./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0cfed743c16ce3c8683c42b92f2e032d4ce7b489a9d3a5e140ec6101c472b3cb --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-19 07:32:20,744 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-19 07:32:20,747 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-19 07:32:20,767 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-19 07:32:20,767 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-19 07:32:20,768 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-19 07:32:20,769 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-19 07:32:20,771 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-19 07:32:20,773 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-19 07:32:20,779 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-19 07:32:20,781 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-19 07:32:20,784 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-19 07:32:20,784 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-19 07:32:20,787 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-19 07:32:20,789 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-19 07:32:20,791 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-19 07:32:20,793 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-19 07:32:20,794 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-19 07:32:20,799 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-19 07:32:20,805 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-19 07:32:20,807 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-19 07:32:20,809 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-19 07:32:20,812 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-19 07:32:20,813 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-19 07:32:20,821 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-19 07:32:20,821 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-19 07:32:20,821 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-19 07:32:20,823 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-19 07:32:20,824 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-19 07:32:20,824 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-19 07:32:20,825 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-19 07:32:20,827 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-19 07:32:20,829 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-19 07:32:20,830 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-19 07:32:20,832 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-19 07:32:20,832 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-19 07:32:20,833 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-19 07:32:20,833 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-19 07:32:20,833 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-19 07:32:20,834 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-19 07:32:20,835 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-19 07:32:20,836 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-19 07:32:20,873 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-19 07:32:20,873 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-19 07:32:20,873 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-19 07:32:20,874 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-19 07:32:20,878 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-19 07:32:20,878 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-19 07:32:20,878 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-19 07:32:20,878 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-19 07:32:20,878 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-19 07:32:20,879 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-19 07:32:20,880 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-19 07:32:20,880 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-19 07:32:20,880 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-19 07:32:20,880 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-19 07:32:20,880 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-19 07:32:20,881 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-19 07:32:20,881 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-19 07:32:20,881 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-19 07:32:20,882 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-19 07:32:20,882 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-19 07:32:20,882 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-19 07:32:20,882 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-19 07:32:20,882 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-19 07:32:20,883 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-19 07:32:20,883 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-19 07:32:20,883 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-19 07:32:20,883 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-19 07:32:20,884 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-19 07:32:20,884 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-19 07:32:20,884 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-19 07:32:20,884 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-19 07:32:20,884 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-19 07:32:20,885 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 07:32:20,885 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-19 07:32:20,885 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-19 07:32:20,885 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-19 07:32:20,885 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-19 07:32:20,885 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-19 07:32:20,886 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-19 07:32:20,886 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-19 07:32:20,886 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-19 07:32:20,886 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0cfed743c16ce3c8683c42b92f2e032d4ce7b489a9d3a5e140ec6101c472b3cb [2022-11-19 07:32:21,235 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-19 07:32:21,272 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-19 07:32:21,274 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-19 07:32:21,275 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-19 07:32:21,276 INFO L275 PluginConnector]: CDTParser initialized [2022-11-19 07:32:21,278 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/../../sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c [2022-11-19 07:32:21,350 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/data/533e3084d/bd40c8129a1f44b9a6e2e200fc4115ed/FLAG04a457901 [2022-11-19 07:32:21,914 INFO L306 CDTParser]: Found 1 translation units. [2022-11-19 07:32:21,915 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c [2022-11-19 07:32:21,928 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/data/533e3084d/bd40c8129a1f44b9a6e2e200fc4115ed/FLAG04a457901 [2022-11-19 07:32:22,218 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/data/533e3084d/bd40c8129a1f44b9a6e2e200fc4115ed [2022-11-19 07:32:22,221 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-19 07:32:22,222 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-19 07:32:22,224 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-19 07:32:22,224 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-19 07:32:22,227 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-19 07:32:22,228 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:32:22" (1/1) ... [2022-11-19 07:32:22,229 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3e1ac672 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:32:22, skipping insertion in model container [2022-11-19 07:32:22,229 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:32:22" (1/1) ... [2022-11-19 07:32:22,237 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-19 07:32:22,276 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-19 07:32:22,694 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c[17978,17991] [2022-11-19 07:32:22,699 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 07:32:22,712 INFO L203 MainTranslator]: Completed pre-run [2022-11-19 07:32:22,804 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c[17978,17991] [2022-11-19 07:32:22,804 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 07:32:22,820 INFO L208 MainTranslator]: Completed translation [2022-11-19 07:32:22,820 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:32:22 WrapperNode [2022-11-19 07:32:22,821 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-19 07:32:22,822 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-19 07:32:22,822 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-19 07:32:22,822 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-19 07:32:22,829 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:32:22" (1/1) ... [2022-11-19 07:32:22,841 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:32:22" (1/1) ... [2022-11-19 07:32:22,862 INFO L138 Inliner]: procedures = 53, calls = 96, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 190 [2022-11-19 07:32:22,862 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-19 07:32:22,863 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-19 07:32:22,863 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-19 07:32:22,863 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-19 07:32:22,872 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:32:22" (1/1) ... [2022-11-19 07:32:22,872 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:32:22" (1/1) ... [2022-11-19 07:32:22,882 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:32:22" (1/1) ... [2022-11-19 07:32:22,883 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:32:22" (1/1) ... [2022-11-19 07:32:22,888 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:32:22" (1/1) ... [2022-11-19 07:32:22,905 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:32:22" (1/1) ... [2022-11-19 07:32:22,906 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:32:22" (1/1) ... [2022-11-19 07:32:22,907 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:32:22" (1/1) ... [2022-11-19 07:32:22,909 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-19 07:32:22,910 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-19 07:32:22,910 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-19 07:32:22,910 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-19 07:32:22,912 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:32:22" (1/1) ... [2022-11-19 07:32:22,927 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 07:32:22,937 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:32:22,950 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-19 07:32:22,974 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-19 07:32:23,002 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-19 07:32:23,003 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-19 07:32:23,003 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-19 07:32:23,003 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-19 07:32:23,003 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-19 07:32:23,003 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-19 07:32:23,004 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-19 07:32:23,004 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-19 07:32:23,004 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-19 07:32:23,004 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-19 07:32:23,004 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-19 07:32:23,005 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-19 07:32:23,005 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-19 07:32:23,005 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-19 07:32:23,005 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-19 07:32:23,005 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-19 07:32:23,112 INFO L235 CfgBuilder]: Building ICFG [2022-11-19 07:32:23,114 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-19 07:32:23,440 INFO L276 CfgBuilder]: Performing block encoding [2022-11-19 07:32:23,584 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-19 07:32:23,594 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-19 07:32:23,597 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:32:23 BoogieIcfgContainer [2022-11-19 07:32:23,597 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-19 07:32:23,600 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-19 07:32:23,601 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-19 07:32:23,605 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-19 07:32:23,606 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 07:32:22" (1/3) ... [2022-11-19 07:32:23,607 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@618371de and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:32:23, skipping insertion in model container [2022-11-19 07:32:23,607 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:32:22" (2/3) ... [2022-11-19 07:32:23,607 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@618371de and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:32:23, skipping insertion in model container [2022-11-19 07:32:23,608 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:32:23" (3/3) ... [2022-11-19 07:32:23,609 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product41.cil.c [2022-11-19 07:32:23,629 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-19 07:32:23,629 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-19 07:32:23,697 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-19 07:32:23,704 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@32d05bd6, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-19 07:32:23,704 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-19 07:32:23,712 INFO L276 IsEmpty]: Start isEmpty. Operand has 51 states, 33 states have (on average 1.4242424242424243) internal successors, (47), 39 states have internal predecessors, (47), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2022-11-19 07:32:23,721 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-19 07:32:23,721 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:32:23,722 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:32:23,723 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:32:23,730 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:32:23,730 INFO L85 PathProgramCache]: Analyzing trace with hash 165038279, now seen corresponding path program 1 times [2022-11-19 07:32:23,740 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:32:23,742 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1491735328] [2022-11-19 07:32:23,743 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:32:23,743 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:32:23,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:32:23,907 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:32:23,907 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:32:23,908 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1491735328] [2022-11-19 07:32:23,908 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1491735328] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:32:23,909 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:32:23,909 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-19 07:32:23,911 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1419832017] [2022-11-19 07:32:23,911 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:32:23,916 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-19 07:32:23,916 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:32:23,951 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-19 07:32:23,952 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-19 07:32:23,954 INFO L87 Difference]: Start difference. First operand has 51 states, 33 states have (on average 1.4242424242424243) internal successors, (47), 39 states have internal predecessors, (47), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:32:24,044 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:32:24,045 INFO L93 Difference]: Finished difference Result 100 states and 135 transitions. [2022-11-19 07:32:24,047 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-19 07:32:24,048 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-11-19 07:32:24,049 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:32:24,055 INFO L225 Difference]: With dead ends: 100 [2022-11-19 07:32:24,056 INFO L226 Difference]: Without dead ends: 46 [2022-11-19 07:32:24,058 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-19 07:32:24,061 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 48 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:32:24,063 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 48 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:32:24,091 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2022-11-19 07:32:24,108 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 46. [2022-11-19 07:32:24,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 30 states have (on average 1.3) internal successors, (39), 35 states have internal predecessors, (39), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-19 07:32:24,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 58 transitions. [2022-11-19 07:32:24,124 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 58 transitions. Word has length 17 [2022-11-19 07:32:24,125 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:32:24,125 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 58 transitions. [2022-11-19 07:32:24,125 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:32:24,125 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 58 transitions. [2022-11-19 07:32:24,127 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-19 07:32:24,127 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:32:24,127 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:32:24,128 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-19 07:32:24,128 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:32:24,129 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:32:24,129 INFO L85 PathProgramCache]: Analyzing trace with hash -485669593, now seen corresponding path program 1 times [2022-11-19 07:32:24,129 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:32:24,129 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [230538114] [2022-11-19 07:32:24,130 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:32:24,130 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:32:24,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:32:24,236 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:32:24,236 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:32:24,237 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [230538114] [2022-11-19 07:32:24,237 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [230538114] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:32:24,237 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:32:24,237 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 07:32:24,238 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [209579113] [2022-11-19 07:32:24,238 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:32:24,239 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 07:32:24,239 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:32:24,240 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 07:32:24,240 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:32:24,240 INFO L87 Difference]: Start difference. First operand 46 states and 58 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:32:24,302 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:32:24,302 INFO L93 Difference]: Finished difference Result 69 states and 87 transitions. [2022-11-19 07:32:24,303 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 07:32:24,304 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-11-19 07:32:24,304 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:32:24,305 INFO L225 Difference]: With dead ends: 69 [2022-11-19 07:32:24,305 INFO L226 Difference]: Without dead ends: 38 [2022-11-19 07:32:24,306 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:32:24,307 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 7 mSDsluCounter, 25 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 59 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 07:32:24,308 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 59 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 07:32:24,308 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-11-19 07:32:24,313 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 38. [2022-11-19 07:32:24,314 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 25 states have (on average 1.32) internal successors, (33), 30 states have internal predecessors, (33), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-19 07:32:24,315 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 47 transitions. [2022-11-19 07:32:24,315 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 47 transitions. Word has length 18 [2022-11-19 07:32:24,315 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:32:24,316 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 47 transitions. [2022-11-19 07:32:24,316 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:32:24,316 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 47 transitions. [2022-11-19 07:32:24,317 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-19 07:32:24,317 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:32:24,317 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:32:24,317 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-19 07:32:24,318 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:32:24,321 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:32:24,321 INFO L85 PathProgramCache]: Analyzing trace with hash 735117968, now seen corresponding path program 1 times [2022-11-19 07:32:24,321 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:32:24,322 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1602959689] [2022-11-19 07:32:24,322 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:32:24,323 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:32:24,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:32:24,490 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:32:24,490 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:32:24,490 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1602959689] [2022-11-19 07:32:24,491 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1602959689] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:32:24,491 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:32:24,491 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 07:32:24,491 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [25912782] [2022-11-19 07:32:24,492 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:32:24,492 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 07:32:24,492 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:32:24,493 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 07:32:24,493 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:32:24,493 INFO L87 Difference]: Start difference. First operand 38 states and 47 transitions. Second operand has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:32:24,527 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:32:24,527 INFO L93 Difference]: Finished difference Result 74 states and 93 transitions. [2022-11-19 07:32:24,528 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 07:32:24,528 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2022-11-19 07:32:24,529 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:32:24,529 INFO L225 Difference]: With dead ends: 74 [2022-11-19 07:32:24,529 INFO L226 Difference]: Without dead ends: 38 [2022-11-19 07:32:24,530 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 07:32:24,531 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 36 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 32 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 07:32:24,532 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 32 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 07:32:24,533 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-11-19 07:32:24,539 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 38. [2022-11-19 07:32:24,539 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 25 states have (on average 1.28) internal successors, (32), 30 states have internal predecessors, (32), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-19 07:32:24,540 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 46 transitions. [2022-11-19 07:32:24,541 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 46 transitions. Word has length 20 [2022-11-19 07:32:24,541 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:32:24,541 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 46 transitions. [2022-11-19 07:32:24,541 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-19 07:32:24,542 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 46 transitions. [2022-11-19 07:32:24,543 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-19 07:32:24,543 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:32:24,543 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:32:24,543 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-19 07:32:24,544 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:32:24,544 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:32:24,544 INFO L85 PathProgramCache]: Analyzing trace with hash -1216734981, now seen corresponding path program 1 times [2022-11-19 07:32:24,544 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:32:24,545 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [912833069] [2022-11-19 07:32:24,545 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:32:24,545 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:32:24,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:32:24,889 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:32:24,891 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:32:24,891 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [912833069] [2022-11-19 07:32:24,892 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [912833069] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:32:24,892 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:32:24,892 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-19 07:32:24,892 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1232164853] [2022-11-19 07:32:24,893 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:32:24,894 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-19 07:32:24,895 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:32:24,895 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-19 07:32:24,895 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-19 07:32:24,896 INFO L87 Difference]: Start difference. First operand 38 states and 46 transitions. Second operand has 6 states, 6 states have (on average 3.3333333333333335) internal successors, (20), 6 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-19 07:32:25,245 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:32:25,245 INFO L93 Difference]: Finished difference Result 200 states and 253 transitions. [2022-11-19 07:32:25,246 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-19 07:32:25,246 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.3333333333333335) internal successors, (20), 6 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 25 [2022-11-19 07:32:25,246 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:32:25,253 INFO L225 Difference]: With dead ends: 200 [2022-11-19 07:32:25,253 INFO L226 Difference]: Without dead ends: 164 [2022-11-19 07:32:25,257 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-11-19 07:32:25,258 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 148 mSDsluCounter, 157 mSDsCounter, 0 mSdLazyCounter, 163 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 148 SdHoareTripleChecker+Valid, 241 SdHoareTripleChecker+Invalid, 202 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 163 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-19 07:32:25,259 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [148 Valid, 241 Invalid, 202 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 163 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-19 07:32:25,260 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 164 states. [2022-11-19 07:32:25,310 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 164 to 138. [2022-11-19 07:32:25,316 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 138 states, 94 states have (on average 1.2872340425531914) internal successors, (121), 105 states have internal predecessors, (121), 23 states have call successors, (23), 19 states have call predecessors, (23), 20 states have return successors, (27), 22 states have call predecessors, (27), 23 states have call successors, (27) [2022-11-19 07:32:25,323 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 138 states to 138 states and 171 transitions. [2022-11-19 07:32:25,324 INFO L78 Accepts]: Start accepts. Automaton has 138 states and 171 transitions. Word has length 25 [2022-11-19 07:32:25,324 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:32:25,324 INFO L495 AbstractCegarLoop]: Abstraction has 138 states and 171 transitions. [2022-11-19 07:32:25,324 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.3333333333333335) internal successors, (20), 6 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-19 07:32:25,324 INFO L276 IsEmpty]: Start isEmpty. Operand 138 states and 171 transitions. [2022-11-19 07:32:25,326 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-19 07:32:25,326 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:32:25,326 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:32:25,326 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-19 07:32:25,326 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:32:25,327 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:32:25,327 INFO L85 PathProgramCache]: Analyzing trace with hash -1587296366, now seen corresponding path program 1 times [2022-11-19 07:32:25,327 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:32:25,327 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [33056156] [2022-11-19 07:32:25,327 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:32:25,328 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:32:25,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:32:25,503 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:32:25,504 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:32:25,504 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [33056156] [2022-11-19 07:32:25,504 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [33056156] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:32:25,505 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:32:25,505 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-19 07:32:25,506 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [834825862] [2022-11-19 07:32:25,506 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:32:25,507 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-19 07:32:25,508 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:32:25,509 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-19 07:32:25,512 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-19 07:32:25,513 INFO L87 Difference]: Start difference. First operand 138 states and 171 transitions. Second operand has 6 states, 6 states have (on average 3.5) internal successors, (21), 6 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-19 07:32:25,703 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:32:25,703 INFO L93 Difference]: Finished difference Result 408 states and 526 transitions. [2022-11-19 07:32:25,703 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-19 07:32:25,705 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.5) internal successors, (21), 6 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 26 [2022-11-19 07:32:25,706 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:32:25,710 INFO L225 Difference]: With dead ends: 408 [2022-11-19 07:32:25,711 INFO L226 Difference]: Without dead ends: 272 [2022-11-19 07:32:25,717 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-19 07:32:25,723 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 109 mSDsluCounter, 137 mSDsCounter, 0 mSdLazyCounter, 102 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 109 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 125 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 102 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:32:25,726 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [109 Valid, 191 Invalid, 125 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 102 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:32:25,728 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 272 states. [2022-11-19 07:32:25,784 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 272 to 241. [2022-11-19 07:32:25,785 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 241 states, 166 states have (on average 1.2530120481927711) internal successors, (208), 181 states have internal predecessors, (208), 39 states have call successors, (39), 34 states have call predecessors, (39), 35 states have return successors, (50), 38 states have call predecessors, (50), 39 states have call successors, (50) [2022-11-19 07:32:25,789 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 241 states to 241 states and 297 transitions. [2022-11-19 07:32:25,789 INFO L78 Accepts]: Start accepts. Automaton has 241 states and 297 transitions. Word has length 26 [2022-11-19 07:32:25,790 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:32:25,791 INFO L495 AbstractCegarLoop]: Abstraction has 241 states and 297 transitions. [2022-11-19 07:32:25,791 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.5) internal successors, (21), 6 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-19 07:32:25,791 INFO L276 IsEmpty]: Start isEmpty. Operand 241 states and 297 transitions. [2022-11-19 07:32:25,797 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-19 07:32:25,798 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:32:25,798 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:32:25,798 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-19 07:32:25,798 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:32:25,799 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:32:25,799 INFO L85 PathProgramCache]: Analyzing trace with hash 1972018015, now seen corresponding path program 1 times [2022-11-19 07:32:25,799 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:32:25,799 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1901911210] [2022-11-19 07:32:25,800 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:32:25,800 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:32:25,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:32:26,125 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:32:26,125 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:32:26,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1901911210] [2022-11-19 07:32:26,125 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1901911210] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:32:26,126 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:32:26,126 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-19 07:32:26,126 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [530050078] [2022-11-19 07:32:26,126 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:32:26,128 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-19 07:32:26,129 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:32:26,129 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-19 07:32:26,130 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2022-11-19 07:32:26,131 INFO L87 Difference]: Start difference. First operand 241 states and 297 transitions. Second operand has 9 states, 8 states have (on average 2.75) internal successors, (22), 8 states have internal predecessors, (22), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-19 07:32:26,749 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:32:26,750 INFO L93 Difference]: Finished difference Result 822 states and 1027 transitions. [2022-11-19 07:32:26,754 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-19 07:32:26,755 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 2.75) internal successors, (22), 8 states have internal predecessors, (22), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 29 [2022-11-19 07:32:26,755 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:32:26,763 INFO L225 Difference]: With dead ends: 822 [2022-11-19 07:32:26,763 INFO L226 Difference]: Without dead ends: 622 [2022-11-19 07:32:26,764 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=69, Invalid=171, Unknown=0, NotChecked=0, Total=240 [2022-11-19 07:32:26,769 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 195 mSDsluCounter, 226 mSDsCounter, 0 mSdLazyCounter, 348 mSolverCounterSat, 75 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 204 SdHoareTripleChecker+Valid, 292 SdHoareTripleChecker+Invalid, 423 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 75 IncrementalHoareTripleChecker+Valid, 348 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-19 07:32:26,772 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [204 Valid, 292 Invalid, 423 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [75 Valid, 348 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-19 07:32:26,774 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 622 states. [2022-11-19 07:32:26,883 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 622 to 561. [2022-11-19 07:32:26,884 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 561 states, 388 states have (on average 1.2422680412371134) internal successors, (482), 416 states have internal predecessors, (482), 90 states have call successors, (90), 79 states have call predecessors, (90), 82 states have return successors, (113), 88 states have call predecessors, (113), 90 states have call successors, (113) [2022-11-19 07:32:26,888 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 561 states to 561 states and 685 transitions. [2022-11-19 07:32:26,889 INFO L78 Accepts]: Start accepts. Automaton has 561 states and 685 transitions. Word has length 29 [2022-11-19 07:32:26,889 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:32:26,889 INFO L495 AbstractCegarLoop]: Abstraction has 561 states and 685 transitions. [2022-11-19 07:32:26,889 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 2.75) internal successors, (22), 8 states have internal predecessors, (22), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-19 07:32:26,889 INFO L276 IsEmpty]: Start isEmpty. Operand 561 states and 685 transitions. [2022-11-19 07:32:26,892 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-19 07:32:26,892 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:32:26,892 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:32:26,892 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-19 07:32:26,893 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:32:26,894 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:32:26,894 INFO L85 PathProgramCache]: Analyzing trace with hash 467117790, now seen corresponding path program 1 times [2022-11-19 07:32:26,894 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:32:26,894 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [549470397] [2022-11-19 07:32:26,894 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:32:26,895 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:32:26,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:32:27,080 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-19 07:32:27,080 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:32:27,080 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [549470397] [2022-11-19 07:32:27,080 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [549470397] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:32:27,080 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1994254840] [2022-11-19 07:32:27,081 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:32:27,081 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:32:27,082 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:32:27,085 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:32:27,094 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-19 07:32:27,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:32:27,181 INFO L263 TraceCheckSpWp]: Trace formula consists of 209 conjuncts, 19 conjunts are in the unsatisfiable core [2022-11-19 07:32:27,187 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:32:27,315 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:32:27,315 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:32:27,492 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-19 07:32:27,492 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1994254840] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:32:27,492 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1035760522] [2022-11-19 07:32:27,512 INFO L159 IcfgInterpreter]: Started Sifa with 29 locations of interest [2022-11-19 07:32:27,512 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:32:27,516 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:32:27,521 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:32:27,522 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:32:28,083 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 114 for LOIs [2022-11-19 07:32:28,099 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 115 for LOIs [2022-11-19 07:32:28,871 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 140 for LOIs [2022-11-19 07:32:28,913 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:32:36,746 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1035760522] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:32:36,746 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:32:36,747 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [22] imperfect sequences [7, 6, 7] total 32 [2022-11-19 07:32:36,747 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1556096744] [2022-11-19 07:32:36,748 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:32:36,748 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-19 07:32:36,748 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:32:36,749 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-19 07:32:36,749 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=135, Invalid=857, Unknown=0, NotChecked=0, Total=992 [2022-11-19 07:32:36,749 INFO L87 Difference]: Start difference. First operand 561 states and 685 transitions. Second operand has 23 states, 18 states have (on average 1.2222222222222223) internal successors, (22), 17 states have internal predecessors, (22), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-19 07:32:42,339 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:32:42,339 INFO L93 Difference]: Finished difference Result 1201 states and 1477 transitions. [2022-11-19 07:32:42,340 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-11-19 07:32:42,340 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 18 states have (on average 1.2222222222222223) internal successors, (22), 17 states have internal predecessors, (22), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Word has length 30 [2022-11-19 07:32:42,341 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:32:42,344 INFO L225 Difference]: With dead ends: 1201 [2022-11-19 07:32:42,344 INFO L226 Difference]: Without dead ends: 673 [2022-11-19 07:32:42,346 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 104 GetRequests, 62 SyntacticMatches, 3 SemanticMatches, 39 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 404 ImplicationChecksByTransitivity, 12.2s TimeCoverageRelationStatistics Valid=205, Invalid=1435, Unknown=0, NotChecked=0, Total=1640 [2022-11-19 07:32:42,347 INFO L413 NwaCegarLoop]: 42 mSDtfsCounter, 90 mSDsluCounter, 255 mSDsCounter, 0 mSdLazyCounter, 670 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 92 SdHoareTripleChecker+Valid, 297 SdHoareTripleChecker+Invalid, 706 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 670 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-11-19 07:32:42,348 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [92 Valid, 297 Invalid, 706 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 670 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-11-19 07:32:42,349 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 673 states. [2022-11-19 07:32:42,497 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 673 to 637. [2022-11-19 07:32:42,499 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 637 states, 442 states have (on average 1.2285067873303168) internal successors, (543), 472 states have internal predecessors, (543), 101 states have call successors, (101), 90 states have call predecessors, (101), 93 states have return successors, (124), 97 states have call predecessors, (124), 101 states have call successors, (124) [2022-11-19 07:32:42,502 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 637 states to 637 states and 768 transitions. [2022-11-19 07:32:42,503 INFO L78 Accepts]: Start accepts. Automaton has 637 states and 768 transitions. Word has length 30 [2022-11-19 07:32:42,503 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:32:42,503 INFO L495 AbstractCegarLoop]: Abstraction has 637 states and 768 transitions. [2022-11-19 07:32:42,504 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 18 states have (on average 1.2222222222222223) internal successors, (22), 17 states have internal predecessors, (22), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-19 07:32:42,504 INFO L276 IsEmpty]: Start isEmpty. Operand 637 states and 768 transitions. [2022-11-19 07:32:42,505 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-19 07:32:42,505 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:32:42,505 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:32:42,518 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-19 07:32:42,713 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2022-11-19 07:32:42,714 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:32:42,714 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:32:42,714 INFO L85 PathProgramCache]: Analyzing trace with hash -432583843, now seen corresponding path program 1 times [2022-11-19 07:32:42,714 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:32:42,714 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [279637296] [2022-11-19 07:32:42,714 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:32:42,715 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:32:42,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:32:42,863 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-19 07:32:42,863 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:32:42,864 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [279637296] [2022-11-19 07:32:42,864 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [279637296] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:32:42,864 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 07:32:42,864 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-19 07:32:42,864 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [156276837] [2022-11-19 07:32:42,864 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:32:42,865 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-19 07:32:42,865 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:32:42,865 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-19 07:32:42,865 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2022-11-19 07:32:42,865 INFO L87 Difference]: Start difference. First operand 637 states and 768 transitions. Second operand has 10 states, 8 states have (on average 3.0) internal successors, (24), 8 states have internal predecessors, (24), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-19 07:32:43,555 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:32:43,556 INFO L93 Difference]: Finished difference Result 2138 states and 2676 transitions. [2022-11-19 07:32:43,556 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-19 07:32:43,557 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 8 states have (on average 3.0) internal successors, (24), 8 states have internal predecessors, (24), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) Word has length 33 [2022-11-19 07:32:43,557 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:32:43,564 INFO L225 Difference]: With dead ends: 2138 [2022-11-19 07:32:43,564 INFO L226 Difference]: Without dead ends: 1582 [2022-11-19 07:32:43,567 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 36 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=84, Invalid=296, Unknown=0, NotChecked=0, Total=380 [2022-11-19 07:32:43,567 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 156 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 490 mSolverCounterSat, 75 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 162 SdHoareTripleChecker+Valid, 107 SdHoareTripleChecker+Invalid, 565 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 75 IncrementalHoareTripleChecker+Valid, 490 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-19 07:32:43,568 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [162 Valid, 107 Invalid, 565 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [75 Valid, 490 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-19 07:32:43,570 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1582 states. [2022-11-19 07:32:43,780 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1582 to 1468. [2022-11-19 07:32:43,784 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1468 states, 1025 states have (on average 1.2165853658536585) internal successors, (1247), 1084 states have internal predecessors, (1247), 231 states have call successors, (231), 203 states have call predecessors, (231), 211 states have return successors, (291), 224 states have call predecessors, (291), 231 states have call successors, (291) [2022-11-19 07:32:43,793 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1468 states to 1468 states and 1769 transitions. [2022-11-19 07:32:43,794 INFO L78 Accepts]: Start accepts. Automaton has 1468 states and 1769 transitions. Word has length 33 [2022-11-19 07:32:43,794 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:32:43,795 INFO L495 AbstractCegarLoop]: Abstraction has 1468 states and 1769 transitions. [2022-11-19 07:32:43,795 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 8 states have (on average 3.0) internal successors, (24), 8 states have internal predecessors, (24), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-19 07:32:43,795 INFO L276 IsEmpty]: Start isEmpty. Operand 1468 states and 1769 transitions. [2022-11-19 07:32:43,798 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-19 07:32:43,798 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:32:43,798 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:32:43,798 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-19 07:32:43,798 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:32:43,799 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:32:43,799 INFO L85 PathProgramCache]: Analyzing trace with hash 1680646829, now seen corresponding path program 1 times [2022-11-19 07:32:43,799 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:32:43,799 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [490332232] [2022-11-19 07:32:43,799 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:32:43,799 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:32:43,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:32:43,983 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 9 proven. 9 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 07:32:43,983 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:32:43,983 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [490332232] [2022-11-19 07:32:43,983 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [490332232] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:32:43,983 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [817997484] [2022-11-19 07:32:43,984 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:32:43,984 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:32:43,984 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:32:43,985 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:32:43,999 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-19 07:32:44,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:32:44,084 INFO L263 TraceCheckSpWp]: Trace formula consists of 273 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-19 07:32:44,087 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:32:44,132 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-19 07:32:44,132 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 07:32:44,132 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [817997484] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:32:44,132 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 07:32:44,133 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [8] total 10 [2022-11-19 07:32:44,133 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [458963224] [2022-11-19 07:32:44,133 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:32:44,133 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 07:32:44,133 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:32:44,134 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 07:32:44,134 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-11-19 07:32:44,134 INFO L87 Difference]: Start difference. First operand 1468 states and 1769 transitions. Second operand has 4 states, 4 states have (on average 8.0) internal successors, (32), 4 states have internal predecessors, (32), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-19 07:32:44,378 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:32:44,378 INFO L93 Difference]: Finished difference Result 2131 states and 2593 transitions. [2022-11-19 07:32:44,379 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 07:32:44,379 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.0) internal successors, (32), 4 states have internal predecessors, (32), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 53 [2022-11-19 07:32:44,379 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:32:44,382 INFO L225 Difference]: With dead ends: 2131 [2022-11-19 07:32:44,382 INFO L226 Difference]: Without dead ends: 537 [2022-11-19 07:32:44,386 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 54 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=24, Invalid=86, Unknown=0, NotChecked=0, Total=110 [2022-11-19 07:32:44,387 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 25 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 143 SdHoareTripleChecker+Invalid, 67 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:32:44,387 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 143 Invalid, 67 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:32:44,388 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 537 states. [2022-11-19 07:32:44,490 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 537 to 350. [2022-11-19 07:32:44,491 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 350 states, 240 states have (on average 1.175) internal successors, (282), 259 states have internal predecessors, (282), 57 states have call successors, (57), 52 states have call predecessors, (57), 52 states have return successors, (57), 50 states have call predecessors, (57), 57 states have call successors, (57) [2022-11-19 07:32:44,492 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 350 states to 350 states and 396 transitions. [2022-11-19 07:32:44,493 INFO L78 Accepts]: Start accepts. Automaton has 350 states and 396 transitions. Word has length 53 [2022-11-19 07:32:44,493 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:32:44,493 INFO L495 AbstractCegarLoop]: Abstraction has 350 states and 396 transitions. [2022-11-19 07:32:44,493 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.0) internal successors, (32), 4 states have internal predecessors, (32), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-19 07:32:44,494 INFO L276 IsEmpty]: Start isEmpty. Operand 350 states and 396 transitions. [2022-11-19 07:32:44,495 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-19 07:32:44,495 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:32:44,495 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:32:44,506 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-19 07:32:44,700 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2022-11-19 07:32:44,700 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:32:44,701 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:32:44,701 INFO L85 PathProgramCache]: Analyzing trace with hash -1252334019, now seen corresponding path program 1 times [2022-11-19 07:32:44,701 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:32:44,701 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1571724622] [2022-11-19 07:32:44,701 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:32:44,702 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:32:44,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:32:44,880 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 11 proven. 11 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-19 07:32:44,880 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:32:44,880 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1571724622] [2022-11-19 07:32:44,880 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1571724622] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:32:44,881 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1519531076] [2022-11-19 07:32:44,881 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:32:44,881 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:32:44,881 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:32:44,882 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:32:44,902 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-19 07:32:44,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:32:44,984 INFO L263 TraceCheckSpWp]: Trace formula consists of 304 conjuncts, 22 conjunts are in the unsatisfiable core [2022-11-19 07:32:44,988 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:32:45,112 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 26 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 07:32:45,113 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:32:45,234 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 18 proven. 1 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-19 07:32:45,234 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1519531076] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 07:32:45,234 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2136508349] [2022-11-19 07:32:45,237 INFO L159 IcfgInterpreter]: Started Sifa with 31 locations of interest [2022-11-19 07:32:45,237 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 07:32:45,237 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 07:32:45,238 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 07:32:45,238 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 07:32:49,035 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 138 for LOIs [2022-11-19 07:32:49,060 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 46 for LOIs [2022-11-19 07:32:49,411 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 52 for LOIs [2022-11-19 07:32:49,423 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 07:32:56,083 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [2136508349] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:32:56,083 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-19 07:32:56,083 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [24] imperfect sequences [8, 6, 6] total 37 [2022-11-19 07:32:56,083 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [294710757] [2022-11-19 07:32:56,083 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:32:56,084 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-11-19 07:32:56,084 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:32:56,085 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-11-19 07:32:56,085 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=197, Invalid=1135, Unknown=0, NotChecked=0, Total=1332 [2022-11-19 07:32:56,085 INFO L87 Difference]: Start difference. First operand 350 states and 396 transitions. Second operand has 25 states, 20 states have (on average 1.25) internal successors, (25), 19 states have internal predecessors, (25), 4 states have call successors, (4), 3 states have call predecessors, (4), 3 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-19 07:33:04,782 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:33:04,783 INFO L93 Difference]: Finished difference Result 580 states and 659 transitions. [2022-11-19 07:33:04,783 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2022-11-19 07:33:04,784 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 20 states have (on average 1.25) internal successors, (25), 19 states have internal predecessors, (25), 4 states have call successors, (4), 3 states have call predecessors, (4), 3 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) Word has length 55 [2022-11-19 07:33:04,784 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:33:04,785 INFO L225 Difference]: With dead ends: 580 [2022-11-19 07:33:04,786 INFO L226 Difference]: Without dead ends: 378 [2022-11-19 07:33:04,787 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 194 GetRequests, 135 SyntacticMatches, 2 SemanticMatches, 57 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 780 ImplicationChecksByTransitivity, 13.8s TimeCoverageRelationStatistics Valid=462, Invalid=2960, Unknown=0, NotChecked=0, Total=3422 [2022-11-19 07:33:04,788 INFO L413 NwaCegarLoop]: 38 mSDtfsCounter, 139 mSDsluCounter, 301 mSDsCounter, 0 mSdLazyCounter, 897 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 143 SdHoareTripleChecker+Valid, 339 SdHoareTripleChecker+Invalid, 974 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 897 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-11-19 07:33:04,788 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [143 Valid, 339 Invalid, 974 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 897 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2022-11-19 07:33:04,789 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 378 states. [2022-11-19 07:33:04,869 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 378 to 330. [2022-11-19 07:33:04,870 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 330 states, 227 states have (on average 1.171806167400881) internal successors, (266), 244 states have internal predecessors, (266), 53 states have call successors, (53), 49 states have call predecessors, (53), 49 states have return successors, (53), 48 states have call predecessors, (53), 53 states have call successors, (53) [2022-11-19 07:33:04,872 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 330 states to 330 states and 372 transitions. [2022-11-19 07:33:04,872 INFO L78 Accepts]: Start accepts. Automaton has 330 states and 372 transitions. Word has length 55 [2022-11-19 07:33:04,873 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:33:04,873 INFO L495 AbstractCegarLoop]: Abstraction has 330 states and 372 transitions. [2022-11-19 07:33:04,873 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 20 states have (on average 1.25) internal successors, (25), 19 states have internal predecessors, (25), 4 states have call successors, (4), 3 states have call predecessors, (4), 3 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-19 07:33:04,873 INFO L276 IsEmpty]: Start isEmpty. Operand 330 states and 372 transitions. [2022-11-19 07:33:04,874 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-11-19 07:33:04,875 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:33:04,875 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:33:04,883 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-19 07:33:05,080 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:33:05,081 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:33:05,081 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:33:05,081 INFO L85 PathProgramCache]: Analyzing trace with hash 1394471459, now seen corresponding path program 1 times [2022-11-19 07:33:05,082 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:33:05,082 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [469275041] [2022-11-19 07:33:05,082 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:33:05,082 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:33:05,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:33:05,263 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 16 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-19 07:33:05,263 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:33:05,263 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [469275041] [2022-11-19 07:33:05,263 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [469275041] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:33:05,264 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2064024731] [2022-11-19 07:33:05,264 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:33:05,264 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:33:05,264 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:33:05,265 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:33:05,290 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-19 07:33:05,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:33:05,350 INFO L263 TraceCheckSpWp]: Trace formula consists of 278 conjuncts, 19 conjunts are in the unsatisfiable core [2022-11-19 07:33:05,352 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:33:05,441 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 24 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 07:33:05,442 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 07:33:05,513 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2022-11-19 07:33:05,513 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2064024731] provided 1 perfect and 1 imperfect interpolant sequences [2022-11-19 07:33:05,514 INFO L184 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-11-19 07:33:05,514 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [7, 6] total 8 [2022-11-19 07:33:05,514 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [770694403] [2022-11-19 07:33:05,514 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:33:05,515 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 07:33:05,515 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:33:05,515 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 07:33:05,515 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2022-11-19 07:33:05,516 INFO L87 Difference]: Start difference. First operand 330 states and 372 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-19 07:33:05,713 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:33:05,713 INFO L93 Difference]: Finished difference Result 542 states and 625 transitions. [2022-11-19 07:33:05,713 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 07:33:05,713 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 58 [2022-11-19 07:33:05,715 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:33:05,717 INFO L225 Difference]: With dead ends: 542 [2022-11-19 07:33:05,717 INFO L226 Difference]: Without dead ends: 425 [2022-11-19 07:33:05,718 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 124 GetRequests, 114 SyntacticMatches, 3 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-19 07:33:05,718 INFO L413 NwaCegarLoop]: 38 mSDtfsCounter, 67 mSDsluCounter, 57 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 95 SdHoareTripleChecker+Invalid, 70 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 07:33:05,719 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 95 Invalid, 70 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 07:33:05,719 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 425 states. [2022-11-19 07:33:05,856 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 425 to 408. [2022-11-19 07:33:05,857 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 408 states, 283 states have (on average 1.1660777385159011) internal successors, (330), 302 states have internal predecessors, (330), 64 states have call successors, (64), 60 states have call predecessors, (64), 60 states have return successors, (67), 59 states have call predecessors, (67), 64 states have call successors, (67) [2022-11-19 07:33:05,859 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 408 states to 408 states and 461 transitions. [2022-11-19 07:33:05,859 INFO L78 Accepts]: Start accepts. Automaton has 408 states and 461 transitions. Word has length 58 [2022-11-19 07:33:05,859 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:33:05,859 INFO L495 AbstractCegarLoop]: Abstraction has 408 states and 461 transitions. [2022-11-19 07:33:05,860 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-19 07:33:05,860 INFO L276 IsEmpty]: Start isEmpty. Operand 408 states and 461 transitions. [2022-11-19 07:33:05,862 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-19 07:33:05,862 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 07:33:05,862 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:33:05,873 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-19 07:33:06,068 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:33:06,068 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 07:33:06,068 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 07:33:06,069 INFO L85 PathProgramCache]: Analyzing trace with hash -256956262, now seen corresponding path program 1 times [2022-11-19 07:33:06,069 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 07:33:06,069 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [711244362] [2022-11-19 07:33:06,069 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:33:06,069 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 07:33:06,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:33:06,406 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 3 proven. 17 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-19 07:33:06,406 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 07:33:06,406 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [711244362] [2022-11-19 07:33:06,406 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [711244362] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 07:33:06,406 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1101911126] [2022-11-19 07:33:06,407 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 07:33:06,407 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 07:33:06,407 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 07:33:06,408 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 07:33:06,424 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-19 07:33:06,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 07:33:06,491 INFO L263 TraceCheckSpWp]: Trace formula consists of 292 conjuncts, 27 conjunts are in the unsatisfiable core [2022-11-19 07:33:06,493 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 07:33:06,625 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-19 07:33:06,625 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 07:33:06,625 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1101911126] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 07:33:06,625 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 07:33:06,626 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [14] total 20 [2022-11-19 07:33:06,626 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [108117993] [2022-11-19 07:33:06,626 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 07:33:06,626 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-19 07:33:06,626 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 07:33:06,627 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-19 07:33:06,627 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=332, Unknown=0, NotChecked=0, Total=380 [2022-11-19 07:33:06,627 INFO L87 Difference]: Start difference. First operand 408 states and 461 transitions. Second operand has 10 states, 8 states have (on average 4.125) internal successors, (33), 8 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-19 07:33:07,037 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 07:33:07,037 INFO L93 Difference]: Finished difference Result 936 states and 1089 transitions. [2022-11-19 07:33:07,037 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-19 07:33:07,038 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 8 states have (on average 4.125) internal successors, (33), 8 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 59 [2022-11-19 07:33:07,038 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 07:33:07,038 INFO L225 Difference]: With dead ends: 936 [2022-11-19 07:33:07,038 INFO L226 Difference]: Without dead ends: 0 [2022-11-19 07:33:07,040 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 56 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 62 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=71, Invalid=481, Unknown=0, NotChecked=0, Total=552 [2022-11-19 07:33:07,041 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 54 mSDsluCounter, 301 mSDsCounter, 0 mSdLazyCounter, 291 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 370 SdHoareTripleChecker+Invalid, 296 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 291 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-19 07:33:07,041 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 370 Invalid, 296 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 291 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-19 07:33:07,042 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-19 07:33:07,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-19 07:33:07,042 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 07:33:07,042 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-19 07:33:07,042 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 59 [2022-11-19 07:33:07,043 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 07:33:07,043 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-19 07:33:07,043 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 8 states have (on average 4.125) internal successors, (33), 8 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-19 07:33:07,043 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-19 07:33:07,043 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-19 07:33:07,046 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-19 07:33:07,058 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-19 07:33:07,252 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-19 07:33:07,253 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-19 07:33:34,083 WARN L233 SmtUtils]: Spent 8.00s on a formula simplification. DAG size of input: 512 DAG size of output: 269 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-19 07:33:57,644 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 125 131) no Hoare annotation was computed. [2022-11-19 07:33:57,644 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 125 131) the Hoare annotation is: true [2022-11-19 07:33:57,645 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 398 409) the Hoare annotation is: (or (not (= 1 ~systemActive~0)) (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) [2022-11-19 07:33:57,645 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 398 409) no Hoare annotation was computed. [2022-11-19 07:33:57,645 INFO L899 garLoopResultBuilder]: For program point L481(lines 481 485) no Hoare annotation was computed. [2022-11-19 07:33:57,645 INFO L902 garLoopResultBuilder]: At program point L481-1(lines 481 485) the Hoare annotation is: true [2022-11-19 07:33:57,645 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 467 496) no Hoare annotation was computed. [2022-11-19 07:33:57,646 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 467 496) the Hoare annotation is: true [2022-11-19 07:33:57,646 INFO L902 garLoopResultBuilder]: At program point L477-2(lines 477 491) the Hoare annotation is: true [2022-11-19 07:33:57,646 INFO L902 garLoopResultBuilder]: At program point L473(line 473) the Hoare annotation is: true [2022-11-19 07:33:57,646 INFO L899 garLoopResultBuilder]: For program point L473-1(line 473) no Hoare annotation was computed. [2022-11-19 07:33:57,646 INFO L902 garLoopResultBuilder]: At program point L492(lines 467 496) the Hoare annotation is: true [2022-11-19 07:33:57,646 INFO L899 garLoopResultBuilder]: For program point L488(line 488) no Hoare annotation was computed. [2022-11-19 07:33:57,647 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 410 418) the Hoare annotation is: true [2022-11-19 07:33:57,647 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 410 418) no Hoare annotation was computed. [2022-11-19 07:33:57,648 INFO L895 garLoopResultBuilder]: At program point L353(lines 353 366) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0))) (let ((.cse48 (= ~pumpRunning~0 0)) (.cse50 (= ~methaneLevelCritical~0 0)) (.cse51 (select |#memory_int| 1)) (.cse47 (not (= |old(~waterLevel~0)| 1))) (.cse43 (not (= 1 ~systemActive~0))) (.cse46 (not .cse1))) (let ((.cse0 (and (or .cse47 .cse43) (or .cse43 (and .cse46 (not (= |old(~waterLevel~0)| 0)))))) (.cse2 (and (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1| 0) (= ~waterLevel~0 0))) (.cse3 (not (= (select |#length| 12) 25))) (.cse4 (not (= (select .cse51 0) 48))) (.cse5 (not (= |#NULL.offset| 0))) (.cse6 (not (= 9 (select |#length| 11)))) (.cse7 (not (= 9 (select |#length| 5)))) (.cse8 (not (= 30 (select |#length| 7)))) (.cse9 (not (= 31 (select |#length| 2)))) (.cse10 (not (= (select |#valid| 12) 1))) (.cse11 (not (= 2 (select |#length| 1)))) (.cse12 (not (= 9 (select |#length| 14)))) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse17 (not (= ~head~0.offset 0))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse27 (not .cse50)) (.cse28 (not (= (select .cse51 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (not (= (select |#valid| 14) 1))) (.cse37 (not (= (select |#valid| 13) 1))) (.cse38 (not (= 30 (select |#length| 4)))) (.cse39 (not (= (select |#valid| 2) 1))) (.cse40 (not (= (select |#valid| 9) 1))) (.cse41 (not (= ~head~0.base 0))) (.cse42 (not (= ~cleanupTimeShifts~0 4))) (.cse49 (not (<= |old(~waterLevel~0)| 1))) (.cse45 (not .cse48)) (.cse44 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (and (<= 0 |timeShift_isHighWaterLevel_~tmp~2#1|) (<= |timeShift_processEnvironment_~tmp~0#1| 1) (<= 1 |timeShift_processEnvironment_~tmp~0#1|) (<= 1 |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (<= 1 |timeShift_isHighWaterLevel_~tmp___0~0#1|) (<= |timeShift_isHighWaterLevel_#res#1| 1) (= |timeShift_getWaterLevel_~retValue_acc~6#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1|) (<= 2 ~waterLevel~0) (<= |timeShift_isHighWaterLevel_~tmp~2#1| 0) (<= 0 |timeShift_isHighWaterSensorDry_#res#1|) (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1| 2147483647) (<= |timeShift_isMethaneAlarm_#res#1| 0) (<= |timeShift_isHighWaterLevel_~retValue_acc~4#1| 1) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~4#1| 0) (<= |timeShift_isHighWaterLevel_~tmp___0~0#1| 1) (= |timeShift_isMethaneAlarm_~retValue_acc~2#1| |timeShift_isMethaneAlarm_#res#1|) (= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (<= |timeShift_isHighWaterSensorDry_#res#1| 0) (<= 0 |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_activatePump_~tmp~1#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_getWaterLevel_~retValue_acc~6#1| ~waterLevel~0) (<= 1 |timeShift_isHighWaterLevel_#res#1|) (= ~pumpRunning~0 1)) .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse0 .cse18 (< |old(~waterLevel~0)| 2) .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42) (or .cse43 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (or .cse5 .cse43 .cse17 .cse27 (not (= |old(~pumpRunning~0)| 1)) .cse2 .cse33 (not (<= 0 |#StackHeapBarrier|)) .cse41 .cse42 .cse44) (or .cse45 .cse43 .cse1) (or .cse3 .cse46 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse47 .cse43 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 (and (= |timeShift_isHighWaterSensorDry_~retValue_acc~7#1| 1) .cse48 (= |timeShift_isHighWaterLevel_~tmp~2#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0) (= |timeShift_processEnvironment_~tmp~0#1| |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_isHighWaterSensorDry_#res#1| |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (= ~waterLevel~0 1) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|)) .cse42) (or .cse49 (and (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1| 1) (<= ~waterLevel~0 1)) .cse43) (or .cse49 .cse45 .cse50 .cse43) (or .cse45 .cse43 .cse44))))) [2022-11-19 07:33:57,650 INFO L895 garLoopResultBuilder]: At program point L353-1(lines 338 370) the Hoare annotation is: (let ((.cse59 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~4#1| 0)) (.cse80 (= ~pumpRunning~0 0)) (.cse56 (= |old(~pumpRunning~0)| 0)) (.cse55 (= 1 ~systemActive~0))) (let ((.cse1 (not .cse55)) (.cse78 (not .cse56)) (.cse82 (= ~methaneLevelCritical~0 ~systemActive~0)) (.cse0 (not .cse80)) (.cse79 (not (= |old(~waterLevel~0)| 1))) (.cse75 (not .cse59)) (.cse81 (= ~waterLevel~0 0)) (.cse76 (= ~methaneLevelCritical~0 0)) (.cse51 (= ~head~0.offset 0)) (.cse83 (select |#memory_int| 1))) (let ((.cse2 (<= 2 ~waterLevel~0)) (.cse15 (not (= (select |#length| 12) 25))) (.cse16 (not (= (select .cse83 0) 48))) (.cse6 (not (= |#NULL.offset| 0))) (.cse17 (not (= 9 (select |#length| 11)))) (.cse18 (not (= 9 (select |#length| 5)))) (.cse19 (not (= 30 (select |#length| 7)))) (.cse20 (not (= 31 (select |#length| 2)))) (.cse21 (not (= (select |#valid| 12) 1))) (.cse22 (not (= 2 (select |#length| 1)))) (.cse23 (not (= 9 (select |#length| 14)))) (.cse24 (not (= (select |#length| 15) 25))) (.cse25 (not (= (select |#valid| 6) 1))) (.cse26 (not (< 0 |#StackHeapBarrier|))) (.cse27 (not (= (select |#valid| 3) 1))) (.cse7 (not .cse51)) (.cse29 (not (= (select |#valid| 11) 1))) (.cse30 (not (= (select |#length| 9) 21))) (.cse31 (not (= 30 (select |#length| 10)))) (.cse32 (not (= (select |#valid| 15) 1))) (.cse33 (not (= (select |#length| 6) 21))) (.cse34 (not (= 1 (select |#valid| 5)))) (.cse35 (not (= (select |#length| 8) 9))) (.cse36 (not (= (select |#length| 3) 12))) (.cse37 (not (= (select |#valid| 0) 0))) (.cse3 (not .cse76)) (.cse38 (not (= (select .cse83 1) 0))) (.cse39 (not (= (select |#valid| 1) 1))) (.cse40 (not (= (select |#valid| 8) 1))) (.cse41 (not (= 30 (select |#length| 13)))) (.cse42 (not (= (select |#valid| 4) 1))) (.cse9 (not (= |#NULL.base| 0))) (.cse68 (not (= (select |#valid| 7) 1))) (.cse69 (not (= (select |#valid| 10) 1))) (.cse70 (not (= (select |#valid| 14) 1))) (.cse71 (not (= (select |#valid| 13) 1))) (.cse72 (not (= 30 (select |#length| 4)))) (.cse73 (not (= (select |#valid| 2) 1))) (.cse74 (not (= (select |#valid| 9) 1))) (.cse11 (not (= ~head~0.base 0))) (.cse12 (not (= ~cleanupTimeShifts~0 4))) (.cse8 (not (= |old(~pumpRunning~0)| 1))) (.cse14 (and .cse82 .cse0 .cse79 .cse75 .cse55 .cse81)) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse28 (and (or .cse79 .cse1) (or .cse1 (and .cse78 (not (= |old(~waterLevel~0)| 0)))))) (.cse10 (and .cse55 .cse81)) (.cse4 (not (= |timeShift_processEnvironment_~tmp~0#1| 0))) (.cse13 (not .cse82)) (.cse77 (and .cse0 .cse55))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5) (or .cse6 .cse1 .cse7 .cse3 .cse8 .cse9 (not (<= 0 |#StackHeapBarrier|)) .cse10 .cse11 .cse12 .cse5) (or .cse1 .cse2 .cse13 .cse14 .cse5) (or .cse15 .cse16 .cse6 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse7 .cse28 .cse29 (< |old(~waterLevel~0)| 2) .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse3 .cse38 .cse39 .cse40 .cse41 .cse42 (and (let ((.cse43 (<= 0 |timeShift_isHighWaterLevel_~tmp~2#1|)) (.cse44 (<= |timeShift_processEnvironment_~tmp~0#1| 1)) (.cse45 (<= 1 |timeShift_processEnvironment_~tmp~0#1|)) (.cse46 (<= 1 |timeShift_isHighWaterLevel_~retValue_acc~4#1|)) (.cse47 (<= 1 |timeShift_isHighWaterLevel_~tmp___0~0#1|)) (.cse48 (<= |timeShift_isHighWaterLevel_#res#1| 1)) (.cse49 (= |timeShift_getWaterLevel_~retValue_acc~6#1| |timeShift_getWaterLevel_#res#1|)) (.cse50 (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1|)) (.cse52 (<= |timeShift_isHighWaterLevel_~tmp~2#1| 0)) (.cse53 (<= 0 |timeShift_isHighWaterSensorDry_#res#1|)) (.cse54 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1| 2147483647)) (.cse57 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse58 (<= |timeShift_isHighWaterLevel_~retValue_acc~4#1| 1)) (.cse60 (<= |timeShift_isHighWaterLevel_~tmp___0~0#1| 1)) (.cse61 (= |timeShift_isMethaneAlarm_~retValue_acc~2#1| |timeShift_isMethaneAlarm_#res#1|)) (.cse62 (= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|)) (.cse63 (<= |timeShift_isHighWaterSensorDry_#res#1| 0)) (.cse64 (<= 0 |timeShift_isMethaneAlarm_#res#1|)) (.cse65 (= |timeShift_activatePump_~tmp~1#1| |timeShift_isMethaneAlarm_#res#1|)) (.cse66 (= |timeShift_getWaterLevel_~retValue_acc~6#1| ~waterLevel~0)) (.cse67 (<= 1 |timeShift_isHighWaterLevel_#res#1|))) (or (and .cse43 .cse44 .cse45 .cse46 .cse47 (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~3#1|) .cse48 .cse49 .cse50 .cse51 .cse2 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~3#1|) .cse61 .cse62 (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___1~1#1|) .cse63 .cse64 .cse65 .cse66 .cse67) (and .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse2 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 (not (= 2 |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1|)) .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67))) (= ~pumpRunning~0 1)) .cse9 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse11 .cse12) (or (not (<= |old(~waterLevel~0)| 1)) .cse1 (<= ~waterLevel~0 1)) (or .cse75 .cse76 .cse1 .cse77) (or .cse15 .cse78 .cse16 .cse6 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse79 .cse1 .cse24 .cse25 .cse26 .cse27 .cse7 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 (and (= |timeShift_isHighWaterSensorDry_~retValue_acc~7#1| 1) .cse80 (= |timeShift_isHighWaterLevel_~tmp~2#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0) (= |timeShift_processEnvironment_~tmp~0#1| |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_isHighWaterSensorDry_#res#1| |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|)) .cse3 .cse38 .cse39 .cse40 .cse41 .cse42 .cse9 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse11 .cse12) (or .cse1 .cse8 .cse13 .cse14 .cse5) (or .cse28 .cse56 .cse10) (or (and .cse75 .cse4) (and .cse75 (or .cse80 .cse81)) .cse1 .cse13) (or .cse1 .cse56 .cse77))))) [2022-11-19 07:33:57,651 INFO L895 garLoopResultBuilder]: At program point L345(line 345) the Hoare annotation is: (let ((.cse53 (= ~pumpRunning~0 0)) (.cse55 (= |old(~pumpRunning~0)| 0)) (.cse58 (= 1 ~systemActive~0))) (let ((.cse52 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not .cse58)) (.cse51 (not .cse55)) (.cse59 (<= ~waterLevel~0 1)) (.cse60 (select |#memory_int| 1)) (.cse50 (not .cse53)) (.cse57 (= ~waterLevel~0 0))) (let ((.cse37 (<= 2 ~waterLevel~0)) (.cse3 (and .cse50 .cse57)) (.cse9 (not (= (select |#length| 12) 25))) (.cse10 (not (= (select .cse60 0) 48))) (.cse12 (not (= 9 (select |#length| 11)))) (.cse13 (not (= 9 (select |#length| 5)))) (.cse14 (not (= 30 (select |#length| 7)))) (.cse15 (not (= 31 (select |#length| 2)))) (.cse16 (not (= (select |#valid| 12) 1))) (.cse17 (not (= 2 (select |#length| 1)))) (.cse18 (not (= 9 (select |#length| 14)))) (.cse19 (not (= (select |#length| 15) 25))) (.cse20 (not (= (select |#valid| 6) 1))) (.cse21 (not (< 0 |#StackHeapBarrier|))) (.cse22 (not (= (select |#valid| 3) 1))) (.cse25 (not (= (select |#valid| 11) 1))) (.cse26 (not (= (select |#length| 9) 21))) (.cse27 (not (= 30 (select |#length| 10)))) (.cse28 (not (= (select |#valid| 15) 1))) (.cse29 (not (= (select |#length| 6) 21))) (.cse30 (not (= 1 (select |#valid| 5)))) (.cse31 (not (= (select |#length| 8) 9))) (.cse32 (not (= (select |#length| 3) 12))) (.cse33 (not (= (select |#valid| 0) 0))) (.cse34 (not (= (select .cse60 1) 0))) (.cse35 (not (= (select |#valid| 1) 1))) (.cse36 (not (= (select |#valid| 8) 1))) (.cse38 (not (= 30 (select |#length| 13)))) (.cse39 (not (= (select |#valid| 4) 1))) (.cse41 (not (= (select |#valid| 7) 1))) (.cse42 (not (= (select |#valid| 10) 1))) (.cse43 (not (= (select |#valid| 14) 1))) (.cse44 (not (= (select |#valid| 13) 1))) (.cse45 (not (= 30 (select |#length| 4)))) (.cse46 (not (= (select |#valid| 2) 1))) (.cse47 (not (= (select |#valid| 9) 1))) (.cse7 (not (= |timeShift_processEnvironment_~tmp~0#1| 0))) (.cse2 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse54 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (and .cse59 .cse58 (or .cse53 .cse57))) (.cse56 (and .cse50 .cse59 .cse58)) (.cse8 (and .cse50 .cse58)) (.cse24 (and (or .cse52 .cse0) (or .cse0 (and .cse51 (not (= |old(~waterLevel~0)| 0)))))) (.cse11 (not (= |#NULL.offset| 0))) (.cse23 (not (= ~head~0.offset 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse40 (not (= |#NULL.base| 0))) (.cse48 (not (= ~head~0.base 0))) (.cse49 (not (= ~cleanupTimeShifts~0 4))) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 (and .cse6 .cse7) .cse8) (or .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 (< |old(~waterLevel~0)| 2) .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse6 .cse34 .cse35 .cse36 (and (<= 0 |timeShift_isHighWaterLevel_~tmp~2#1|) (<= |timeShift_processEnvironment_~tmp~0#1| 1) (<= 1 |timeShift_processEnvironment_~tmp~0#1|) (<= 1 |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (<= 1 |timeShift_isHighWaterLevel_~tmp___0~0#1|) (<= |timeShift_isHighWaterLevel_#res#1| 1) (<= |timeShift_isMethaneAlarm_~retValue_acc~2#1| 0) .cse37 (<= |timeShift_isHighWaterLevel_~tmp~2#1| 0) (<= 0 |timeShift_isHighWaterSensorDry_#res#1|) (<= |timeShift_isHighWaterLevel_~retValue_acc~4#1| 1) (<= |timeShift_isHighWaterLevel_~tmp___0~0#1| 1) (= |timeShift_isMethaneAlarm_~retValue_acc~2#1| |timeShift_isMethaneAlarm_#res#1|) (= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (<= |timeShift_isHighWaterSensorDry_#res#1| 0) (<= 0 |timeShift_isMethaneAlarm_~retValue_acc~2#1|) (= |timeShift_activatePump_~tmp~1#1| |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_isHighWaterLevel_#res#1|) (= ~pumpRunning~0 1)) .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49) (or .cse50 .cse0 .cse37 .cse4) (or .cse0 .cse37 .cse2 .cse3 .cse4) (or .cse9 .cse51 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse52 .cse0 .cse19 .cse20 .cse21 .cse22 .cse23 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse6 .cse34 .cse35 .cse36 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 (and (= |timeShift_isHighWaterSensorDry_~retValue_acc~7#1| 1) .cse53 (= |timeShift_isHighWaterLevel_~tmp~2#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0) (= |timeShift_processEnvironment_~tmp~0#1| |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_isHighWaterSensorDry_#res#1| |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (= ~waterLevel~0 1) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|)) .cse49) (or .cse54 .cse0 .cse55 .cse56) (or .cse53 .cse0 .cse7 .cse2 .cse57) (or .cse54 .cse5 .cse24 .cse56) (or .cse0 .cse55 .cse8) (or .cse24 .cse55 .cse57) (or .cse11 .cse0 .cse23 .cse6 .cse1 .cse40 (not (<= 0 |#StackHeapBarrier|)) .cse57 .cse48 .cse49 .cse4))))) [2022-11-19 07:33:57,651 INFO L899 garLoopResultBuilder]: For program point L345-1(line 345) no Hoare annotation was computed. [2022-11-19 07:33:57,652 INFO L895 garLoopResultBuilder]: At program point L147(line 147) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (= |old(~pumpRunning~0)| 0)) (or (and (<= ~waterLevel~0 1) (or (= ~pumpRunning~0 0) (= ~waterLevel~0 0))) .cse0) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse1 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= (select .cse1 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) .cse0 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= ~methaneLevelCritical~0 0)) (not (= (select .cse1 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (and (= |timeShift_isHighWaterSensorDry_~retValue_acc~7#1| 1) (= |timeShift_isHighWaterLevel_~tmp~2#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0) (= |timeShift_processEnvironment_~tmp~0#1| |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_isHighWaterSensorDry_#res#1| |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (= ~waterLevel~0 1) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|)) (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))))) [2022-11-19 07:33:57,653 INFO L895 garLoopResultBuilder]: At program point L197(line 197) the Hoare annotation is: (let ((.cse1 (not (= |#NULL.offset| 0))) (.cse2 (not (= ~head~0.offset 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |#NULL.base| 0))) (.cse5 (not (= ~head~0.base 0))) (.cse6 (not (= ~cleanupTimeShifts~0 4))) (.cse0 (not (= 1 ~systemActive~0))) (.cse9 (not (= |timeShift_processEnvironment_~tmp~0#1| 0))) (.cse8 (= ~pumpRunning~0 0))) (and (or .cse0 (= |old(~pumpRunning~0)| 0)) (or .cse1 .cse0 .cse2 (< |old(~waterLevel~0)| 2) .cse3 .cse4 (and (= |timeShift_isHighWaterLevel_~tmp~2#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 1) (= |timeShift_isHighWaterLevel_~tmp~2#1| 0) (= |timeShift_processEnvironment_~tmp~0#1| |timeShift_isHighWaterLevel_#res#1|) (= |old(~waterLevel~0)| ~waterLevel~0) (= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|)) (not (<= 0 |#StackHeapBarrier|)) .cse5 .cse6) (let ((.cse7 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= (select .cse7 0) 48)) .cse1 (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) .cse0 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) .cse2 (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse3 (not (= (select .cse7 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) .cse4 (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (not (= (select |#valid| 9) 1)) .cse5 .cse6)) (or (and .cse8 (<= 2 ~waterLevel~0) .cse9) .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 (and (<= ~waterLevel~0 1) .cse9 (or .cse8 (= ~waterLevel~0 0)))))) [2022-11-19 07:33:57,655 INFO L895 garLoopResultBuilder]: At program point L197-1(line 197) the Hoare annotation is: (let ((.cse2 (not (= |#NULL.offset| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~head~0.offset 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |#NULL.base| 0))) (.cse6 (not (= ~head~0.base 0))) (.cse7 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 (= |old(~pumpRunning~0)| 0)) (let ((.cse1 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= (select .cse1 0) 48)) .cse2 (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) .cse0 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) .cse3 (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse4 (not (= (select .cse1 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) .cse5 (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (not (= (select |#valid| 9) 1)) .cse6 .cse7)) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 (<= ~waterLevel~0 1)) (or .cse0 (and (= |timeShift_isMethaneAlarm_#t~ret7#1| ~methaneLevelCritical~0) (not (= |timeShift_processEnvironment_~tmp~0#1| 0)) (or (= ~pumpRunning~0 0) (= ~waterLevel~0 0)))) (or .cse0 (<= 2 ~waterLevel~0) (not (<= 2 |old(~waterLevel~0)|))) (or .cse2 .cse0 .cse3 (< |old(~waterLevel~0)| 2) .cse4 .cse5 (and (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (= |timeShift_isHighWaterLevel_~tmp~2#1| 0) (<= 0 |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_processEnvironment_~tmp~0#1| |timeShift_isHighWaterLevel_#res#1|) (<= |timeShift_isHighWaterLevel_~tmp___0~0#1| 1) (= |old(~waterLevel~0)| ~waterLevel~0) (= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (<= |timeShift_isHighWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|)) (not (<= 0 |#StackHeapBarrier|)) .cse6 .cse7))) [2022-11-19 07:33:57,655 INFO L895 garLoopResultBuilder]: At program point L932(line 932) the Hoare annotation is: (not (= 1 ~systemActive~0)) [2022-11-19 07:33:57,656 INFO L895 garLoopResultBuilder]: At program point L152(line 152) the Hoare annotation is: (let ((.cse49 (= |old(~pumpRunning~0)| 0))) (let ((.cse11 (not (= |old(~waterLevel~0)| 1))) (.cse12 (not (= 1 ~systemActive~0))) (.cse1 (not .cse49)) (.cse50 (select |#memory_int| 1))) (let ((.cse0 (not (= (select |#length| 12) 25))) (.cse2 (not (= (select .cse50 0) 48))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= 9 (select |#length| 5)))) (.cse6 (not (= 30 (select |#length| 7)))) (.cse7 (not (= 31 (select |#length| 2)))) (.cse8 (not (= (select |#valid| 12) 1))) (.cse9 (not (= 2 (select |#length| 1)))) (.cse10 (not (= 9 (select |#length| 14)))) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse28 (not (= (select .cse50 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (not (= (select |#valid| 14) 1))) (.cse37 (not (= (select |#valid| 13) 1))) (.cse38 (not (= 30 (select |#length| 4)))) (.cse39 (not (= (select |#valid| 2) 1))) (.cse40 (not (= (select |#valid| 9) 1))) (.cse44 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse47 (not (<= |old(~waterLevel~0)| 1))) (.cse43 (and (or .cse11 .cse12) (or .cse12 (and .cse1 (not (= |old(~waterLevel~0)| 0)))))) (.cse48 (not (= ~pumpRunning~0 0))) (.cse3 (not (= |#NULL.offset| 0))) (.cse17 (not (= ~head~0.offset 0))) (.cse27 (not (= ~methaneLevelCritical~0 0))) (.cse33 (not (= |#NULL.base| 0))) (.cse45 (= ~waterLevel~0 0)) (.cse41 (not (= ~head~0.base 0))) (.cse42 (not (= ~cleanupTimeShifts~0 4))) (.cse46 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42) (or .cse0 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse13 .cse14 .cse15 .cse16 .cse17 .cse43 .cse18 (< |old(~waterLevel~0)| 2) .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42) (or .cse12 .cse44 .cse45 .cse46) (or .cse47 .cse12 .cse44) (or .cse47 (and .cse48 (<= ~waterLevel~0 1)) .cse12) (or .cse43 .cse49 .cse45) (or .cse48 .cse12 .cse46) (or .cse3 .cse12 .cse17 .cse27 (not (= |old(~pumpRunning~0)| 1)) .cse33 (not (<= 0 |#StackHeapBarrier|)) .cse45 .cse41 .cse42 .cse46))))) [2022-11-19 07:33:57,657 INFO L895 garLoopResultBuilder]: At program point L152-1(lines 133 157) the Hoare annotation is: (let ((.cse53 (= ~pumpRunning~0 0)) (.cse55 (= |old(~pumpRunning~0)| 0)) (.cse58 (= 1 ~systemActive~0))) (let ((.cse52 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not .cse58)) (.cse51 (not .cse55)) (.cse59 (<= ~waterLevel~0 1)) (.cse60 (select |#memory_int| 1)) (.cse50 (not .cse53)) (.cse57 (= ~waterLevel~0 0))) (let ((.cse37 (<= 2 ~waterLevel~0)) (.cse3 (and .cse50 .cse57)) (.cse9 (not (= (select |#length| 12) 25))) (.cse10 (not (= (select .cse60 0) 48))) (.cse12 (not (= 9 (select |#length| 11)))) (.cse13 (not (= 9 (select |#length| 5)))) (.cse14 (not (= 30 (select |#length| 7)))) (.cse15 (not (= 31 (select |#length| 2)))) (.cse16 (not (= (select |#valid| 12) 1))) (.cse17 (not (= 2 (select |#length| 1)))) (.cse18 (not (= 9 (select |#length| 14)))) (.cse19 (not (= (select |#length| 15) 25))) (.cse20 (not (= (select |#valid| 6) 1))) (.cse21 (not (< 0 |#StackHeapBarrier|))) (.cse22 (not (= (select |#valid| 3) 1))) (.cse25 (not (= (select |#valid| 11) 1))) (.cse26 (not (= (select |#length| 9) 21))) (.cse27 (not (= 30 (select |#length| 10)))) (.cse28 (not (= (select |#valid| 15) 1))) (.cse29 (not (= (select |#length| 6) 21))) (.cse30 (not (= 1 (select |#valid| 5)))) (.cse31 (not (= (select |#length| 8) 9))) (.cse32 (not (= (select |#length| 3) 12))) (.cse33 (not (= (select |#valid| 0) 0))) (.cse34 (not (= (select .cse60 1) 0))) (.cse35 (not (= (select |#valid| 1) 1))) (.cse36 (not (= (select |#valid| 8) 1))) (.cse38 (not (= 30 (select |#length| 13)))) (.cse39 (not (= (select |#valid| 4) 1))) (.cse41 (not (= (select |#valid| 7) 1))) (.cse42 (not (= (select |#valid| 10) 1))) (.cse43 (not (= (select |#valid| 14) 1))) (.cse44 (not (= (select |#valid| 13) 1))) (.cse45 (not (= 30 (select |#length| 4)))) (.cse46 (not (= (select |#valid| 2) 1))) (.cse47 (not (= (select |#valid| 9) 1))) (.cse7 (not (= |timeShift_processEnvironment_~tmp~0#1| 0))) (.cse2 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse54 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (and .cse59 .cse58 (or .cse53 .cse57))) (.cse56 (and .cse50 .cse59 .cse58)) (.cse8 (and .cse50 .cse58)) (.cse24 (and (or .cse52 .cse0) (or .cse0 (and .cse51 (not (= |old(~waterLevel~0)| 0)))))) (.cse11 (not (= |#NULL.offset| 0))) (.cse23 (not (= ~head~0.offset 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse40 (not (= |#NULL.base| 0))) (.cse48 (not (= ~head~0.base 0))) (.cse49 (not (= ~cleanupTimeShifts~0 4))) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 (and .cse6 .cse7) .cse8) (or .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 (< |old(~waterLevel~0)| 2) .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse6 .cse34 .cse35 .cse36 (and (<= 0 |timeShift_isHighWaterLevel_~tmp~2#1|) (<= |timeShift_processEnvironment_~tmp~0#1| 1) (<= 1 |timeShift_processEnvironment_~tmp~0#1|) (<= 1 |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (<= 1 |timeShift_isHighWaterLevel_~tmp___0~0#1|) (<= |timeShift_isHighWaterLevel_#res#1| 1) (<= |timeShift_isMethaneAlarm_~retValue_acc~2#1| 0) .cse37 (<= |timeShift_isHighWaterLevel_~tmp~2#1| 0) (<= 0 |timeShift_isHighWaterSensorDry_#res#1|) (<= |timeShift_isHighWaterLevel_~retValue_acc~4#1| 1) (<= |timeShift_isHighWaterLevel_~tmp___0~0#1| 1) (= |timeShift_isMethaneAlarm_~retValue_acc~2#1| |timeShift_isMethaneAlarm_#res#1|) (= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (<= |timeShift_isHighWaterSensorDry_#res#1| 0) (<= 0 |timeShift_isMethaneAlarm_~retValue_acc~2#1|) (= |timeShift_activatePump_~tmp~1#1| |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_isHighWaterLevel_#res#1|) (= ~pumpRunning~0 1)) .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49) (or .cse50 .cse0 .cse37 .cse4) (or .cse0 .cse37 .cse2 .cse3 .cse4) (or .cse9 .cse51 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse52 .cse0 .cse19 .cse20 .cse21 .cse22 .cse23 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse6 .cse34 .cse35 .cse36 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 (and (= |timeShift_isHighWaterSensorDry_~retValue_acc~7#1| 1) .cse53 (= |timeShift_isHighWaterLevel_~tmp~2#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0) (= |timeShift_processEnvironment_~tmp~0#1| |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_isHighWaterSensorDry_#res#1| |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (= ~waterLevel~0 1) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|)) .cse49) (or .cse54 .cse0 .cse55 .cse56) (or .cse53 .cse0 .cse7 .cse2 .cse57) (or .cse54 .cse5 .cse24 .cse56) (or .cse0 .cse55 .cse8) (or .cse24 .cse55 .cse57) (or .cse11 .cse0 .cse23 .cse6 .cse1 .cse40 (not (<= 0 |#StackHeapBarrier|)) .cse57 .cse48 .cse49 .cse4))))) [2022-11-19 07:33:57,658 INFO L895 garLoopResultBuilder]: At program point L347(lines 347 367) the Hoare annotation is: (let ((.cse52 (= ~pumpRunning~0 0)) (.cse54 (= |old(~pumpRunning~0)| 0)) (.cse57 (= 1 ~systemActive~0))) (let ((.cse10 (= ~methaneLevelCritical~0 0)) (.cse23 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not .cse57)) (.cse13 (not .cse54)) (.cse56 (select |#memory_int| 1)) (.cse0 (not .cse52))) (let ((.cse9 (not (= |timeShift___utac_acc__Specification3_spec__1_~tmp~4#1| 0))) (.cse4 (not (= |timeShift_processEnvironment_~tmp~0#1| 0))) (.cse7 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse11 (and .cse0 .cse57)) (.cse12 (not (= (select |#length| 12) 25))) (.cse2 (<= 2 ~waterLevel~0)) (.cse14 (not (= (select .cse56 0) 48))) (.cse16 (not (= 9 (select |#length| 11)))) (.cse17 (not (= 9 (select |#length| 5)))) (.cse18 (not (= 30 (select |#length| 7)))) (.cse19 (not (= 31 (select |#length| 2)))) (.cse20 (not (= (select |#valid| 12) 1))) (.cse21 (not (= 2 (select |#length| 1)))) (.cse22 (not (= 9 (select |#length| 14)))) (.cse24 (not (= (select |#length| 15) 25))) (.cse25 (not (= (select |#valid| 6) 1))) (.cse26 (not (< 0 |#StackHeapBarrier|))) (.cse27 (not (= (select |#valid| 3) 1))) (.cse29 (not (= (select |#valid| 11) 1))) (.cse30 (not (= (select |#length| 9) 21))) (.cse31 (not (= 30 (select |#length| 10)))) (.cse32 (not (= (select |#valid| 15) 1))) (.cse33 (not (= (select |#length| 6) 21))) (.cse34 (not (= 1 (select |#valid| 5)))) (.cse35 (not (= (select |#length| 8) 9))) (.cse36 (not (= (select |#length| 3) 12))) (.cse37 (not (= (select |#valid| 0) 0))) (.cse38 (not (= (select .cse56 1) 0))) (.cse39 (not (= (select |#valid| 1) 1))) (.cse40 (not (= (select |#valid| 8) 1))) (.cse41 (not (= 30 (select |#length| 13)))) (.cse42 (not (= (select |#valid| 4) 1))) (.cse44 (not (= (select |#valid| 7) 1))) (.cse45 (not (= (select |#valid| 10) 1))) (.cse46 (not (= (select |#valid| 14) 1))) (.cse47 (not (= (select |#valid| 13) 1))) (.cse48 (not (= 30 (select |#length| 4)))) (.cse49 (not (= (select |#valid| 2) 1))) (.cse50 (not (= (select |#valid| 9) 1))) (.cse55 (and (or .cse23 .cse1) (or .cse1 (and .cse13 (not (= |old(~waterLevel~0)| 0)))))) (.cse15 (not (= |#NULL.offset| 0))) (.cse28 (not (= ~head~0.offset 0))) (.cse3 (not .cse10)) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse43 (not (= |#NULL.base| 0))) (.cse8 (= ~waterLevel~0 0)) (.cse51 (not (= ~head~0.base 0))) (.cse53 (not (= ~cleanupTimeShifts~0 4))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5) (or .cse1 .cse6 .cse7 .cse8 .cse5) (or (not (<= |old(~waterLevel~0)| 1)) .cse1 (<= ~waterLevel~0 1)) (or .cse9 .cse10 .cse1 .cse11) (or .cse9 .cse1 .cse7) (or .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse1 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse3 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 (and (= |timeShift_isHighWaterSensorDry_~retValue_acc~7#1| 1) .cse52 (= |timeShift_isHighWaterLevel_~tmp~2#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0) (= |timeShift_processEnvironment_~tmp~0#1| |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_isHighWaterSensorDry_#res#1| |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (= ~waterLevel~0 1) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|)) .cse53) (or .cse1 .cse2 .cse7 .cse8 .cse5) (or .cse52 .cse1 .cse4 .cse7 .cse8) (or .cse1 .cse54 .cse11) (or .cse12 (and (<= 0 |timeShift_isHighWaterLevel_~tmp~2#1|) (<= |timeShift_processEnvironment_~tmp~0#1| 1) (<= 1 |timeShift_processEnvironment_~tmp~0#1|) (<= 1 |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (<= 1 |timeShift_isHighWaterLevel_~tmp___0~0#1|) (<= |timeShift_isHighWaterLevel_#res#1| 1) (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~4#1|) .cse2 (<= |timeShift_isHighWaterLevel_~tmp~2#1| 0) (<= 0 |timeShift_isHighWaterSensorDry_#res#1|) (<= |timeShift_isMethaneAlarm_#res#1| 0) (<= |timeShift_isHighWaterLevel_~retValue_acc~4#1| 1) (<= |timeShift_isHighWaterLevel_~tmp___0~0#1| 1) (= |timeShift_isMethaneAlarm_~retValue_acc~2#1| |timeShift_isMethaneAlarm_#res#1|) (= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (<= |timeShift_isHighWaterSensorDry_#res#1| 0) (<= 0 |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_activatePump_~tmp~1#1| |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_isHighWaterLevel_#res#1|) (= ~pumpRunning~0 1)) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse24 .cse25 .cse26 .cse27 .cse28 .cse55 .cse29 (< |old(~waterLevel~0)| 2) .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse3 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse53) (or .cse55 .cse54 .cse8) (or .cse15 .cse1 .cse28 .cse3 .cse6 .cse43 (not (<= 0 |#StackHeapBarrier|)) .cse8 .cse51 .cse53 .cse5))))) [2022-11-19 07:33:57,658 INFO L899 garLoopResultBuilder]: For program point L112-1(lines 112 118) no Hoare annotation was computed. [2022-11-19 07:33:57,658 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 149) no Hoare annotation was computed. [2022-11-19 07:33:57,659 INFO L895 garLoopResultBuilder]: At program point L137(lines 137 154) the Hoare annotation is: (let ((.cse3 (= |old(~pumpRunning~0)| 0)) (.cse9 (= ~pumpRunning~0 0))) (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not .cse9)) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not .cse3)) (.cse4 (not (= |#NULL.offset| 0))) (.cse6 (not (= ~head~0.offset 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (= |#NULL.base| 0))) (.cse11 (not (= ~head~0.base 0))) (.cse12 (not (= ~cleanupTimeShifts~0 4))) (.cse14 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (= ~pumpRunning~0 1)) (or .cse2 .cse0 .cse3) (or .cse4 (and (or .cse5 .cse0 .cse6 (< |old(~waterLevel~0)| 2) .cse7) (or .cse0 .cse6 .cse7 .cse1 .cse8)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (and .cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (and .cse2 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1))))) .cse10 (not (<= 0 |#StackHeapBarrier|)) .cse11 .cse12) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 (<= ~waterLevel~0 1)) (or .cse2 .cse0 (<= 2 ~waterLevel~0) .cse8) (let ((.cse13 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) .cse5 (not (= (select .cse13 0) 48)) .cse4 (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) .cse14 .cse0 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) .cse6 (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse7 (not (= (select .cse13 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) .cse10 (and .cse9 (= ~waterLevel~0 1)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (not (= (select |#valid| 9) 1)) .cse11 .cse12)) (or .cse3 (= ~waterLevel~0 0) (and (or .cse14 .cse0) (or .cse0 (not (= |old(~waterLevel~0)| 0)))))))) [2022-11-19 07:33:57,660 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 101 124) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0))) (let ((.cse5 (= ~pumpRunning~0 0)) (.cse6 (not .cse1)) (.cse8 (not (= |#NULL.offset| 0))) (.cse9 (not (= ~head~0.offset 0))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse11 (not (= |#NULL.base| 0))) (.cse12 (not (= ~head~0.base 0))) (.cse13 (not (= ~cleanupTimeShifts~0 4))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse14 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse15 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 0)) (= ~waterLevel~0 0)) (or .cse0 .cse2 .cse3 .cse4) (or (not .cse5) .cse0 .cse1) (let ((.cse7 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) .cse6 (not (= (select .cse7 0) 48)) .cse5 .cse8 (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) .cse0 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) .cse9 (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse10 (not (= (select .cse7 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) .cse11 (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (not (= (select |#valid| 9) 1)) .cse12 .cse13)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse8 .cse0 .cse9 (< |old(~waterLevel~0)| 2) .cse10 .cse11 (not (<= 0 |#StackHeapBarrier|)) .cse12 .cse13) (or .cse0 .cse14 .cse4) (or .cse15 .cse0 .cse14 (= ~waterLevel~0 1)) (or .cse15 .cse0 .cse2 .cse3)))) [2022-11-19 07:33:57,660 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 101 124) no Hoare annotation was computed. [2022-11-19 07:33:57,660 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 932) no Hoare annotation was computed. [2022-11-19 07:33:57,661 INFO L899 garLoopResultBuilder]: For program point L105-1(lines 104 123) no Hoare annotation was computed. [2022-11-19 07:33:57,661 INFO L899 garLoopResultBuilder]: For program point L357(lines 357 363) no Hoare annotation was computed. [2022-11-19 07:33:57,661 INFO L895 garLoopResultBuilder]: At program point L548(lines 548 555) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (and (= (select |#length| 15) 25) (= 9 (select |#length| 5)) (= (select |#length| 9) 21) (= 30 (select |#length| 7)) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (= ~pumpRunning~0 0) (= (select |#valid| 9) 1) (= (select |#length| 12) 25) (= (select |#valid| 11) 1) (= ~methaneLevelCritical~0 0) (= 30 (select |#length| 4)) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= 2 (select |#length| 1)) (= (select |#length| 8) 9) (= (select |#valid| 3) 1) (= (select |#valid| 7) 1) (= 30 (select |#length| 13)) (= 1 ~systemActive~0) (= 30 (select |#length| 10)) (= (select |#valid| 12) 1) (= (select |#valid| 4) 1) (= (select |#valid| 1) 1) (= (select |#length| 6) 21) (= (select |#valid| 14) 1) (= |ULTIMATE.start_valid_product_~retValue_acc~1#1| |ULTIMATE.start_valid_product_#res#1|) (= 9 (select |#length| 14)) (= (select |#valid| 0) 0) (= ~head~0.base 0) (= (select |#valid| 2) 1) (= |#NULL.offset| 0) (= 9 (select |#length| 11)) (= ~waterLevel~0 1) (= |ULTIMATE.start_valid_product_~retValue_acc~1#1| 1) (= (select .cse0 0) 48) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_main_~tmp~5#1|) (= (select |#valid| 6) 1) (= (select .cse0 1) 0) (= (select |#valid| 10) 1) (= (select |#valid| 8) 1) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))) [2022-11-19 07:33:57,662 INFO L902 garLoopResultBuilder]: At program point L548-2(lines 548 555) the Hoare annotation is: true [2022-11-19 07:33:57,662 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-19 07:33:57,662 INFO L895 garLoopResultBuilder]: At program point L317-2(lines 311 322) the Hoare annotation is: (and (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-19 07:33:57,662 INFO L899 garLoopResultBuilder]: For program point L301(lines 301 307) no Hoare annotation was computed. [2022-11-19 07:33:57,662 INFO L899 garLoopResultBuilder]: For program point L301-1(lines 301 307) no Hoare annotation was computed. [2022-11-19 07:33:57,662 INFO L902 garLoopResultBuilder]: At program point L330(lines 271 334) the Hoare annotation is: true [2022-11-19 07:33:57,663 INFO L895 garLoopResultBuilder]: At program point L293(line 293) the Hoare annotation is: (and (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-19 07:33:57,663 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-19 07:33:57,663 INFO L895 garLoopResultBuilder]: At program point L327(lines 280 328) the Hoare annotation is: false [2022-11-19 07:33:57,663 INFO L899 garLoopResultBuilder]: For program point L282(lines 281 326) no Hoare annotation was computed. [2022-11-19 07:33:57,663 INFO L895 garLoopResultBuilder]: At program point L303(line 303) the Hoare annotation is: (and (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-19 07:33:57,664 INFO L895 garLoopResultBuilder]: At program point L324(lines 281 326) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= ~waterLevel~0 1) .cse0 .cse1) (and .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (and (not (= ~pumpRunning~0 0)) .cse0 .cse1))) [2022-11-19 07:33:57,664 INFO L899 garLoopResultBuilder]: For program point L291(lines 291 297) no Hoare annotation was computed. [2022-11-19 07:33:57,664 INFO L899 garLoopResultBuilder]: For program point L291-1(lines 291 297) no Hoare annotation was computed. [2022-11-19 07:33:57,664 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 386 397) no Hoare annotation was computed. [2022-11-19 07:33:57,664 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 386 397) the Hoare annotation is: (let ((.cse2 (= 1 ~systemActive~0))) (let ((.cse1 (and (<= 2 ~waterLevel~0) .cse2)) (.cse0 (not .cse2))) (and (or .cse0 (and (= ~methaneLevelCritical~0 0) (not (= ~pumpRunning~0 1))) .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or (= ~pumpRunning~0 0) .cse0 (not (= |old(~waterLevel~0)| 0)) (= ~waterLevel~0 0)) (or (not (= |#NULL.offset| 0)) .cse0 (not (<= |old(~waterLevel~0)| 2147483647)) (not (= ~head~0.offset 0)) (not (<= ~pumpRunning~0 1)) (< |old(~waterLevel~0)| 2) (not (= |#NULL.base| 0)) (not (<= 0 ~pumpRunning~0)) .cse1 (not (<= 0 |#StackHeapBarrier|)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))) (or .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) (= ~waterLevel~0 1))))) [2022-11-19 07:33:57,667 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 07:33:57,670 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-19 07:33:57,764 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 07:33:57 BoogieIcfgContainer [2022-11-19 07:33:57,764 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-19 07:33:57,765 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-19 07:33:57,765 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-19 07:33:57,765 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-19 07:33:57,766 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:32:23" (3/4) ... [2022-11-19 07:33:57,768 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-19 07:33:57,774 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-19 07:33:57,774 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-19 07:33:57,774 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-19 07:33:57,774 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-19 07:33:57,774 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-19 07:33:57,775 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-19 07:33:57,786 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 46 nodes and edges [2022-11-19 07:33:57,787 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2022-11-19 07:33:57,787 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-19 07:33:57,788 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-19 07:33:57,788 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-19 07:33:57,813 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && pumpRunning == 0) && \valid[9] == 1) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && 31 == unknown-#length-unknown[2]) && head == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && 30 == unknown-#length-unknown[13]) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && retValue_acc == \result) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && retValue_acc == 1) && unknown-#memory_int-unknown[1][0] == 48) && \result == tmp) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 [2022-11-19 07:33:57,814 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(1 == systemActive) || \old(pumpRunning) == 0) || !(\old(waterLevel) == 0)) || waterLevel == 0) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || pumpRunning == 1) || !(2 <= \old(waterLevel)))) && ((!(pumpRunning == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0)) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || pumpRunning == 0) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((((((((pumpRunning == \old(pumpRunning) || !(\old(pumpRunning) == 0)) || !(#NULL == 0)) || !(1 == systemActive)) || !(head == 0)) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((!(1 == systemActive) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || \old(waterLevel) == waterLevel) || waterLevel == 1)) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || pumpRunning == 1) [2022-11-19 07:33:57,815 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || pumpRunning == 1) && ((!(pumpRunning == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0)) && ((((((!(#NULL == 0) || (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(head == 0)) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(2 <= \old(waterLevel))))) || (pumpRunning == \old(pumpRunning) && ((pumpRunning == 0 && \old(waterLevel) == waterLevel) || (!(pumpRunning == 0) && \old(waterLevel) == waterLevel + 1)))) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1)) && (((!(pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(2 <= \old(waterLevel)))) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || (pumpRunning == 0 && waterLevel == 1)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((\old(pumpRunning) == 0 || waterLevel == 0) || ((!(\old(waterLevel) == 1) || !(1 == systemActive)) && (!(1 == systemActive) || !(\old(waterLevel) == 0)))) [2022-11-19 07:33:57,816 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == systemActive)) || (!(pumpRunning == 0) && waterLevel == 0)) || !(2 <= \old(waterLevel))) && (((((waterLevel <= 1 && 1 == systemActive) && (pumpRunning == 0 || waterLevel == 0)) || !(1 == systemActive)) || (!(methaneLevelCritical == 0) && !(tmp == 0))) || (!(pumpRunning == 0) && 1 == systemActive))) && ((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || ((!(\old(waterLevel) == 1) || !(1 == systemActive)) && (!(1 == systemActive) || (!(\old(pumpRunning) == 0) && !(\old(waterLevel) == 0))))) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || ((((((((((((((((((0 <= tmp && tmp <= 1) && 1 <= tmp) && 1 <= retValue_acc) && 1 <= tmp___0) && \result <= 1) && retValue_acc <= 0) && 2 <= waterLevel) && tmp <= 0) && 0 <= \result) && retValue_acc <= 1) && tmp___0 <= 1) && retValue_acc == \result) && 0 == retValue_acc) && \result <= 0) && 0 <= retValue_acc) && tmp == \result) && 1 <= \result) && pumpRunning == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((!(pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == systemActive)) || (!(pumpRunning == 0) && waterLevel == 0)) || !(2 <= \old(waterLevel)))) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || ((((((((retValue_acc == 1 && pumpRunning == 0) && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && tmp == \result) && \result == retValue_acc) && waterLevel == 1) && tmp___0 == retValue_acc)) || !(cleanupTimeShifts == 4))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || \old(pumpRunning) == 0) || ((!(pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive))) && ((((pumpRunning == 0 || !(1 == systemActive)) || !(tmp == 0)) || !(methaneLevelCritical == systemActive)) || waterLevel == 0)) && (((!(\old(waterLevel) <= 1) || ((waterLevel <= 1 && 1 == systemActive) && (pumpRunning == 0 || waterLevel == 0))) || ((!(\old(waterLevel) == 1) || !(1 == systemActive)) && (!(1 == systemActive) || (!(\old(pumpRunning) == 0) && !(\old(waterLevel) == 0))))) || ((!(pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive))) && ((!(1 == systemActive) || \old(pumpRunning) == 0) || (!(pumpRunning == 0) && 1 == systemActive))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) && (!(1 == systemActive) || (!(\old(pumpRunning) == 0) && !(\old(waterLevel) == 0)))) || \old(pumpRunning) == 0) || waterLevel == 0)) && ((((((((((!(#NULL == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || waterLevel == 0) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel))) [2022-11-19 07:33:57,817 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(pumpRunning == 0) || !(1 == systemActive)) || ((2 <= waterLevel && !(methaneLevelCritical == 0)) && !(tmp == 0))) || !(2 <= \old(waterLevel))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == systemActive)) || waterLevel == 0) || !(2 <= \old(waterLevel)))) && ((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1)) && (((!(tmp == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || (!(pumpRunning == 0) && 1 == systemActive))) && ((!(tmp == 0) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive))) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || ((((((((retValue_acc == 1 && pumpRunning == 0) && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && tmp == \result) && \result == retValue_acc) && waterLevel == 1) && tmp___0 == retValue_acc)) || !(cleanupTimeShifts == 4))) && ((((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == systemActive)) || waterLevel == 0) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == 0 || !(1 == systemActive)) || !(tmp == 0)) || !(methaneLevelCritical == systemActive)) || waterLevel == 0)) && ((!(1 == systemActive) || \old(pumpRunning) == 0) || (!(pumpRunning == 0) && 1 == systemActive))) && ((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || (((((((((((((((((((0 <= tmp && tmp <= 1) && 1 <= tmp) && 1 <= retValue_acc) && 1 <= tmp___0) && \result <= 1) && methaneLevelCritical == tmp) && 2 <= waterLevel) && tmp <= 0) && 0 <= \result) && \result <= 0) && retValue_acc <= 1) && tmp___0 <= 1) && retValue_acc == \result) && 0 == retValue_acc) && \result <= 0) && 0 <= \result) && tmp == \result) && 1 <= \result) && pumpRunning == 1)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || ((!(\old(waterLevel) == 1) || !(1 == systemActive)) && (!(1 == systemActive) || (!(\old(pumpRunning) == 0) && !(\old(waterLevel) == 0))))) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) && (!(1 == systemActive) || (!(\old(pumpRunning) == 0) && !(\old(waterLevel) == 0)))) || \old(pumpRunning) == 0) || waterLevel == 0)) && ((((((((((!(#NULL == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || waterLevel == 0) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel))) [2022-11-19 07:33:57,817 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(pumpRunning == 0) || !(1 == systemActive)) || ((2 <= waterLevel && !(methaneLevelCritical == 0)) && !(tmp == 0))) || !(2 <= \old(waterLevel))) && ((((((((((!(#NULL == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || (1 == systemActive && waterLevel == 0)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == systemActive)) || (((((methaneLevelCritical == systemActive && !(pumpRunning == 0)) && !(\old(waterLevel) == 1)) && !(tmp == 0)) && 1 == systemActive) && waterLevel == 0)) || !(2 <= \old(waterLevel)))) && ((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || ((!(\old(waterLevel) == 1) || !(1 == systemActive)) && (!(1 == systemActive) || (!(\old(pumpRunning) == 0) && !(\old(waterLevel) == 0))))) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || ((((((((((((((((((((((((((((((0 <= tmp && tmp <= 1) && 1 <= tmp) && 1 <= retValue_acc) && 1 <= tmp___0) && pumpRunning == retValue_acc) && \result <= 1) && retValue_acc == \result) && \result == tmp___0) && head == 0) && 2 <= waterLevel) && tmp <= 0) && 0 <= \result) && tmp___0 <= 2147483647) && 1 == systemActive) && \old(pumpRunning) == 0) && \result <= 0) && retValue_acc <= 1) && tmp == 0) && tmp___0 <= 1) && \result == retValue_acc) && retValue_acc == \result) && 0 == retValue_acc) && \result == tmp___1) && \result <= 0) && 0 <= \result) && tmp == \result) && retValue_acc == waterLevel) && 1 <= \result) || ((((((((((((((((((((((((((0 <= tmp && tmp <= 1) && 1 <= tmp) && 1 <= retValue_acc) && 1 <= tmp___0) && \result <= 1) && retValue_acc == \result) && \result == tmp___0) && head == 0) && 2 <= waterLevel) && tmp <= 0) && 0 <= \result) && tmp___0 <= 2147483647) && 1 == systemActive) && \old(pumpRunning) == 0) && \result <= 0) && retValue_acc <= 1) && tmp == 0) && tmp___0 <= 1) && !(2 == tmp___0)) && retValue_acc == \result) && 0 == retValue_acc) && \result <= 0) && 0 <= \result) && tmp == \result) && retValue_acc == waterLevel) && 1 <= \result)) && pumpRunning == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1)) && (((!(tmp == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || (!(pumpRunning == 0) && 1 == systemActive))) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || ((((((((retValue_acc == 1 && pumpRunning == 0) && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && tmp == \result) && \result == retValue_acc) && \old(waterLevel) == waterLevel) && tmp___0 == retValue_acc)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == systemActive)) || (((((methaneLevelCritical == systemActive && !(pumpRunning == 0)) && !(\old(waterLevel) == 1)) && !(tmp == 0)) && 1 == systemActive) && waterLevel == 0)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) && (!(1 == systemActive) || (!(\old(pumpRunning) == 0) && !(\old(waterLevel) == 0)))) || \old(pumpRunning) == 0) || (1 == systemActive && waterLevel == 0))) && ((((!(tmp == 0) && !(tmp == 0)) || (!(tmp == 0) && (pumpRunning == 0 || waterLevel == 0))) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive))) && ((!(1 == systemActive) || \old(pumpRunning) == 0) || (!(pumpRunning == 0) && 1 == systemActive)) [2022-11-19 07:33:57,818 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || \old(pumpRunning) == 0) && (((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1)) && (!(1 == systemActive) || ((aux-isMethaneLevelCritical()-aux == methaneLevelCritical && !(tmp == 0)) && (pumpRunning == 0 || waterLevel == 0)))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(2 <= \old(waterLevel)))) && (((((((((!(#NULL == 0) || !(1 == systemActive)) || !(head == 0)) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || (((((((((\result == retValue_acc && tmp == 0) && 0 <= \result) && tmp == \result) && tmp___0 <= 1) && \old(waterLevel) == waterLevel) && 0 == retValue_acc) && \result <= 0) && 1 <= \result) && tmp___0 == retValue_acc)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) [2022-11-19 07:33:57,818 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) && (!(1 == systemActive) || (!(\old(pumpRunning) == 0) && !(\old(waterLevel) == 0)))) || \old(pumpRunning) == 0) || (tmp___0 <= 0 && waterLevel == 0)) && ((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || (((((((((((((((((((((((0 <= tmp && tmp <= 1) && 1 <= tmp) && 1 <= retValue_acc) && 1 <= tmp___0) && \result <= 1) && retValue_acc == \result) && \result == tmp___0) && 2 <= waterLevel) && tmp <= 0) && 0 <= \result) && tmp___0 <= 2147483647) && \result <= 0) && retValue_acc <= 1) && tmp == 0) && tmp___0 <= 1) && retValue_acc == \result) && 0 == retValue_acc) && \result <= 0) && 0 <= \result) && tmp == \result) && retValue_acc == waterLevel) && 1 <= \result) && pumpRunning == 1)) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || ((!(\old(waterLevel) == 1) || !(1 == systemActive)) && (!(1 == systemActive) || (!(\old(pumpRunning) == 0) && !(\old(waterLevel) == 0))))) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (!(1 == systemActive) || !(methaneLevelCritical == systemActive))) && ((((((((((!(#NULL == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (tmp___0 <= 0 && waterLevel == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && ((!(pumpRunning == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0)) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || ((((((((retValue_acc == 1 && pumpRunning == 0) && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && tmp == \result) && \result == retValue_acc) && waterLevel == 1) && tmp___0 == retValue_acc)) || !(cleanupTimeShifts == 4))) && ((!(\old(waterLevel) <= 1) || (tmp___0 <= 1 && waterLevel <= 1)) || !(1 == systemActive))) && (((!(\old(waterLevel) <= 1) || !(pumpRunning == 0)) || methaneLevelCritical == 0) || !(1 == systemActive))) && ((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) [2022-11-19 07:33:57,854 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/witness.graphml [2022-11-19 07:33:57,855 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-19 07:33:57,856 INFO L158 Benchmark]: Toolchain (without parser) took 95634.07ms. Allocated memory was 134.2MB in the beginning and 482.3MB in the end (delta: 348.1MB). Free memory was 93.8MB in the beginning and 448.5MB in the end (delta: -354.8MB). Peak memory consumption was 280.5MB. Max. memory is 16.1GB. [2022-11-19 07:33:57,857 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 134.2MB. Free memory is still 110.9MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-19 07:33:57,857 INFO L158 Benchmark]: CACSL2BoogieTranslator took 597.42ms. Allocated memory is still 134.2MB. Free memory was 93.5MB in the beginning and 100.4MB in the end (delta: -6.9MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-11-19 07:33:57,857 INFO L158 Benchmark]: Boogie Procedure Inliner took 40.55ms. Allocated memory is still 134.2MB. Free memory was 100.4MB in the beginning and 98.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-19 07:33:57,859 INFO L158 Benchmark]: Boogie Preprocessor took 46.54ms. Allocated memory is still 134.2MB. Free memory was 98.4MB in the beginning and 96.7MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-19 07:33:57,859 INFO L158 Benchmark]: RCFGBuilder took 687.48ms. Allocated memory is still 134.2MB. Free memory was 96.7MB in the beginning and 72.8MB in the end (delta: 23.9MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. [2022-11-19 07:33:57,859 INFO L158 Benchmark]: TraceAbstraction took 94164.13ms. Allocated memory was 134.2MB in the beginning and 482.3MB in the end (delta: 348.1MB). Free memory was 72.3MB in the beginning and 167.1MB in the end (delta: -94.7MB). Peak memory consumption was 263.6MB. Max. memory is 16.1GB. [2022-11-19 07:33:57,860 INFO L158 Benchmark]: Witness Printer took 90.68ms. Allocated memory is still 482.3MB. Free memory was 167.1MB in the beginning and 448.5MB in the end (delta: -281.5MB). Peak memory consumption was 6.9MB. Max. memory is 16.1GB. [2022-11-19 07:33:57,864 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 134.2MB. Free memory is still 110.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 597.42ms. Allocated memory is still 134.2MB. Free memory was 93.5MB in the beginning and 100.4MB in the end (delta: -6.9MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 40.55ms. Allocated memory is still 134.2MB. Free memory was 100.4MB in the beginning and 98.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 46.54ms. Allocated memory is still 134.2MB. Free memory was 98.4MB in the beginning and 96.7MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 687.48ms. Allocated memory is still 134.2MB. Free memory was 96.7MB in the beginning and 72.8MB in the end (delta: 23.9MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. * TraceAbstraction took 94164.13ms. Allocated memory was 134.2MB in the beginning and 482.3MB in the end (delta: 348.1MB). Free memory was 72.3MB in the beginning and 167.1MB in the end (delta: -94.7MB). Peak memory consumption was 263.6MB. Max. memory is 16.1GB. * Witness Printer took 90.68ms. Allocated memory is still 482.3MB. Free memory was 167.1MB in the beginning and 448.5MB in the end (delta: -281.5MB). Peak memory consumption was 6.9MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 932]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 51 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 94.0s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 17.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 50.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1054 SdHoareTripleChecker+Valid, 4.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1026 mSDsluCounter, 2214 SdHoareTripleChecker+Invalid, 3.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1630 mSDsCounter, 349 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3133 IncrementalHoareTripleChecker+Invalid, 3482 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 349 mSolverCounterUnsat, 584 mSDtfsCounter, 3133 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 631 GetRequests, 444 SyntacticMatches, 8 SemanticMatches, 179 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1336 ImplicationChecksByTransitivity, 26.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1468occurred in iteration=8, InterpolantAutomatonStates: 133, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.0s AutomataMinimizationTime, 12 MinimizatonAttempts, 520 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 30 LocationsWithAnnotation, 2557 PreInvPairs, 3167 NumberOfFragments, 7107 HoareAnnotationTreeSize, 2557 FomulaSimplifications, 16208 FormulaSimplificationTreeSizeReduction, 4.1s HoareSimplificationTime, 30 FomulaSimplificationsInter, 248890 FormulaSimplificationTreeSizeReductionInter, 46.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 3.1s InterpolantComputationTime, 678 NumberOfCodeBlocks, 678 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 801 ConstructedInterpolants, 0 QuantifiedInterpolants, 2183 SizeOfPredicates, 44 NumberOfNonLiveVariables, 1356 ConjunctsInSsa, 98 ConjunctsInUnsatCore, 20 InterpolantComputations, 10 PerfectInterpolantSequences, 184/267 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 5.6s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 8, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 68, DAG_INTERPRETER_EARLY_EXITS: 2, TOOLS_POST_APPLICATIONS: 74, TOOLS_POST_TIME: 1.3s, TOOLS_POST_CALL_APPLICATIONS: 32, TOOLS_POST_CALL_TIME: 2.3s, TOOLS_POST_RETURN_APPLICATIONS: 24, TOOLS_POST_RETURN_TIME: 1.2s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 130, TOOLS_QUANTIFIERELIM_TIME: 4.7s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.3s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 185, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 24, DOMAIN_JOIN_TIME: 0.5s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 1, DOMAIN_WIDEN_TIME: 0.0s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 2, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 68, DOMAIN_ISBOTTOM_TIME: 0.1s, LOOP_SUMMARIZER_APPLICATIONS: 1, LOOP_SUMMARIZER_CACHE_MISSES: 1, LOOP_SUMMARIZER_OVERALL_TIME: 2.6s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 2.6s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 2, CALL_SUMMARIZER_APPLICATIONS: 24, CALL_SUMMARIZER_CACHE_MISSES: 5, CALL_SUMMARIZER_OVERALL_TIME: 0.2s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.2s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 638, DAG_COMPRESSION_RETAINED_NODES: 173, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 280]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || pumpRunning == 1) && ((!(pumpRunning == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0)) && ((((((!(#NULL == 0) || (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(head == 0)) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(2 <= \old(waterLevel))))) || (pumpRunning == \old(pumpRunning) && ((pumpRunning == 0 && \old(waterLevel) == waterLevel) || (!(pumpRunning == 0) && \old(waterLevel) == waterLevel + 1)))) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1)) && (((!(pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(2 <= \old(waterLevel)))) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || (pumpRunning == 0 && waterLevel == 1)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((\old(pumpRunning) == 0 || waterLevel == 0) || ((!(\old(waterLevel) == 1) || !(1 == systemActive)) && (!(1 == systemActive) || !(\old(waterLevel) == 0)))) - InvariantResult [Line: 932]: Loop Invariant Derived loop invariant: !(1 == systemActive) - InvariantResult [Line: 101]: Loop Invariant Derived loop invariant: (((((((((!(1 == systemActive) || \old(pumpRunning) == 0) || !(\old(waterLevel) == 0)) || waterLevel == 0) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || pumpRunning == 1) || !(2 <= \old(waterLevel)))) && ((!(pumpRunning == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0)) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || pumpRunning == 0) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((((((((pumpRunning == \old(pumpRunning) || !(\old(pumpRunning) == 0)) || !(#NULL == 0)) || !(1 == systemActive)) || !(head == 0)) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((!(1 == systemActive) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || \old(waterLevel) == waterLevel) || waterLevel == 1)) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || pumpRunning == 1) - InvariantResult [Line: 548]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 347]: Loop Invariant Derived loop invariant: (((((((((((((!(pumpRunning == 0) || !(1 == systemActive)) || ((2 <= waterLevel && !(methaneLevelCritical == 0)) && !(tmp == 0))) || !(2 <= \old(waterLevel))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == systemActive)) || waterLevel == 0) || !(2 <= \old(waterLevel)))) && ((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1)) && (((!(tmp == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || (!(pumpRunning == 0) && 1 == systemActive))) && ((!(tmp == 0) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive))) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || ((((((((retValue_acc == 1 && pumpRunning == 0) && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && tmp == \result) && \result == retValue_acc) && waterLevel == 1) && tmp___0 == retValue_acc)) || !(cleanupTimeShifts == 4))) && ((((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == systemActive)) || waterLevel == 0) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == 0 || !(1 == systemActive)) || !(tmp == 0)) || !(methaneLevelCritical == systemActive)) || waterLevel == 0)) && ((!(1 == systemActive) || \old(pumpRunning) == 0) || (!(pumpRunning == 0) && 1 == systemActive))) && ((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || (((((((((((((((((((0 <= tmp && tmp <= 1) && 1 <= tmp) && 1 <= retValue_acc) && 1 <= tmp___0) && \result <= 1) && methaneLevelCritical == tmp) && 2 <= waterLevel) && tmp <= 0) && 0 <= \result) && \result <= 0) && retValue_acc <= 1) && tmp___0 <= 1) && retValue_acc == \result) && 0 == retValue_acc) && \result <= 0) && 0 <= \result) && tmp == \result) && 1 <= \result) && pumpRunning == 1)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || ((!(\old(waterLevel) == 1) || !(1 == systemActive)) && (!(1 == systemActive) || (!(\old(pumpRunning) == 0) && !(\old(waterLevel) == 0))))) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) && (!(1 == systemActive) || (!(\old(pumpRunning) == 0) && !(\old(waterLevel) == 0)))) || \old(pumpRunning) == 0) || waterLevel == 0)) && ((((((((((!(#NULL == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || waterLevel == 0) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 548]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && pumpRunning == 0) && \valid[9] == 1) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && 31 == unknown-#length-unknown[2]) && head == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && 30 == unknown-#length-unknown[13]) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && retValue_acc == \result) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && retValue_acc == 1) && unknown-#memory_int-unknown[1][0] == 48) && \result == tmp) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 - InvariantResult [Line: 353]: Loop Invariant Derived loop invariant: (((((((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) && (!(1 == systemActive) || (!(\old(pumpRunning) == 0) && !(\old(waterLevel) == 0)))) || \old(pumpRunning) == 0) || (tmp___0 <= 0 && waterLevel == 0)) && ((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || (((((((((((((((((((((((0 <= tmp && tmp <= 1) && 1 <= tmp) && 1 <= retValue_acc) && 1 <= tmp___0) && \result <= 1) && retValue_acc == \result) && \result == tmp___0) && 2 <= waterLevel) && tmp <= 0) && 0 <= \result) && tmp___0 <= 2147483647) && \result <= 0) && retValue_acc <= 1) && tmp == 0) && tmp___0 <= 1) && retValue_acc == \result) && 0 == retValue_acc) && \result <= 0) && 0 <= \result) && tmp == \result) && retValue_acc == waterLevel) && 1 <= \result) && pumpRunning == 1)) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || ((!(\old(waterLevel) == 1) || !(1 == systemActive)) && (!(1 == systemActive) || (!(\old(pumpRunning) == 0) && !(\old(waterLevel) == 0))))) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (!(1 == systemActive) || !(methaneLevelCritical == systemActive))) && ((((((((((!(#NULL == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (tmp___0 <= 0 && waterLevel == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && ((!(pumpRunning == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0)) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || ((((((((retValue_acc == 1 && pumpRunning == 0) && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && tmp == \result) && \result == retValue_acc) && waterLevel == 1) && tmp___0 == retValue_acc)) || !(cleanupTimeShifts == 4))) && ((!(\old(waterLevel) <= 1) || (tmp___0 <= 1 && waterLevel <= 1)) || !(1 == systemActive))) && (((!(\old(waterLevel) <= 1) || !(pumpRunning == 0)) || methaneLevelCritical == 0) || !(1 == systemActive))) && ((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 338]: Loop Invariant Derived loop invariant: ((((((((((((!(pumpRunning == 0) || !(1 == systemActive)) || ((2 <= waterLevel && !(methaneLevelCritical == 0)) && !(tmp == 0))) || !(2 <= \old(waterLevel))) && ((((((((((!(#NULL == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || (1 == systemActive && waterLevel == 0)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == systemActive)) || (((((methaneLevelCritical == systemActive && !(pumpRunning == 0)) && !(\old(waterLevel) == 1)) && !(tmp == 0)) && 1 == systemActive) && waterLevel == 0)) || !(2 <= \old(waterLevel)))) && ((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || ((!(\old(waterLevel) == 1) || !(1 == systemActive)) && (!(1 == systemActive) || (!(\old(pumpRunning) == 0) && !(\old(waterLevel) == 0))))) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || ((((((((((((((((((((((((((((((0 <= tmp && tmp <= 1) && 1 <= tmp) && 1 <= retValue_acc) && 1 <= tmp___0) && pumpRunning == retValue_acc) && \result <= 1) && retValue_acc == \result) && \result == tmp___0) && head == 0) && 2 <= waterLevel) && tmp <= 0) && 0 <= \result) && tmp___0 <= 2147483647) && 1 == systemActive) && \old(pumpRunning) == 0) && \result <= 0) && retValue_acc <= 1) && tmp == 0) && tmp___0 <= 1) && \result == retValue_acc) && retValue_acc == \result) && 0 == retValue_acc) && \result == tmp___1) && \result <= 0) && 0 <= \result) && tmp == \result) && retValue_acc == waterLevel) && 1 <= \result) || ((((((((((((((((((((((((((0 <= tmp && tmp <= 1) && 1 <= tmp) && 1 <= retValue_acc) && 1 <= tmp___0) && \result <= 1) && retValue_acc == \result) && \result == tmp___0) && head == 0) && 2 <= waterLevel) && tmp <= 0) && 0 <= \result) && tmp___0 <= 2147483647) && 1 == systemActive) && \old(pumpRunning) == 0) && \result <= 0) && retValue_acc <= 1) && tmp == 0) && tmp___0 <= 1) && !(2 == tmp___0)) && retValue_acc == \result) && 0 == retValue_acc) && \result <= 0) && 0 <= \result) && tmp == \result) && retValue_acc == waterLevel) && 1 <= \result)) && pumpRunning == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1)) && (((!(tmp == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || (!(pumpRunning == 0) && 1 == systemActive))) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || ((((((((retValue_acc == 1 && pumpRunning == 0) && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && tmp == \result) && \result == retValue_acc) && \old(waterLevel) == waterLevel) && tmp___0 == retValue_acc)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == systemActive)) || (((((methaneLevelCritical == systemActive && !(pumpRunning == 0)) && !(\old(waterLevel) == 1)) && !(tmp == 0)) && 1 == systemActive) && waterLevel == 0)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) && (!(1 == systemActive) || (!(\old(pumpRunning) == 0) && !(\old(waterLevel) == 0)))) || \old(pumpRunning) == 0) || (1 == systemActive && waterLevel == 0))) && ((((!(tmp == 0) && !(tmp == 0)) || (!(tmp == 0) && (pumpRunning == 0 || waterLevel == 0))) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive))) && ((!(1 == systemActive) || \old(pumpRunning) == 0) || (!(pumpRunning == 0) && 1 == systemActive)) - InvariantResult [Line: 133]: Loop Invariant Derived loop invariant: ((((((((((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == systemActive)) || (!(pumpRunning == 0) && waterLevel == 0)) || !(2 <= \old(waterLevel))) && (((((waterLevel <= 1 && 1 == systemActive) && (pumpRunning == 0 || waterLevel == 0)) || !(1 == systemActive)) || (!(methaneLevelCritical == 0) && !(tmp == 0))) || (!(pumpRunning == 0) && 1 == systemActive))) && ((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || ((!(\old(waterLevel) == 1) || !(1 == systemActive)) && (!(1 == systemActive) || (!(\old(pumpRunning) == 0) && !(\old(waterLevel) == 0))))) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || ((((((((((((((((((0 <= tmp && tmp <= 1) && 1 <= tmp) && 1 <= retValue_acc) && 1 <= tmp___0) && \result <= 1) && retValue_acc <= 0) && 2 <= waterLevel) && tmp <= 0) && 0 <= \result) && retValue_acc <= 1) && tmp___0 <= 1) && retValue_acc == \result) && 0 == retValue_acc) && \result <= 0) && 0 <= retValue_acc) && tmp == \result) && 1 <= \result) && pumpRunning == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((!(pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == systemActive)) || (!(pumpRunning == 0) && waterLevel == 0)) || !(2 <= \old(waterLevel)))) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || ((((((((retValue_acc == 1 && pumpRunning == 0) && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && tmp == \result) && \result == retValue_acc) && waterLevel == 1) && tmp___0 == retValue_acc)) || !(cleanupTimeShifts == 4))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || \old(pumpRunning) == 0) || ((!(pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive))) && ((((pumpRunning == 0 || !(1 == systemActive)) || !(tmp == 0)) || !(methaneLevelCritical == systemActive)) || waterLevel == 0)) && (((!(\old(waterLevel) <= 1) || ((waterLevel <= 1 && 1 == systemActive) && (pumpRunning == 0 || waterLevel == 0))) || ((!(\old(waterLevel) == 1) || !(1 == systemActive)) && (!(1 == systemActive) || (!(\old(pumpRunning) == 0) && !(\old(waterLevel) == 0))))) || ((!(pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive))) && ((!(1 == systemActive) || \old(pumpRunning) == 0) || (!(pumpRunning == 0) && 1 == systemActive))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) && (!(1 == systemActive) || (!(\old(pumpRunning) == 0) && !(\old(waterLevel) == 0)))) || \old(pumpRunning) == 0) || waterLevel == 0)) && ((((((((((!(#NULL == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || waterLevel == 0) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 197]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || \old(pumpRunning) == 0) && (((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1)) && (!(1 == systemActive) || ((aux-isMethaneLevelCritical()-aux == methaneLevelCritical && !(tmp == 0)) && (pumpRunning == 0 || waterLevel == 0)))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(2 <= \old(waterLevel)))) && (((((((((!(#NULL == 0) || !(1 == systemActive)) || !(head == 0)) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || (((((((((\result == retValue_acc && tmp == 0) && 0 <= \result) && tmp == \result) && tmp___0 <= 1) && \old(waterLevel) == waterLevel) && 0 == retValue_acc) && \result <= 0) && 1 <= \result) && tmp___0 == retValue_acc)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4)) - InvariantResult [Line: 281]: Loop Invariant Derived loop invariant: (((waterLevel <= 1 && 1 == systemActive) && splverifierCounter == 0) || ((1 == systemActive && !(methaneLevelCritical == 0)) && splverifierCounter == 0)) || ((!(pumpRunning == 0) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-11-19 07:33:57,933 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_86488110-baa5-4ea8-aec7-78ff87a6df60/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE