,806 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-19 06:41:35,807 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-19 06:41:35,807 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-19 06:41:35,808 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-19 06:41:35,819 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:41:35" (1/1) ... [2022-11-19 06:41:35,820 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:41:35" (1/1) ... [2022-11-19 06:41:35,834 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:41:35" (1/1) ... [2022-11-19 06:41:35,834 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:41:35" (1/1) ... [2022-11-19 06:41:35,839 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:41:35" (1/1) ... [2022-11-19 06:41:35,845 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:41:35" (1/1) ... [2022-11-19 06:41:35,847 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:41:35" (1/1) ... [2022-11-19 06:41:35,848 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:41:35" (1/1) ... [2022-11-19 06:41:35,852 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-19 06:41:35,853 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-19 06:41:35,853 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-19 06:41:35,853 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-19 06:41:35,854 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:41:35" (1/1) ... [2022-11-19 06:41:35,869 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 06:41:35,883 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:41:35,899 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-19 06:41:35,942 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-19 06:41:35,978 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-19 06:41:35,978 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-19 06:41:35,978 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-19 06:41:35,978 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-19 06:41:35,978 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-19 06:41:35,979 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-19 06:41:35,979 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-19 06:41:35,979 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-19 06:41:35,979 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-19 06:41:35,979 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 06:41:35,979 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 06:41:35,980 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-19 06:41:35,980 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-19 06:41:35,980 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-19 06:41:35,980 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-19 06:41:35,980 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-19 06:41:35,980 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-19 06:41:35,981 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-19 06:41:35,981 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-19 06:41:35,981 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-19 06:41:35,981 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-19 06:41:35,981 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-19 06:41:35,981 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-19 06:41:35,982 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-19 06:41:36,120 INFO L235 CfgBuilder]: Building ICFG [2022-11-19 06:41:36,123 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-19 06:41:36,589 INFO L276 CfgBuilder]: Performing block encoding [2022-11-19 06:41:36,754 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-19 06:41:36,754 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-19 06:41:36,757 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 06:41:36 BoogieIcfgContainer [2022-11-19 06:41:36,758 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-19 06:41:36,760 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-19 06:41:36,761 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-19 06:41:36,765 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-19 06:41:36,765 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 06:41:35" (1/3) ... [2022-11-19 06:41:36,766 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@528f2538 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 06:41:36, skipping insertion in model container [2022-11-19 06:41:36,766 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:41:35" (2/3) ... [2022-11-19 06:41:36,767 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@528f2538 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 06:41:36, skipping insertion in model container [2022-11-19 06:41:36,767 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 06:41:36" (3/3) ... [2022-11-19 06:41:36,769 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product63.cil.c [2022-11-19 06:41:36,792 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-19 06:41:36,792 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-19 06:41:36,857 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-19 06:41:36,865 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3d55f12e, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-19 06:41:36,866 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-19 06:41:36,871 INFO L276 IsEmpty]: Start isEmpty. Operand has 80 states, 49 states have (on average 1.4285714285714286) internal successors, (70), 60 states have internal predecessors, (70), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2022-11-19 06:41:36,883 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-19 06:41:36,884 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:41:36,885 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:41:36,886 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:41:36,892 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:41:36,893 INFO L85 PathProgramCache]: Analyzing trace with hash 1806156663, now seen corresponding path program 1 times [2022-11-19 06:41:36,905 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:41:36,905 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2131834179] [2022-11-19 06:41:36,906 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:41:36,906 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:41:37,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:41:37,223 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:41:37,224 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:41:37,224 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2131834179] [2022-11-19 06:41:37,225 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2131834179] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:41:37,225 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:41:37,226 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-19 06:41:37,228 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [464565708] [2022-11-19 06:41:37,229 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:41:37,234 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-19 06:41:37,234 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:41:37,268 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-19 06:41:37,269 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-19 06:41:37,272 INFO L87 Difference]: Start difference. First operand has 80 states, 49 states have (on average 1.4285714285714286) internal successors, (70), 60 states have internal predecessors, (70), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 06:41:37,427 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:41:37,430 INFO L93 Difference]: Finished difference Result 158 states and 217 transitions. [2022-11-19 06:41:37,431 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-19 06:41:37,433 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-11-19 06:41:37,434 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:41:37,446 INFO L225 Difference]: With dead ends: 158 [2022-11-19 06:41:37,446 INFO L226 Difference]: Without dead ends: 75 [2022-11-19 06:41:37,451 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-19 06:41:37,455 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:41:37,457 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 87 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:41:37,478 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-11-19 06:41:37,506 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2022-11-19 06:41:37,508 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 46 states have (on average 1.3478260869565217) internal successors, (62), 56 states have internal predecessors, (62), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-11-19 06:41:37,511 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 99 transitions. [2022-11-19 06:41:37,514 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 99 transitions. Word has length 17 [2022-11-19 06:41:37,514 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:41:37,514 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 99 transitions. [2022-11-19 06:41:37,515 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 06:41:37,515 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 99 transitions. [2022-11-19 06:41:37,518 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-19 06:41:37,518 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:41:37,518 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:41:37,519 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-19 06:41:37,519 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:41:37,520 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:41:37,521 INFO L85 PathProgramCache]: Analyzing trace with hash -869298979, now seen corresponding path program 1 times [2022-11-19 06:41:37,521 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:41:37,521 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1221671568] [2022-11-19 06:41:37,522 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:41:37,522 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:41:37,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:41:37,641 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:41:37,642 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:41:37,642 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1221671568] [2022-11-19 06:41:37,642 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1221671568] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:41:37,643 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:41:37,643 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 06:41:37,643 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [982619414] [2022-11-19 06:41:37,644 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:41:37,645 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 06:41:37,645 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:41:37,646 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 06:41:37,646 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:41:37,647 INFO L87 Difference]: Start difference. First operand 75 states and 99 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 06:41:37,709 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:41:37,710 INFO L93 Difference]: Finished difference Result 122 states and 160 transitions. [2022-11-19 06:41:37,710 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 06:41:37,711 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-11-19 06:41:37,711 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:41:37,713 INFO L225 Difference]: With dead ends: 122 [2022-11-19 06:41:37,713 INFO L226 Difference]: Without dead ends: 67 [2022-11-19 06:41:37,714 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:41:37,716 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 14 mSDsluCounter, 56 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 129 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 06:41:37,717 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 129 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 06:41:37,718 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67 states. [2022-11-19 06:41:37,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 67. [2022-11-19 06:41:37,730 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 41 states have (on average 1.3658536585365855) internal successors, (56), 51 states have internal predecessors, (56), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-19 06:41:37,732 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 88 transitions. [2022-11-19 06:41:37,732 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 88 transitions. Word has length 18 [2022-11-19 06:41:37,733 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:41:37,733 INFO L495 AbstractCegarLoop]: Abstraction has 67 states and 88 transitions. [2022-11-19 06:41:37,733 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 06:41:37,734 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 88 transitions. [2022-11-19 06:41:37,735 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-19 06:41:37,735 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:41:37,736 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:41:37,736 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-19 06:41:37,736 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:41:37,737 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:41:37,737 INFO L85 PathProgramCache]: Analyzing trace with hash 457868229, now seen corresponding path program 1 times [2022-11-19 06:41:37,737 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:41:37,738 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [143230090] [2022-11-19 06:41:37,738 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:41:37,738 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:41:37,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:41:37,897 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:41:37,898 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:41:37,898 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [143230090] [2022-11-19 06:41:37,898 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [143230090] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:41:37,899 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:41:37,899 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 06:41:37,899 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1796331423] [2022-11-19 06:41:37,900 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:41:37,900 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 06:41:37,900 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:41:37,901 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 06:41:37,901 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 06:41:37,902 INFO L87 Difference]: Start difference. First operand 67 states and 88 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 06:41:38,186 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:41:38,186 INFO L93 Difference]: Finished difference Result 180 states and 242 transitions. [2022-11-19 06:41:38,187 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-19 06:41:38,188 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2022-11-19 06:41:38,188 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:41:38,196 INFO L225 Difference]: With dead ends: 180 [2022-11-19 06:41:38,196 INFO L226 Difference]: Without dead ends: 115 [2022-11-19 06:41:38,197 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:41:38,201 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 102 mSDsluCounter, 97 mSDsCounter, 0 mSdLazyCounter, 83 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 102 SdHoareTripleChecker+Valid, 184 SdHoareTripleChecker+Invalid, 92 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 83 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-19 06:41:38,204 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [102 Valid, 184 Invalid, 92 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 83 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-19 06:41:38,206 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 115 states. [2022-11-19 06:41:38,235 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 115 to 98. [2022-11-19 06:41:38,236 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98 states, 62 states have (on average 1.3709677419354838) internal successors, (85), 75 states have internal predecessors, (85), 21 states have call successors, (21), 14 states have call predecessors, (21), 14 states have return successors, (22), 15 states have call predecessors, (22), 21 states have call successors, (22) [2022-11-19 06:41:38,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 98 states and 128 transitions. [2022-11-19 06:41:38,238 INFO L78 Accepts]: Start accepts. Automaton has 98 states and 128 transitions. Word has length 21 [2022-11-19 06:41:38,239 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:41:38,239 INFO L495 AbstractCegarLoop]: Abstraction has 98 states and 128 transitions. [2022-11-19 06:41:38,239 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 06:41:38,240 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 128 transitions. [2022-11-19 06:41:38,249 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-19 06:41:38,249 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:41:38,249 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:41:38,250 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-19 06:41:38,250 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:41:38,254 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:41:38,254 INFO L85 PathProgramCache]: Analyzing trace with hash -373252238, now seen corresponding path program 1 times [2022-11-19 06:41:38,254 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:41:38,254 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [638355264] [2022-11-19 06:41:38,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:41:38,255 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:41:38,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:41:38,389 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:41:38,390 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:41:38,390 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [638355264] [2022-11-19 06:41:38,391 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [638355264] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:41:38,391 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:41:38,391 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 06:41:38,391 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [896803320] [2022-11-19 06:41:38,392 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:41:38,392 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 06:41:38,392 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:41:38,393 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 06:41:38,393 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:41:38,394 INFO L87 Difference]: Start difference. First operand 98 states and 128 transitions. Second operand has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 06:41:38,469 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:41:38,469 INFO L93 Difference]: Finished difference Result 194 states and 260 transitions. [2022-11-19 06:41:38,469 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 06:41:38,470 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-11-19 06:41:38,470 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:41:38,473 INFO L225 Difference]: With dead ends: 194 [2022-11-19 06:41:38,474 INFO L226 Difference]: Without dead ends: 192 [2022-11-19 06:41:38,475 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:41:38,484 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 64 mSDsluCounter, 70 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 158 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:41:38,485 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 158 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:41:38,486 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2022-11-19 06:41:38,528 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 192. [2022-11-19 06:41:38,529 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 192 states, 121 states have (on average 1.3636363636363635) internal successors, (165), 146 states have internal predecessors, (165), 42 states have call successors, (42), 28 states have call predecessors, (42), 28 states have return successors, (50), 30 states have call predecessors, (50), 42 states have call successors, (50) [2022-11-19 06:41:38,541 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 192 states to 192 states and 257 transitions. [2022-11-19 06:41:38,542 INFO L78 Accepts]: Start accepts. Automaton has 192 states and 257 transitions. Word has length 24 [2022-11-19 06:41:38,542 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:41:38,543 INFO L495 AbstractCegarLoop]: Abstraction has 192 states and 257 transitions. [2022-11-19 06:41:38,543 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 06:41:38,543 INFO L276 IsEmpty]: Start isEmpty. Operand 192 states and 257 transitions. [2022-11-19 06:41:38,548 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-19 06:41:38,549 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:41:38,550 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:41:38,550 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-19 06:41:38,550 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:41:38,551 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:41:38,552 INFO L85 PathProgramCache]: Analyzing trace with hash 1307614989, now seen corresponding path program 1 times [2022-11-19 06:41:38,552 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:41:38,552 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1452350115] [2022-11-19 06:41:38,552 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:41:38,553 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:41:38,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:41:38,875 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-19 06:41:38,876 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:41:38,876 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1452350115] [2022-11-19 06:41:38,877 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1452350115] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:41:38,877 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:41:38,877 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-19 06:41:38,878 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1464354804] [2022-11-19 06:41:38,878 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:41:38,878 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-19 06:41:38,879 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:41:38,879 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-19 06:41:38,879 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-19 06:41:38,880 INFO L87 Difference]: Start difference. First operand 192 states and 257 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 6 states have internal predecessors, (36), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-19 06:41:39,380 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:41:39,381 INFO L93 Difference]: Finished difference Result 507 states and 698 transitions. [2022-11-19 06:41:39,382 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-19 06:41:39,382 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 6 states have internal predecessors, (36), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 44 [2022-11-19 06:41:39,382 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:41:39,385 INFO L225 Difference]: With dead ends: 507 [2022-11-19 06:41:39,385 INFO L226 Difference]: Without dead ends: 317 [2022-11-19 06:41:39,387 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2022-11-19 06:41:39,388 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 165 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 173 mSolverCounterSat, 99 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 193 SdHoareTripleChecker+Invalid, 272 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 99 IncrementalHoareTripleChecker+Valid, 173 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-19 06:41:39,389 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [167 Valid, 193 Invalid, 272 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [99 Valid, 173 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-19 06:41:39,390 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 317 states. [2022-11-19 06:41:39,476 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 317 to 296. [2022-11-19 06:41:39,477 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 296 states, 193 states have (on average 1.2538860103626943) internal successors, (242), 212 states have internal predecessors, (242), 51 states have call successors, (51), 43 states have call predecessors, (51), 51 states have return successors, (79), 53 states have call predecessors, (79), 51 states have call successors, (79) [2022-11-19 06:41:39,480 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 296 states to 296 states and 372 transitions. [2022-11-19 06:41:39,481 INFO L78 Accepts]: Start accepts. Automaton has 296 states and 372 transitions. Word has length 44 [2022-11-19 06:41:39,481 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:41:39,481 INFO L495 AbstractCegarLoop]: Abstraction has 296 states and 372 transitions. [2022-11-19 06:41:39,481 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 6 states have internal predecessors, (36), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-19 06:41:39,482 INFO L276 IsEmpty]: Start isEmpty. Operand 296 states and 372 transitions. [2022-11-19 06:41:39,487 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2022-11-19 06:41:39,487 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:41:39,488 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:41:39,488 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-19 06:41:39,490 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:41:39,490 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:41:39,490 INFO L85 PathProgramCache]: Analyzing trace with hash -1590456974, now seen corresponding path program 1 times [2022-11-19 06:41:39,491 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:41:39,491 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1776537362] [2022-11-19 06:41:39,491 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:41:39,491 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:41:39,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:41:39,589 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-19 06:41:39,589 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:41:39,590 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1776537362] [2022-11-19 06:41:39,590 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1776537362] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:41:39,590 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:41:39,590 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 06:41:39,591 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [539763835] [2022-11-19 06:41:39,591 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:41:39,592 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 06:41:39,592 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:41:39,592 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 06:41:39,593 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 06:41:39,593 INFO L87 Difference]: Start difference. First operand 296 states and 372 transitions. Second operand has 4 states, 3 states have (on average 17.666666666666668) internal successors, (53), 4 states have internal predecessors, (53), 4 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) [2022-11-19 06:41:39,753 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:41:39,754 INFO L93 Difference]: Finished difference Result 592 states and 744 transitions. [2022-11-19 06:41:39,754 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-19 06:41:39,755 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 17.666666666666668) internal successors, (53), 4 states have internal predecessors, (53), 4 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) Word has length 79 [2022-11-19 06:41:39,755 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:41:39,757 INFO L225 Difference]: With dead ends: 592 [2022-11-19 06:41:39,758 INFO L226 Difference]: Without dead ends: 255 [2022-11-19 06:41:39,759 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 06:41:39,760 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 106 mSDsluCounter, 55 mSDsCounter, 0 mSdLazyCounter, 90 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 106 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 92 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 90 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:41:39,761 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [106 Valid, 150 Invalid, 92 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 90 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:41:39,762 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 255 states. [2022-11-19 06:41:39,796 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 255 to 255. [2022-11-19 06:41:39,797 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 255 states, 165 states have (on average 1.2181818181818183) internal successors, (201), 180 states have internal predecessors, (201), 44 states have call successors, (44), 36 states have call predecessors, (44), 45 states have return successors, (66), 47 states have call predecessors, (66), 44 states have call successors, (66) [2022-11-19 06:41:39,799 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 255 states to 255 states and 311 transitions. [2022-11-19 06:41:39,799 INFO L78 Accepts]: Start accepts. Automaton has 255 states and 311 transitions. Word has length 79 [2022-11-19 06:41:39,800 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:41:39,800 INFO L495 AbstractCegarLoop]: Abstraction has 255 states and 311 transitions. [2022-11-19 06:41:39,800 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 17.666666666666668) internal successors, (53), 4 states have internal predecessors, (53), 4 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) [2022-11-19 06:41:39,800 INFO L276 IsEmpty]: Start isEmpty. Operand 255 states and 311 transitions. [2022-11-19 06:41:39,802 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2022-11-19 06:41:39,802 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:41:39,802 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:41:39,803 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-19 06:41:39,803 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:41:39,804 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:41:39,804 INFO L85 PathProgramCache]: Analyzing trace with hash 1878394815, now seen corresponding path program 1 times [2022-11-19 06:41:39,804 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:41:39,804 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [130198407] [2022-11-19 06:41:39,805 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:41:39,805 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:41:39,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:41:40,509 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 7 proven. 9 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-19 06:41:40,509 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:41:40,509 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [130198407] [2022-11-19 06:41:40,510 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [130198407] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:41:40,510 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [174908493] [2022-11-19 06:41:40,510 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:41:40,511 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:41:40,511 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:41:40,519 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:41:40,526 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-19 06:41:40,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:41:40,659 INFO L263 TraceCheckSpWp]: Trace formula consists of 326 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-19 06:41:40,667 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:41:41,492 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 06:41:41,493 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:41:41,493 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [174908493] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:41:41,493 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 06:41:41,494 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [11] total 18 [2022-11-19 06:41:41,494 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [86853016] [2022-11-19 06:41:41,494 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:41:41,495 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-19 06:41:41,495 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:41:41,495 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-19 06:41:41,496 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=49, Invalid=257, Unknown=0, NotChecked=0, Total=306 [2022-11-19 06:41:41,496 INFO L87 Difference]: Start difference. First operand 255 states and 311 transitions. Second operand has 9 states, 9 states have (on average 5.888888888888889) internal successors, (53), 8 states have internal predecessors, (53), 6 states have call successors, (11), 4 states have call predecessors, (11), 3 states have return successors, (10), 3 states have call predecessors, (10), 6 states have call successors, (10) [2022-11-19 06:41:42,399 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:41:42,400 INFO L93 Difference]: Finished difference Result 576 states and 714 transitions. [2022-11-19 06:41:42,400 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-19 06:41:42,401 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.888888888888889) internal successors, (53), 8 states have internal predecessors, (53), 6 states have call successors, (11), 4 states have call predecessors, (11), 3 states have return successors, (10), 3 states have call predecessors, (10), 6 states have call successors, (10) Word has length 76 [2022-11-19 06:41:42,401 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:41:42,403 INFO L225 Difference]: With dead ends: 576 [2022-11-19 06:41:42,403 INFO L226 Difference]: Without dead ends: 323 [2022-11-19 06:41:42,405 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 78 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 70 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=102, Invalid=498, Unknown=0, NotChecked=0, Total=600 [2022-11-19 06:41:42,406 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 249 mSDsluCounter, 150 mSDsCounter, 0 mSdLazyCounter, 373 mSolverCounterSat, 107 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 261 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 480 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 107 IncrementalHoareTripleChecker+Valid, 373 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-19 06:41:42,406 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [261 Valid, 207 Invalid, 480 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [107 Valid, 373 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-19 06:41:42,407 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 323 states. [2022-11-19 06:41:42,454 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 323 to 280. [2022-11-19 06:41:42,455 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 280 states, 183 states have (on average 1.2131147540983607) internal successors, (222), 198 states have internal predecessors, (222), 47 states have call successors, (47), 43 states have call predecessors, (47), 49 states have return successors, (69), 48 states have call predecessors, (69), 47 states have call successors, (69) [2022-11-19 06:41:42,457 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 280 states to 280 states and 338 transitions. [2022-11-19 06:41:42,457 INFO L78 Accepts]: Start accepts. Automaton has 280 states and 338 transitions. Word has length 76 [2022-11-19 06:41:42,457 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:41:42,458 INFO L495 AbstractCegarLoop]: Abstraction has 280 states and 338 transitions. [2022-11-19 06:41:42,458 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.888888888888889) internal successors, (53), 8 states have internal predecessors, (53), 6 states have call successors, (11), 4 states have call predecessors, (11), 3 states have return successors, (10), 3 states have call predecessors, (10), 6 states have call successors, (10) [2022-11-19 06:41:42,458 INFO L276 IsEmpty]: Start isEmpty. Operand 280 states and 338 transitions. [2022-11-19 06:41:42,460 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2022-11-19 06:41:42,460 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:41:42,461 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:41:42,474 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-19 06:41:42,668 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2022-11-19 06:41:42,668 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:41:42,669 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:41:42,669 INFO L85 PathProgramCache]: Analyzing trace with hash -962629696, now seen corresponding path program 1 times [2022-11-19 06:41:42,670 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:41:42,670 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2102307048] [2022-11-19 06:41:42,670 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:41:42,670 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:41:42,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:41:43,151 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 7 proven. 9 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-19 06:41:43,151 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:41:43,151 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2102307048] [2022-11-19 06:41:43,151 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2102307048] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:41:43,152 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [623086082] [2022-11-19 06:41:43,152 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:41:43,152 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:41:43,152 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:41:43,153 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:41:43,160 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-19 06:41:43,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:41:43,281 INFO L263 TraceCheckSpWp]: Trace formula consists of 332 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-19 06:41:43,285 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:41:43,335 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-19 06:41:43,336 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:41:43,336 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [623086082] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:41:43,336 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 06:41:43,336 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [11] total 12 [2022-11-19 06:41:43,337 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1049262975] [2022-11-19 06:41:43,337 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:41:43,337 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 06:41:43,337 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:41:43,338 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 06:41:43,338 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=104, Unknown=0, NotChecked=0, Total=132 [2022-11-19 06:41:43,338 INFO L87 Difference]: Start difference. First operand 280 states and 338 transitions. Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-19 06:41:43,454 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:41:43,454 INFO L93 Difference]: Finished difference Result 544 states and 661 transitions. [2022-11-19 06:41:43,455 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 06:41:43,455 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 79 [2022-11-19 06:41:43,456 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:41:43,457 INFO L225 Difference]: With dead ends: 544 [2022-11-19 06:41:43,458 INFO L226 Difference]: Without dead ends: 266 [2022-11-19 06:41:43,459 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 99 GetRequests, 88 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=124, Unknown=0, NotChecked=0, Total=156 [2022-11-19 06:41:43,460 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 54 mSDsluCounter, 126 mSDsCounter, 0 mSdLazyCounter, 49 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 198 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 49 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:41:43,460 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 198 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 49 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:41:43,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 266 states. [2022-11-19 06:41:43,502 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 266 to 250. [2022-11-19 06:41:43,502 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 250 states, 161 states have (on average 1.1987577639751552) internal successors, (193), 175 states have internal predecessors, (193), 43 states have call successors, (43), 39 states have call predecessors, (43), 45 states have return successors, (61), 43 states have call predecessors, (61), 43 states have call successors, (61) [2022-11-19 06:41:43,504 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 250 states to 250 states and 297 transitions. [2022-11-19 06:41:43,505 INFO L78 Accepts]: Start accepts. Automaton has 250 states and 297 transitions. Word has length 79 [2022-11-19 06:41:43,510 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:41:43,510 INFO L495 AbstractCegarLoop]: Abstraction has 250 states and 297 transitions. [2022-11-19 06:41:43,511 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-19 06:41:43,511 INFO L276 IsEmpty]: Start isEmpty. Operand 250 states and 297 transitions. [2022-11-19 06:41:43,513 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2022-11-19 06:41:43,514 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:41:43,514 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:41:43,527 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-19 06:41:43,721 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:41:43,721 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:41:43,722 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:41:43,722 INFO L85 PathProgramCache]: Analyzing trace with hash 1412573353, now seen corresponding path program 1 times [2022-11-19 06:41:43,722 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:41:43,722 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [504796549] [2022-11-19 06:41:43,723 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:41:43,723 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:41:43,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:41:44,288 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 19 proven. 18 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-19 06:41:44,289 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:41:44,289 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [504796549] [2022-11-19 06:41:44,289 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [504796549] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:41:44,289 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1044616865] [2022-11-19 06:41:44,289 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:41:44,290 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:41:44,290 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:41:44,291 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:41:44,311 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-19 06:41:44,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:41:44,422 INFO L263 TraceCheckSpWp]: Trace formula consists of 360 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-19 06:41:44,429 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:41:44,506 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 43 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 06:41:44,506 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:41:44,506 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1044616865] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:41:44,507 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 06:41:44,507 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [13] total 15 [2022-11-19 06:41:44,507 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1966707774] [2022-11-19 06:41:44,507 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:41:44,508 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 06:41:44,508 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:41:44,508 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 06:41:44,509 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2022-11-19 06:41:44,509 INFO L87 Difference]: Start difference. First operand 250 states and 297 transitions. Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 3 states have call successors, (13), 3 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-19 06:41:44,679 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:41:44,680 INFO L93 Difference]: Finished difference Result 487 states and 595 transitions. [2022-11-19 06:41:44,681 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 06:41:44,681 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 3 states have call successors, (13), 3 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 2 states have call successors, (12) Word has length 86 [2022-11-19 06:41:44,682 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:41:44,684 INFO L225 Difference]: With dead ends: 487 [2022-11-19 06:41:44,684 INFO L226 Difference]: Without dead ends: 239 [2022-11-19 06:41:44,685 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 104 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 26 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2022-11-19 06:41:44,688 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 52 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 97 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 210 SdHoareTripleChecker+Invalid, 99 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 97 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:41:44,688 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 210 Invalid, 99 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 97 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:41:44,690 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 239 states. [2022-11-19 06:41:44,730 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 239 to 233. [2022-11-19 06:41:44,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 233 states, 153 states have (on average 1.1830065359477124) internal successors, (181), 167 states have internal predecessors, (181), 40 states have call successors, (40), 36 states have call predecessors, (40), 39 states have return successors, (55), 39 states have call predecessors, (55), 40 states have call successors, (55) [2022-11-19 06:41:44,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 233 states to 233 states and 276 transitions. [2022-11-19 06:41:44,735 INFO L78 Accepts]: Start accepts. Automaton has 233 states and 276 transitions. Word has length 86 [2022-11-19 06:41:44,735 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:41:44,735 INFO L495 AbstractCegarLoop]: Abstraction has 233 states and 276 transitions. [2022-11-19 06:41:44,736 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 3 states have call successors, (13), 3 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-19 06:41:44,736 INFO L276 IsEmpty]: Start isEmpty. Operand 233 states and 276 transitions. [2022-11-19 06:41:44,744 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2022-11-19 06:41:44,744 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:41:44,744 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:41:44,760 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-19 06:41:44,951 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:41:44,952 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:41:44,953 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:41:44,953 INFO L85 PathProgramCache]: Analyzing trace with hash -1670492553, now seen corresponding path program 1 times [2022-11-19 06:41:44,953 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:41:44,953 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1053027602] [2022-11-19 06:41:44,953 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:41:44,954 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:41:45,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:41:45,451 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 7 proven. 17 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-19 06:41:45,452 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:41:45,452 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1053027602] [2022-11-19 06:41:45,452 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1053027602] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:41:45,452 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2026712238] [2022-11-19 06:41:45,452 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:41:45,453 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:41:45,453 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:41:45,455 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:41:45,479 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-19 06:41:45,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:41:45,599 INFO L263 TraceCheckSpWp]: Trace formula consists of 367 conjuncts, 34 conjunts are in the unsatisfiable core [2022-11-19 06:41:45,608 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:41:46,264 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 19 proven. 21 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-19 06:41:46,267 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 06:41:47,441 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-11-19 06:41:47,442 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2026712238] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 06:41:47,442 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [953535356] [2022-11-19 06:41:47,475 INFO L159 IcfgInterpreter]: Started Sifa with 55 locations of interest [2022-11-19 06:41:47,475 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 06:41:47,480 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 06:41:47,489 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 06:41:47,490 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 06:41:51,131 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 116 for LOIs [2022-11-19 06:41:51,147 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 123 for LOIs [2022-11-19 06:41:52,874 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 121 for LOIs [2022-11-19 06:41:53,171 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 121 for LOIs [2022-11-19 06:41:53,707 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 121 for LOIs [2022-11-19 06:41:53,858 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 43 for LOIs [2022-11-19 06:41:53,866 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 06:42:12,231 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [953535356] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:42:12,231 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-19 06:42:12,231 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [27] imperfect sequences [11, 12, 16] total 61 [2022-11-19 06:42:12,232 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [262096094] [2022-11-19 06:42:12,232 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:42:12,233 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-19 06:42:12,233 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:42:12,234 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-19 06:42:12,236 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=555, Invalid=3105, Unknown=0, NotChecked=0, Total=3660 [2022-11-19 06:42:12,236 INFO L87 Difference]: Start difference. First operand 233 states and 276 transitions. Second operand has 28 states, 22 states have (on average 1.8636363636363635) internal successors, (41), 22 states have internal predecessors, (41), 8 states have call successors, (11), 6 states have call predecessors, (11), 6 states have return successors, (11), 9 states have call predecessors, (11), 8 states have call successors, (11) [2022-11-19 06:42:30,324 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:42:30,325 INFO L93 Difference]: Finished difference Result 722 states and 873 transitions. [2022-11-19 06:42:30,325 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2022-11-19 06:42:30,325 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 22 states have (on average 1.8636363636363635) internal successors, (41), 22 states have internal predecessors, (41), 8 states have call successors, (11), 6 states have call predecessors, (11), 6 states have return successors, (11), 9 states have call predecessors, (11), 8 states have call successors, (11) Word has length 90 [2022-11-19 06:42:30,326 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:42:30,328 INFO L225 Difference]: With dead ends: 722 [2022-11-19 06:42:30,329 INFO L226 Difference]: Without dead ends: 491 [2022-11-19 06:42:30,331 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 311 GetRequests, 219 SyntacticMatches, 9 SemanticMatches, 83 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2526 ImplicationChecksByTransitivity, 34.0s TimeCoverageRelationStatistics Valid=1225, Invalid=5915, Unknown=0, NotChecked=0, Total=7140 [2022-11-19 06:42:30,332 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 248 mSDsluCounter, 406 mSDsCounter, 0 mSdLazyCounter, 1451 mSolverCounterSat, 120 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 251 SdHoareTripleChecker+Valid, 479 SdHoareTripleChecker+Invalid, 1571 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 120 IncrementalHoareTripleChecker+Valid, 1451 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.0s IncrementalHoareTripleChecker+Time [2022-11-19 06:42:30,332 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [251 Valid, 479 Invalid, 1571 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [120 Valid, 1451 Invalid, 0 Unknown, 0 Unchecked, 3.0s Time] [2022-11-19 06:42:30,333 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 491 states. [2022-11-19 06:42:30,407 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 491 to 462. [2022-11-19 06:42:30,408 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 462 states, 310 states have (on average 1.1741935483870967) internal successors, (364), 329 states have internal predecessors, (364), 77 states have call successors, (77), 70 states have call predecessors, (77), 74 states have return successors, (104), 75 states have call predecessors, (104), 77 states have call successors, (104) [2022-11-19 06:42:30,410 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 462 states to 462 states and 545 transitions. [2022-11-19 06:42:30,411 INFO L78 Accepts]: Start accepts. Automaton has 462 states and 545 transitions. Word has length 90 [2022-11-19 06:42:30,411 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:42:30,411 INFO L495 AbstractCegarLoop]: Abstraction has 462 states and 545 transitions. [2022-11-19 06:42:30,411 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 22 states have (on average 1.8636363636363635) internal successors, (41), 22 states have internal predecessors, (41), 8 states have call successors, (11), 6 states have call predecessors, (11), 6 states have return successors, (11), 9 states have call predecessors, (11), 8 states have call successors, (11) [2022-11-19 06:42:30,412 INFO L276 IsEmpty]: Start isEmpty. Operand 462 states and 545 transitions. [2022-11-19 06:42:30,414 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2022-11-19 06:42:30,414 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:42:30,414 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:42:30,425 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-19 06:42:30,621 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:42:30,621 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:42:30,621 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:42:30,622 INFO L85 PathProgramCache]: Analyzing trace with hash 141961349, now seen corresponding path program 1 times [2022-11-19 06:42:30,622 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:42:30,622 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2106461447] [2022-11-19 06:42:30,622 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:42:30,622 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:42:30,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:42:30,944 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 7 proven. 17 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-19 06:42:30,944 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:42:30,944 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2106461447] [2022-11-19 06:42:30,945 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2106461447] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:42:30,945 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1595373017] [2022-11-19 06:42:30,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:42:30,945 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:42:30,945 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:42:30,946 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:42:30,950 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-19 06:42:31,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:42:31,044 INFO L263 TraceCheckSpWp]: Trace formula consists of 373 conjuncts, 27 conjunts are in the unsatisfiable core [2022-11-19 06:42:31,047 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:42:31,195 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-19 06:42:31,195 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:42:31,195 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1595373017] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:42:31,195 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 06:42:31,196 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [11] total 19 [2022-11-19 06:42:31,196 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1265870255] [2022-11-19 06:42:31,196 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:42:31,196 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-19 06:42:31,196 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:42:31,197 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-19 06:42:31,197 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2022-11-19 06:42:31,197 INFO L87 Difference]: Start difference. First operand 462 states and 545 transitions. Second operand has 11 states, 8 states have (on average 8.0) internal successors, (64), 8 states have internal predecessors, (64), 3 states have call successors, (15), 3 states have call predecessors, (15), 6 states have return successors, (14), 6 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-19 06:42:31,666 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:42:31,666 INFO L93 Difference]: Finished difference Result 1122 states and 1376 transitions. [2022-11-19 06:42:31,667 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-19 06:42:31,667 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 8 states have (on average 8.0) internal successors, (64), 8 states have internal predecessors, (64), 3 states have call successors, (15), 3 states have call predecessors, (15), 6 states have return successors, (14), 6 states have call predecessors, (14), 3 states have call successors, (14) Word has length 93 [2022-11-19 06:42:31,667 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:42:31,672 INFO L225 Difference]: With dead ends: 1122 [2022-11-19 06:42:31,672 INFO L226 Difference]: Without dead ends: 735 [2022-11-19 06:42:31,674 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 95 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 101 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=88, Invalid=614, Unknown=0, NotChecked=0, Total=702 [2022-11-19 06:42:31,675 INFO L413 NwaCegarLoop]: 122 mSDtfsCounter, 54 mSDsluCounter, 740 mSDsCounter, 0 mSdLazyCounter, 464 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 862 SdHoareTripleChecker+Invalid, 470 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 464 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-19 06:42:31,675 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 862 Invalid, 470 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 464 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-19 06:42:31,677 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 735 states. [2022-11-19 06:42:31,809 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 735 to 713. [2022-11-19 06:42:31,811 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 713 states, 484 states have (on average 1.1632231404958677) internal successors, (563), 506 states have internal predecessors, (563), 116 states have call successors, (116), 107 states have call predecessors, (116), 112 states have return successors, (177), 115 states have call predecessors, (177), 116 states have call successors, (177) [2022-11-19 06:42:31,815 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 713 states to 713 states and 856 transitions. [2022-11-19 06:42:31,816 INFO L78 Accepts]: Start accepts. Automaton has 713 states and 856 transitions. Word has length 93 [2022-11-19 06:42:31,816 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:42:31,816 INFO L495 AbstractCegarLoop]: Abstraction has 713 states and 856 transitions. [2022-11-19 06:42:31,817 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 8 states have (on average 8.0) internal successors, (64), 8 states have internal predecessors, (64), 3 states have call successors, (15), 3 states have call predecessors, (15), 6 states have return successors, (14), 6 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-19 06:42:31,817 INFO L276 IsEmpty]: Start isEmpty. Operand 713 states and 856 transitions. [2022-11-19 06:42:31,820 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2022-11-19 06:42:31,822 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:42:31,823 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:42:31,835 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-19 06:42:32,029 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-19 06:42:32,029 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:42:32,030 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:42:32,030 INFO L85 PathProgramCache]: Analyzing trace with hash 305319785, now seen corresponding path program 1 times [2022-11-19 06:42:32,030 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:42:32,030 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1804336352] [2022-11-19 06:42:32,030 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:42:32,030 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:42:32,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:42:32,360 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 7 proven. 17 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-19 06:42:32,361 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:42:32,361 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1804336352] [2022-11-19 06:42:32,361 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1804336352] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:42:32,361 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2123850934] [2022-11-19 06:42:32,361 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:42:32,361 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:42:32,362 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:42:32,363 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:42:32,387 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-19 06:42:32,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:42:32,478 INFO L263 TraceCheckSpWp]: Trace formula consists of 379 conjuncts, 25 conjunts are in the unsatisfiable core [2022-11-19 06:42:32,481 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:42:32,628 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-11-19 06:42:32,628 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:42:32,629 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2123850934] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:42:32,629 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 06:42:32,629 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [11] total 17 [2022-11-19 06:42:32,629 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2069580260] [2022-11-19 06:42:32,629 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:42:32,630 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-19 06:42:32,630 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:42:32,630 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-19 06:42:32,631 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=228, Unknown=0, NotChecked=0, Total=272 [2022-11-19 06:42:32,631 INFO L87 Difference]: Start difference. First operand 713 states and 856 transitions. Second operand has 11 states, 8 states have (on average 6.75) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (13), 2 states have call predecessors, (13), 5 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) [2022-11-19 06:42:33,267 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:42:33,268 INFO L93 Difference]: Finished difference Result 1339 states and 1642 transitions. [2022-11-19 06:42:33,268 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-11-19 06:42:33,269 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 8 states have (on average 6.75) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (13), 2 states have call predecessors, (13), 5 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) Word has length 96 [2022-11-19 06:42:33,269 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:42:33,270 INFO L225 Difference]: With dead ends: 1339 [2022-11-19 06:42:33,270 INFO L226 Difference]: Without dead ends: 0 [2022-11-19 06:42:33,274 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 127 GetRequests, 103 SyntacticMatches, 0 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 98 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=100, Invalid=550, Unknown=0, NotChecked=0, Total=650 [2022-11-19 06:42:33,274 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 60 mSDsluCounter, 442 mSDsCounter, 0 mSdLazyCounter, 470 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 523 SdHoareTripleChecker+Invalid, 477 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 470 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-19 06:42:33,275 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [67 Valid, 523 Invalid, 477 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 470 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-19 06:42:33,276 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-19 06:42:33,277 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-19 06:42:33,277 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:42:33,277 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-19 06:42:33,278 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 96 [2022-11-19 06:42:33,278 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:42:33,278 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-19 06:42:33,278 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 8 states have (on average 6.75) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (13), 2 states have call predecessors, (13), 5 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) [2022-11-19 06:42:33,278 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-19 06:42:33,279 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-19 06:42:33,281 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-19 06:42:33,293 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2022-11-19 06:42:33,488 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-19 06:42:33,489 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-19 06:43:00,578 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 521 528) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= 0 ~systemActive~0)) [2022-11-19 06:43:00,578 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 521 528) no Hoare annotation was computed. [2022-11-19 06:43:00,578 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 411 417) no Hoare annotation was computed. [2022-11-19 06:43:00,578 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 411 417) the Hoare annotation is: true [2022-11-19 06:43:00,579 INFO L895 garLoopResultBuilder]: At program point L459(line 459) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-19 06:43:00,579 INFO L895 garLoopResultBuilder]: At program point L455(line 455) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-19 06:43:00,579 INFO L899 garLoopResultBuilder]: For program point L453(lines 453 461) no Hoare annotation was computed. [2022-11-19 06:43:00,579 INFO L895 garLoopResultBuilder]: At program point L449(lines 449 466) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) (= ~pumpRunning~0 0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-19 06:43:00,580 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 445 469) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) (= ~pumpRunning~0 0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-19 06:43:00,580 INFO L895 garLoopResultBuilder]: At program point L464(line 464) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))) (or (not .cse1) (= ~pumpRunning~0 0) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-19 06:43:00,580 INFO L899 garLoopResultBuilder]: For program point L464-1(lines 445 469) no Hoare annotation was computed. [2022-11-19 06:43:00,580 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 445 469) no Hoare annotation was computed. [2022-11-19 06:43:00,580 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 237 248) the Hoare annotation is: (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~methaneLevelCritical~0)| 0)) (.cse1 (= ~methaneLevelCritical~0 0))) (and (or (not .cse0) .cse1 .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 0) .cse2 .cse0 (not .cse1)))) [2022-11-19 06:43:00,581 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 237 248) no Hoare annotation was computed. [2022-11-19 06:43:00,581 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 249 257) the Hoare annotation is: true [2022-11-19 06:43:00,581 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 249 257) no Hoare annotation was computed. [2022-11-19 06:43:00,582 INFO L895 garLoopResultBuilder]: At program point L481(line 481) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not .cse1))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (and (not (< 0 ~waterLevel~0)) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (not (= |timeShift_processEnvironment_~tmp~5#1| 0)) (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0))) (or (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (and .cse2 (= ~methAndRunningLastTime~0 0))) (or .cse2 (not (= 0 ~systemActive~0)))))) [2022-11-19 06:43:00,582 INFO L895 garLoopResultBuilder]: At program point L477(line 477) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= |old(~pumpRunning~0)| 0))) (and (or (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (and .cse1 (= ~methAndRunningLastTime~0 0) (not (= ~pumpRunning~0 0)))) (or .cse0 (and .cse1 (or (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (and (not (< 0 ~waterLevel~0)) (<= ~waterLevel~0 |old(~waterLevel~0)|)))) .cse2) (or (not .cse2) (not (= 0 ~systemActive~0))))) [2022-11-19 06:43:00,582 INFO L899 garLoopResultBuilder]: For program point L477-1(line 477) no Hoare annotation was computed. [2022-11-19 06:43:00,582 INFO L899 garLoopResultBuilder]: For program point L188(lines 188 198) no Hoare annotation was computed. [2022-11-19 06:43:00,583 INFO L895 garLoopResultBuilder]: At program point L184(lines 184 201) the Hoare annotation is: (let ((.cse47 (= |old(~pumpRunning~0)| 0))) (let ((.cse46 (= ~methaneLevelCritical~0 0)) (.cse54 (select |#memory_int| 1)) (.cse50 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| ~methaneLevelCritical~0)) (.cse1 (not .cse47)) (.cse44 (= ~pumpRunning~0 0)) (.cse48 (= 1 ~systemActive~0)) (.cse52 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse49 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse51 (and .cse1 .cse44 .cse48 .cse52 .cse49 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0))) (.cse53 (and .cse44 (<= ~waterLevel~0 1) .cse49 .cse50)) (.cse45 (= ~methAndRunningLastTime~0 0)) (.cse0 (not (= (select |#length| 12) 25))) (.cse2 (not (= (select .cse54 0) 48))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 9 (select |#length| 5)))) (.cse7 (not (= 30 (select |#length| 7)))) (.cse8 (not (= 31 (select |#length| 2)))) (.cse9 (not (= (select |#valid| 12) 1))) (.cse10 (not (= 2 (select |#length| 1)))) (.cse11 (not (= 9 (select |#length| 14)))) (.cse12 (not .cse48)) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse17 (not (= ~head~0.offset 0))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse27 (not .cse46)) (.cse28 (not (= (select .cse54 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse37 (not (= (select |#valid| 14) 1))) (.cse38 (not (= (select |#valid| 13) 1))) (.cse39 (not (= 30 (select |#length| 4)))) (.cse40 (not (= (select |#valid| 2) 1))) (.cse41 (not (= (select |#valid| 9) 1))) (.cse42 (not (= ~head~0.base 0))) (.cse43 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (not (= |old(~waterLevel~0)| 1)) .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse1 .cse44 (not (= 0 ~systemActive~0))) (or .cse3 .cse5 .cse45 .cse12 .cse17 .cse27 .cse33 (not (<= 0 |#StackHeapBarrier|)) .cse42 .cse43) (or .cse46 .cse12 .cse47 (and .cse1 .cse44 .cse48 .cse49 .cse50)) (or .cse12 .cse47 .cse51 (and (not (= |timeShift_processEnvironment_~tmp~5#1| 0)) .cse52) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse52 .cse49 .cse50)) (or .cse5 .cse45 .cse12 .cse53 .cse27 .cse51) (or .cse1 .cse5 .cse12 .cse53 (and .cse45 (<= 2 ~waterLevel~0) .cse49 .cse50)) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< |old(~waterLevel~0)| 2) .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43))))) [2022-11-19 06:43:00,584 INFO L895 garLoopResultBuilder]: At program point L184-1(lines 176 204) the Hoare annotation is: (let ((.cse47 (= ~methaneLevelCritical~0 0)) (.cse53 (= |old(~pumpRunning~0)| 0))) (let ((.cse57 (select |#memory_int| 1)) (.cse1 (not .cse53)) (.cse27 (not .cse47)) (.cse55 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse54 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse44 (= ~pumpRunning~0 0)) (.cse45 (= ~methAndRunningLastTime~0 0)) (.cse48 (<= 2 ~waterLevel~0)) (.cse56 (= 1 ~systemActive~0)) (.cse49 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse50 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| ~methaneLevelCritical~0))) (let ((.cse51 (and .cse45 .cse48 .cse56 .cse49 .cse50)) (.cse52 (and .cse54 .cse44 .cse45 (<= ~waterLevel~0 1) .cse56 .cse49 .cse50)) (.cse46 (and .cse1 .cse44 .cse45 .cse56 .cse27 .cse55 .cse49 .cse50)) (.cse0 (not (= (select |#length| 12) 25))) (.cse2 (not (= (select .cse57 0) 48))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 9 (select |#length| 5)))) (.cse7 (not (= 30 (select |#length| 7)))) (.cse8 (not (= 31 (select |#length| 2)))) (.cse9 (not (= (select |#valid| 12) 1))) (.cse10 (not (= 2 (select |#length| 1)))) (.cse11 (not (= 9 (select |#length| 14)))) (.cse12 (not .cse56)) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse17 (not (= ~head~0.offset 0))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse28 (not (= (select .cse57 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse37 (not (= (select |#valid| 14) 1))) (.cse38 (not (= (select |#valid| 13) 1))) (.cse39 (not (= 30 (select |#length| 4)))) (.cse40 (not (= (select |#valid| 2) 1))) (.cse41 (not (= (select |#valid| 9) 1))) (.cse42 (not (= ~head~0.base 0))) (.cse43 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (not (= |old(~waterLevel~0)| 1)) .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse1 (not (= 0 ~systemActive~0)) (and .cse44 .cse45)) (or .cse5 .cse46 .cse47 .cse12 (and (not .cse44) .cse48 (= ~pumpRunning~0 |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1|) .cse49 .cse50) .cse51 .cse52) (or .cse1 .cse5 .cse12 .cse27 .cse51 .cse52) (or .cse46 .cse47 .cse12 .cse53) (or .cse46 .cse12 (and .cse54 .cse45 .cse55 .cse49 .cse50) .cse53 (and .cse1 .cse44 .cse45 .cse56 .cse55 .cse49 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0))) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< |old(~waterLevel~0)| 2) .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43))))) [2022-11-19 06:43:00,585 INFO L895 garLoopResultBuilder]: At program point L490(line 490) the Hoare annotation is: (let ((.cse44 (select |#memory_int| 1))) (let ((.cse2 (= |old(~pumpRunning~0)| 0)) (.cse3 (not (= (select |#length| 12) 25))) (.cse4 (not (= (select .cse44 0) 48))) (.cse5 (not (= |#NULL.offset| 0))) (.cse6 (not (= 9 (select |#length| 11)))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (= 9 (select |#length| 5)))) (.cse8 (not (= 30 (select |#length| 7)))) (.cse9 (not (= 31 (select |#length| 2)))) (.cse10 (not (= (select |#valid| 12) 1))) (.cse11 (not (= 2 (select |#length| 1)))) (.cse12 (not (= 9 (select |#length| 14)))) (.cse1 (not (= 1 ~systemActive~0))) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse17 (not (= ~head~0.offset 0))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse27 (not (= ~methaneLevelCritical~0 0))) (.cse28 (not (= (select .cse44 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse37 (not (= (select |#valid| 14) 1))) (.cse38 (not (= (select |#valid| 13) 1))) (.cse39 (not (= 30 (select |#length| 4)))) (.cse40 (not (= (select |#valid| 2) 1))) (.cse41 (not (= (select |#valid| 9) 1))) (.cse42 (not (= ~head~0.base 0))) (.cse43 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse6 .cse0 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or (not .cse2) (not (= 0 ~systemActive~0))) (or .cse3 .cse4 .cse5 .cse6 .cse0 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse1 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< |old(~waterLevel~0)| 2) .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43)))) [2022-11-19 06:43:00,586 INFO L895 garLoopResultBuilder]: At program point L490-1(lines 471 495) the Hoare annotation is: (let ((.cse51 (= |old(~pumpRunning~0)| 0))) (let ((.cse49 (= ~methaneLevelCritical~0 0)) (.cse53 (select |#memory_int| 1)) (.cse1 (not .cse51)) (.cse48 (= ~pumpRunning~0 0)) (.cse50 (= 1 ~systemActive~0)) (.cse52 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse46 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse44 (= ~methAndRunningLastTime~0 0)) (.cse47 (and .cse1 .cse48 .cse50 .cse52 .cse46)) (.cse45 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (= (select |#length| 12) 25))) (.cse2 (not (= (select .cse53 0) 48))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 9 (select |#length| 5)))) (.cse7 (not (= 30 (select |#length| 7)))) (.cse8 (not (= 31 (select |#length| 2)))) (.cse9 (not (= (select |#valid| 12) 1))) (.cse10 (not (= 2 (select |#length| 1)))) (.cse11 (not (= 9 (select |#length| 14)))) (.cse12 (not .cse50)) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse17 (not (= ~head~0.offset 0))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse27 (not .cse49)) (.cse28 (not (= (select .cse53 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse37 (not (= (select |#valid| 14) 1))) (.cse38 (not (= (select |#valid| 13) 1))) (.cse39 (not (= 30 (select |#length| 4)))) (.cse40 (not (= (select |#valid| 2) 1))) (.cse41 (not (= (select |#valid| 9) 1))) (.cse42 (not (= ~head~0.base 0))) (.cse43 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (not (= |old(~waterLevel~0)| 1)) .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse3 .cse5 .cse44 .cse12 .cse17 .cse27 .cse33 (not (<= 0 |#StackHeapBarrier|)) .cse42 .cse43) (or (and .cse45 .cse44 .cse46) .cse5 .cse12 .cse47 (and .cse48 (<= ~waterLevel~0 1) .cse46) (and .cse44 (<= 2 ~waterLevel~0) .cse46)) (or .cse49 .cse12 (and .cse1 .cse48 .cse50 .cse46) .cse51) (or .cse12 .cse51 .cse47 (and .cse45 .cse52 .cse46)) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< |old(~waterLevel~0)| 2) .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse1 (not (= 0 ~systemActive~0))))))) [2022-11-19 06:43:00,587 INFO L899 garLoopResultBuilder]: For program point L391-1(lines 390 409) no Hoare annotation was computed. [2022-11-19 06:43:00,587 INFO L895 garLoopResultBuilder]: At program point L160(line 160) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~pumpRunning~0)| 0))) (and (or .cse0 .cse1) (or (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0) (or (not .cse1) (not (= 0 ~systemActive~0))))) [2022-11-19 06:43:00,587 INFO L899 garLoopResultBuilder]: For program point L189(lines 189 195) no Hoare annotation was computed. [2022-11-19 06:43:00,587 INFO L899 garLoopResultBuilder]: For program point L479(lines 479 487) no Hoare annotation was computed. [2022-11-19 06:43:00,587 INFO L899 garLoopResultBuilder]: For program point L475(lines 475 492) no Hoare annotation was computed. [2022-11-19 06:43:00,588 INFO L895 garLoopResultBuilder]: At program point L182(line 182) the Hoare annotation is: (let ((.cse51 (= |old(~pumpRunning~0)| 0))) (let ((.cse49 (= ~methaneLevelCritical~0 0)) (.cse53 (select |#memory_int| 1)) (.cse1 (not .cse51)) (.cse44 (= ~pumpRunning~0 0)) (.cse50 (= 1 ~systemActive~0)) (.cse52 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse47 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse45 (= ~methAndRunningLastTime~0 0)) (.cse48 (and .cse1 .cse44 .cse50 .cse52 .cse47)) (.cse46 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (= (select |#length| 12) 25))) (.cse2 (not (= (select .cse53 0) 48))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 9 (select |#length| 5)))) (.cse7 (not (= 30 (select |#length| 7)))) (.cse8 (not (= 31 (select |#length| 2)))) (.cse9 (not (= (select |#valid| 12) 1))) (.cse10 (not (= 2 (select |#length| 1)))) (.cse11 (not (= 9 (select |#length| 14)))) (.cse12 (not .cse50)) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse17 (not (= ~head~0.offset 0))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse27 (not .cse49)) (.cse28 (not (= (select .cse53 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse37 (not (= (select |#valid| 14) 1))) (.cse38 (not (= (select |#valid| 13) 1))) (.cse39 (not (= 30 (select |#length| 4)))) (.cse40 (not (= (select |#valid| 2) 1))) (.cse41 (not (= (select |#valid| 9) 1))) (.cse42 (not (= ~head~0.base 0))) (.cse43 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (not (= |old(~waterLevel~0)| 1)) .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse1 .cse44 (not (= 0 ~systemActive~0))) (or .cse3 .cse5 .cse45 .cse12 .cse17 .cse27 .cse33 (not (<= 0 |#StackHeapBarrier|)) .cse42 .cse43) (or (and .cse46 .cse45 .cse47) .cse5 .cse12 .cse48 (and .cse44 (<= ~waterLevel~0 1) .cse47) (and .cse45 (<= 2 ~waterLevel~0) .cse47)) (or .cse49 .cse12 (and .cse1 .cse44 .cse50 .cse47) .cse51) (or .cse12 .cse51 .cse48 (and .cse46 .cse52 .cse47)) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< |old(~waterLevel~0)| 2) .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43))))) [2022-11-19 06:43:00,588 INFO L899 garLoopResultBuilder]: For program point L182-1(line 182) no Hoare annotation was computed. [2022-11-19 06:43:00,589 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 387 410) the Hoare annotation is: (let ((.cse49 (select |#memory_int| 1)) (.cse45 (= |old(~pumpRunning~0)| 0))) (let ((.cse44 (not (= 0 ~systemActive~0))) (.cse46 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse48 (= ~methAndRunningLastTime~0 0)) (.cse47 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse0 (not (= (select |#length| 12) 25))) (.cse1 (not .cse45)) (.cse2 (not (= (select .cse49 0) 48))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 9 (select |#length| 5)))) (.cse7 (not (= 30 (select |#length| 7)))) (.cse8 (not (= 31 (select |#length| 2)))) (.cse9 (not (= (select |#valid| 12) 1))) (.cse10 (not (= 2 (select |#length| 1)))) (.cse11 (not (= 9 (select |#length| 14)))) (.cse12 (not (= 1 ~systemActive~0))) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse17 (not (= ~head~0.offset 0))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse27 (not (= ~methaneLevelCritical~0 0))) (.cse28 (not (= (select .cse49 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse37 (not (= (select |#valid| 14) 1))) (.cse38 (not (= (select |#valid| 13) 1))) (.cse39 (not (= 30 (select |#length| 4)))) (.cse40 (not (= (select |#valid| 2) 1))) (.cse41 (not (= (select |#valid| 9) 1))) (.cse42 (not (= ~head~0.base 0))) (.cse43 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (not (= |old(~waterLevel~0)| 1)) .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse1 (= ~pumpRunning~0 0) .cse44) (or .cse12 .cse45 (and .cse46 .cse47)) (or .cse1 .cse5 .cse48 .cse44) (or (and .cse46 .cse48 .cse47) .cse5 .cse12) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< |old(~waterLevel~0)| 2) .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43)))) [2022-11-19 06:43:00,589 INFO L899 garLoopResultBuilder]: For program point L398-1(lines 398 404) no Hoare annotation was computed. [2022-11-19 06:43:00,590 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 387 410) no Hoare annotation was computed. [2022-11-19 06:43:00,590 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 160) no Hoare annotation was computed. [2022-11-19 06:43:00,590 INFO L895 garLoopResultBuilder]: At program point L485(line 485) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= |old(~pumpRunning~0)| 0))) (and (or (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (and .cse1 (= ~methAndRunningLastTime~0 0) (not (= ~pumpRunning~0 0)))) (or (= ~methaneLevelCritical~0 0) .cse0 .cse2) (or .cse0 .cse2 (and .cse1 (or (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (and (not (< 0 ~waterLevel~0)) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0))) (or (not .cse2) (not (= 0 ~systemActive~0))))) [2022-11-19 06:43:00,591 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-11-19 06:43:00,591 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-11-19 06:43:00,591 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-11-19 06:43:00,591 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-11-19 06:43:00,591 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-11-19 06:43:00,591 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-11-19 06:43:00,592 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-11-19 06:43:00,592 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-11-19 06:43:00,592 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-11-19 06:43:00,592 INFO L899 garLoopResultBuilder]: For program point L345(lines 345 351) no Hoare annotation was computed. [2022-11-19 06:43:00,592 INFO L899 garLoopResultBuilder]: For program point L345-1(lines 345 351) no Hoare annotation was computed. [2022-11-19 06:43:00,592 INFO L895 garLoopResultBuilder]: At program point L370(lines 325 372) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse1 (= 1 ~systemActive~0)) (.cse3 (not .cse5)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (not .cse0) .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse5)))) [2022-11-19 06:43:00,592 INFO L895 garLoopResultBuilder]: At program point L337(line 337) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse1 (= 1 ~systemActive~0)) (.cse3 (not .cse5)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (not .cse0) .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse5)))) [2022-11-19 06:43:00,593 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-19 06:43:00,593 INFO L899 garLoopResultBuilder]: For program point L627(lines 627 633) no Hoare annotation was computed. [2022-11-19 06:43:00,593 INFO L895 garLoopResultBuilder]: At program point L627-1(lines 627 633) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (not (= 0 ~systemActive~0))) (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1))) [2022-11-19 06:43:00,593 INFO L899 garLoopResultBuilder]: For program point L326(lines 325 372) no Hoare annotation was computed. [2022-11-19 06:43:00,593 INFO L899 garLoopResultBuilder]: For program point L355(lines 355 368) no Hoare annotation was computed. [2022-11-19 06:43:00,593 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-19 06:43:00,593 INFO L895 garLoopResultBuilder]: At program point L347(line 347) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse1 (= 1 ~systemActive~0)) (.cse3 (not .cse5)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (not .cse0) .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse5)))) [2022-11-19 06:43:00,593 INFO L902 garLoopResultBuilder]: At program point L376(lines 315 380) the Hoare annotation is: true [2022-11-19 06:43:00,594 INFO L899 garLoopResultBuilder]: For program point L335(lines 335 341) no Hoare annotation was computed. [2022-11-19 06:43:00,594 INFO L899 garLoopResultBuilder]: For program point L335-1(lines 335 341) no Hoare annotation was computed. [2022-11-19 06:43:00,594 INFO L895 garLoopResultBuilder]: At program point L629(line 629) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2022-11-19 06:43:00,594 INFO L895 garLoopResultBuilder]: At program point L373(lines 324 374) the Hoare annotation is: false [2022-11-19 06:43:00,595 INFO L895 garLoopResultBuilder]: At program point L142(lines 142 149) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (and (= (select |#length| 15) 25) (= 9 (select |#length| 5)) (= (select |#length| 9) 21) (= 30 (select |#length| 7)) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_main_~tmp~0#1|) (= ~methAndRunningLastTime~0 0) (= (select |#valid| 9) 1) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_valid_product_~retValue_acc~10#1|) (= (select |#length| 12) 25) (= (select |#valid| 11) 1) (= ~methaneLevelCritical~0 0) (= 30 (select |#length| 4)) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~10#1|) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= 2 (select |#length| 1)) (= (select |#length| 8) 9) (= (select |#valid| 3) 1) (= (select |#valid| 7) 1) (= 30 (select |#length| 13)) (= 1 ~systemActive~0) (= 30 (select |#length| 10)) (= (select |#valid| 12) 1) (= (select |#valid| 4) 1) (= (select |#valid| 1) 1) (= (select |#length| 6) 21) (= (select |#valid| 14) 1) (= 9 (select |#length| 14)) (= (select |#valid| 0) 0) (= ~head~0.base 0) (= (select |#valid| 2) 1) (= |#NULL.offset| 0) (= 9 (select |#length| 11)) (= ~waterLevel~0 1) (= (select .cse0 0) 48) (= (select |#valid| 6) 1) (= (select .cse0 1) 0) (= (select |#valid| 10) 1) (= (select |#valid| 8) 1) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))) [2022-11-19 06:43:00,595 INFO L902 garLoopResultBuilder]: At program point L142-2(lines 142 149) the Hoare annotation is: true [2022-11-19 06:43:00,595 INFO L899 garLoopResultBuilder]: For program point L361(lines 361 367) no Hoare annotation was computed. [2022-11-19 06:43:00,595 INFO L895 garLoopResultBuilder]: At program point L361-2(lines 355 368) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse3 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not .cse4))) (or (and (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2) (and .cse3 .cse1 .cse4) (and (not .cse3) .cse0 .cse1 .cse2)))) [2022-11-19 06:43:00,596 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 419 443) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) (= ~pumpRunning~0 0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-19 06:43:00,596 INFO L895 garLoopResultBuilder]: At program point L438(line 438) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-19 06:43:00,596 INFO L899 garLoopResultBuilder]: For program point L438-1(lines 419 443) no Hoare annotation was computed. [2022-11-19 06:43:00,597 INFO L895 garLoopResultBuilder]: At program point L509(line 509) the Hoare annotation is: (let ((.cse4 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not .cse4)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (let ((.cse0 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= (select .cse0 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) .cse1 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse2 (not (= (select .cse0 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~7#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 1)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) .cse3 (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) (or .cse1 .cse4 .cse2) (or .cse5 .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 1)) .cse3) (or .cse5 .cse1 (not (<= ~waterLevel~0 1)) .cse3)))) [2022-11-19 06:43:00,598 INFO L895 garLoopResultBuilder]: At program point L509-1(line 509) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not .cse1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2) (let ((.cse3 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= (select .cse3 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (and (<= |processEnvironment__wrappee__highWaterSensor_activatePump_#t~ret19#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~7#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 1) (<= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0) (<= 0 |processEnvironment__wrappee__highWaterSensor_activatePump_#t~ret19#1|) (<= 0 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) .cse0 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse2 (not (= (select .cse3 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) .cse4 (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) (or .cse5 .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 1)) .cse4) (or .cse5 .cse0 (not (<= ~waterLevel~0 1)) .cse4)))) [2022-11-19 06:43:00,599 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 419 443) no Hoare annotation was computed. [2022-11-19 06:43:00,600 INFO L895 garLoopResultBuilder]: At program point L433(line 433) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)) .cse3) (let ((.cse4 (select |#memory_int| 1))) (or (not (= ~waterLevel~0 1)) (not (= (select |#length| 12) 25)) (not (= (select .cse4 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) .cse0 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse2 (not (= (select .cse4 1) 0)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~3#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~7#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) .cse3 (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))))) [2022-11-19 06:43:00,600 INFO L899 garLoopResultBuilder]: For program point L427(lines 427 435) no Hoare annotation was computed. [2022-11-19 06:43:00,600 INFO L895 garLoopResultBuilder]: At program point L423(lines 423 440) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) (= ~pumpRunning~0 0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-19 06:43:00,600 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 225 236) no Hoare annotation was computed. [2022-11-19 06:43:00,601 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 225 236) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (let ((.cse4 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= (select .cse4 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not .cse0) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) .cse2 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not .cse1) (not (= (select .cse4 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (= |old(~waterLevel~0)| ~waterLevel~0) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) .cse5 (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) (or .cse2 .cse3 .cse5))) [2022-11-19 06:43:00,601 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 529 539) the Hoare annotation is: true [2022-11-19 06:43:00,601 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 529 539) no Hoare annotation was computed. [2022-11-19 06:43:00,602 INFO L902 garLoopResultBuilder]: At program point L534(line 534) the Hoare annotation is: true [2022-11-19 06:43:00,602 INFO L899 garLoopResultBuilder]: For program point L534-1(line 534) no Hoare annotation was computed. [2022-11-19 06:43:00,613 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:43:00,618 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-19 06:43:00,722 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 06:43:00 BoogieIcfgContainer [2022-11-19 06:43:00,722 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-19 06:43:00,723 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-19 06:43:00,723 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-19 06:43:00,723 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-19 06:43:00,724 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 06:41:36" (3/4) ... [2022-11-19 06:43:00,732 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-19 06:43:00,739 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-19 06:43:00,739 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-19 06:43:00,740 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-19 06:43:00,740 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-19 06:43:00,740 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-19 06:43:00,740 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-19 06:43:00,740 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 06:43:00,741 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-19 06:43:00,741 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-19 06:43:00,741 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-19 06:43:00,760 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2022-11-19 06:43:00,761 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 13 nodes and edges [2022-11-19 06:43:00,761 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 6 nodes and edges [2022-11-19 06:43:00,762 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-19 06:43:00,763 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-19 06:43:00,794 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && pumpRunning == 0) && \result == tmp) && methAndRunningLastTime == 0) && \valid[9] == 1) && \result == retValue_acc) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && 1 == retValue_acc) && 31 == unknown-#length-unknown[2]) && head == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && 30 == unknown-#length-unknown[13]) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[1][0] == 48) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 [2022-11-19 06:43:00,796 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && ((!(1 == systemActive) || \old(pumpRunning) == 0) || (pumpRunning == \old(pumpRunning) && waterLevel <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(0 == systemActive))) && ((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && waterLevel <= \old(waterLevel)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) [2022-11-19 06:43:00,799 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && (((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && waterLevel <= \old(waterLevel)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || ((methAndRunningLastTime == 0 && 2 <= waterLevel) && waterLevel <= \old(waterLevel)))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && waterLevel <= \old(waterLevel))) || \old(pumpRunning) == 0)) && (((!(1 == systemActive) || \old(pumpRunning) == 0) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-19 06:43:00,800 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) [2022-11-19 06:43:00,802 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && (((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || \old(pumpRunning) == 0) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && ((((!(1 == systemActive) || \old(pumpRunning) == 0) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == 0)) || (!(tmp == 0) && tmp == methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || (((methAndRunningLastTime == 0 && 2 <= waterLevel) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) [2022-11-19 06:43:00,802 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) [2022-11-19 06:43:00,803 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || (pumpRunning == 0 && methAndRunningLastTime == 0))) && ((((((!(\old(methAndRunningLastTime) == 0) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((!(pumpRunning == 0) && 2 <= waterLevel) && pumpRunning == tmp___0) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || ((((methAndRunningLastTime == 0 && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((methAndRunningLastTime == 0 && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && ((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical) || methaneLevelCritical == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0)) && (((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || \old(pumpRunning) == 0) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == 0))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) [2022-11-19 06:43:00,804 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || ((((((((aux-isMethaneAlarm()-aux <= 0 && retValue_acc == tmp___0) && tmp == \result) && \result == tmp) && retValue_acc == \result) && tmp___0 == 1) && tmp <= 0) && 0 <= aux-isMethaneAlarm()-aux) && 0 <= \result)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(methAndRunningLastTime == 0)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && tmp == 1)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) || !(methAndRunningLastTime == 0)) [2022-11-19 06:43:00,807 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || \old(pumpRunning) == 0) && (!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-19 06:43:00,864 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/witness.graphml [2022-11-19 06:43:00,864 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-19 06:43:00,865 INFO L158 Benchmark]: Toolchain (without parser) took 85824.78ms. Allocated memory was 132.1MB in the beginning and 327.2MB in the end (delta: 195.0MB). Free memory was 90.9MB in the beginning and 137.2MB in the end (delta: -46.3MB). Peak memory consumption was 148.8MB. Max. memory is 16.1GB. [2022-11-19 06:43:00,866 INFO L158 Benchmark]: CDTParser took 0.32ms. Allocated memory is still 132.1MB. Free memory is still 108.7MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-19 06:43:00,867 INFO L158 Benchmark]: CACSL2BoogieTranslator took 665.58ms. Allocated memory is still 132.1MB. Free memory was 90.6MB in the beginning and 97.9MB in the end (delta: -7.2MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-11-19 06:43:00,867 INFO L158 Benchmark]: Boogie Procedure Inliner took 93.15ms. Allocated memory is still 132.1MB. Free memory was 97.3MB in the beginning and 95.2MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-19 06:43:00,869 INFO L158 Benchmark]: Boogie Preprocessor took 44.60ms. Allocated memory is still 132.1MB. Free memory was 95.2MB in the beginning and 93.7MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-19 06:43:00,869 INFO L158 Benchmark]: RCFGBuilder took 905.05ms. Allocated memory is still 132.1MB. Free memory was 93.7MB in the beginning and 66.4MB in the end (delta: 27.3MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. [2022-11-19 06:43:00,870 INFO L158 Benchmark]: TraceAbstraction took 83961.86ms. Allocated memory was 132.1MB in the beginning and 327.2MB in the end (delta: 195.0MB). Free memory was 65.9MB in the beginning and 143.5MB in the end (delta: -77.6MB). Peak memory consumption was 165.7MB. Max. memory is 16.1GB. [2022-11-19 06:43:00,870 INFO L158 Benchmark]: Witness Printer took 141.71ms. Allocated memory is still 327.2MB. Free memory was 143.5MB in the beginning and 137.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-19 06:43:00,875 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.32ms. Allocated memory is still 132.1MB. Free memory is still 108.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 665.58ms. Allocated memory is still 132.1MB. Free memory was 90.6MB in the beginning and 97.9MB in the end (delta: -7.2MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 93.15ms. Allocated memory is still 132.1MB. Free memory was 97.3MB in the beginning and 95.2MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 44.60ms. Allocated memory is still 132.1MB. Free memory was 95.2MB in the beginning and 93.7MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 905.05ms. Allocated memory is still 132.1MB. Free memory was 93.7MB in the beginning and 66.4MB in the end (delta: 27.3MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. * TraceAbstraction took 83961.86ms. Allocated memory was 132.1MB in the beginning and 327.2MB in the end (delta: 195.0MB). Free memory was 65.9MB in the beginning and 143.5MB in the end (delta: -77.6MB). Peak memory consumption was 165.7MB. Max. memory is 16.1GB. * Witness Printer took 141.71ms. Allocated memory is still 327.2MB. Free memory was 143.5MB in the beginning and 137.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 160]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 80 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 83.8s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 21.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 27.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1202 SdHoareTripleChecker+Valid, 5.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1168 mSDsluCounter, 3380 SdHoareTripleChecker+Invalid, 4.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2366 mSDsCounter, 361 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3326 IncrementalHoareTripleChecker+Invalid, 3687 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 361 mSolverCounterUnsat, 1014 mSDtfsCounter, 3326 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 892 GetRequests, 688 SyntacticMatches, 9 SemanticMatches, 195 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2838 ImplicationChecksByTransitivity, 35.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=713occurred in iteration=11, InterpolantAutomatonStates: 122, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 154 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 1968 PreInvPairs, 2218 NumberOfFragments, 6049 HoareAnnotationTreeSize, 1968 FomulaSimplifications, 3924 FormulaSimplificationTreeSizeReduction, 2.0s HoareSimplificationTime, 44 FomulaSimplificationsInter, 64216 FormulaSimplificationTreeSizeReductionInter, 25.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.7s SatisfiabilityAnalysisTime, 6.6s InterpolantComputationTime, 1243 NumberOfCodeBlocks, 1243 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 1314 ConstructedInterpolants, 0 QuantifiedInterpolants, 3428 SizeOfPredicates, 38 NumberOfNonLiveVariables, 2137 ConjunctsInSsa, 128 ConjunctsInUnsatCore, 19 InterpolantComputations, 11 PerfectInterpolantSequences, 471/582 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 6.4s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 7, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 63, DAG_INTERPRETER_EARLY_EXITS: 7, TOOLS_POST_APPLICATIONS: 69, TOOLS_POST_TIME: 1.7s, TOOLS_POST_CALL_APPLICATIONS: 43, TOOLS_POST_CALL_TIME: 2.9s, TOOLS_POST_RETURN_APPLICATIONS: 36, TOOLS_POST_RETURN_TIME: 1.0s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 146, TOOLS_QUANTIFIERELIM_TIME: 5.5s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.3s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 175, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 30, DOMAIN_JOIN_TIME: 0.5s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 0, DOMAIN_WIDEN_TIME: 0.0s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 1, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 63, DOMAIN_ISBOTTOM_TIME: 0.1s, LOOP_SUMMARIZER_APPLICATIONS: 1, LOOP_SUMMARIZER_CACHE_MISSES: 1, LOOP_SUMMARIZER_OVERALL_TIME: 1.3s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 1.3s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 1, CALL_SUMMARIZER_APPLICATIONS: 36, CALL_SUMMARIZER_CACHE_MISSES: 7, CALL_SUMMARIZER_OVERALL_TIME: 0.2s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.2s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 913, DAG_COMPRESSION_RETAINED_NODES: 184, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 471]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && (((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && waterLevel <= \old(waterLevel)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || ((methAndRunningLastTime == 0 && 2 <= waterLevel) && waterLevel <= \old(waterLevel)))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && waterLevel <= \old(waterLevel))) || \old(pumpRunning) == 0)) && (((!(1 == systemActive) || \old(pumpRunning) == 0) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 387]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && ((!(1 == systemActive) || \old(pumpRunning) == 0) || (pumpRunning == \old(pumpRunning) && waterLevel <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(0 == systemActive))) && ((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && waterLevel <= \old(waterLevel)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) - InvariantResult [Line: 325]: Loop Invariant Derived loop invariant: (((((!(pumpRunning == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && splverifierCounter == 0) && !(0 == systemActive)) || (((methAndRunningLastTime == 0 && 1 == systemActive) && splverifierCounter == 0) && !(0 == systemActive))) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 509]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || ((((((((aux-isMethaneAlarm()-aux <= 0 && retValue_acc == tmp___0) && tmp == \result) && \result == tmp) && retValue_acc == \result) && tmp___0 == 1) && tmp <= 0) && 0 <= aux-isMethaneAlarm()-aux) && 0 <= \result)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(methAndRunningLastTime == 0)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && tmp == 1)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || \old(pumpRunning) == 0) && (!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 627]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && splverifierCounter == 0) && !(0 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) - InvariantResult [Line: 142]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 184]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && (((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || \old(pumpRunning) == 0) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && ((((!(1 == systemActive) || \old(pumpRunning) == 0) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == 0)) || (!(tmp == 0) && tmp == methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || (((methAndRunningLastTime == 0 && 2 <= waterLevel) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) - InvariantResult [Line: 423]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 142]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && pumpRunning == 0) && \result == tmp) && methAndRunningLastTime == 0) && \valid[9] == 1) && \result == retValue_acc) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && 1 == retValue_acc) && 31 == unknown-#length-unknown[2]) && head == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && 30 == unknown-#length-unknown[13]) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[1][0] == 48) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 - InvariantResult [Line: 176]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || (pumpRunning == 0 && methAndRunningLastTime == 0))) && ((((((!(\old(methAndRunningLastTime) == 0) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((!(pumpRunning == 0) && 2 <= waterLevel) && pumpRunning == tmp___0) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || ((((methAndRunningLastTime == 0 && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((methAndRunningLastTime == 0 && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && ((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical) || methaneLevelCritical == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0)) && (((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || \old(pumpRunning) == 0) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == 0))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) - InvariantResult [Line: 324]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2022-11-19 06:43:00,946 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d17393f3-4be4-4f33-a32f-f156764477dc/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE