./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6b4ec56b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash bff509ff7af2b9788fd6216f7196709183d48c973cf9a066c9793f96467b2abf --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-6b4ec56 [2022-11-20 20:39:01,928 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-20 20:39:01,931 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-20 20:39:01,968 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-20 20:39:01,971 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-20 20:39:01,976 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-20 20:39:01,978 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-20 20:39:01,982 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-20 20:39:01,984 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-20 20:39:01,991 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-20 20:39:01,993 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-20 20:39:01,995 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-20 20:39:01,996 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-20 20:39:01,998 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-20 20:39:01,999 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-20 20:39:02,002 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-20 20:39:02,004 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-20 20:39:02,005 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-20 20:39:02,007 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-20 20:39:02,013 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-20 20:39:02,016 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-20 20:39:02,019 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-20 20:39:02,021 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-20 20:39:02,022 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-20 20:39:02,028 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-20 20:39:02,028 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-20 20:39:02,029 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-20 20:39:02,031 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-20 20:39:02,031 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-20 20:39:02,032 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-20 20:39:02,033 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-20 20:39:02,034 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-20 20:39:02,035 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-20 20:39:02,037 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-20 20:39:02,038 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-20 20:39:02,039 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-20 20:39:02,039 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-20 20:39:02,040 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-20 20:39:02,040 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-20 20:39:02,041 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-20 20:39:02,042 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-20 20:39:02,043 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-20 20:39:02,091 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-20 20:39:02,091 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-20 20:39:02,092 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-20 20:39:02,092 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-20 20:39:02,093 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-20 20:39:02,094 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-20 20:39:02,094 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-20 20:39:02,094 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-20 20:39:02,094 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-20 20:39:02,095 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-20 20:39:02,096 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-20 20:39:02,096 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-20 20:39:02,096 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-20 20:39:02,097 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-20 20:39:02,097 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-20 20:39:02,097 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-20 20:39:02,097 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-20 20:39:02,097 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-20 20:39:02,098 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-20 20:39:02,098 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-20 20:39:02,099 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-20 20:39:02,099 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-20 20:39:02,099 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-20 20:39:02,099 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-20 20:39:02,100 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-20 20:39:02,100 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-20 20:39:02,101 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-20 20:39:02,101 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-20 20:39:02,101 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-20 20:39:02,102 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-20 20:39:02,102 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-20 20:39:02,102 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-20 20:39:02,103 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 20:39:02,103 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-20 20:39:02,103 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-20 20:39:02,103 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-20 20:39:02,104 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-20 20:39:02,104 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-20 20:39:02,104 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-20 20:39:02,104 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-20 20:39:02,104 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-20 20:39:02,105 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> bff509ff7af2b9788fd6216f7196709183d48c973cf9a066c9793f96467b2abf [2022-11-20 20:39:02,403 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-20 20:39:02,427 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-20 20:39:02,429 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-20 20:39:02,429 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-20 20:39:02,430 INFO L275 PluginConnector]: CDTParser initialized [2022-11-20 20:39:02,431 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/../../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c [2022-11-20 20:39:05,442 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-20 20:39:05,662 INFO L351 CDTParser]: Found 1 translation units. [2022-11-20 20:39:05,662 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c [2022-11-20 20:39:05,672 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/data/4a4371630/3171d66e8ffc45af973ebbaea4250dc5/FLAGb3f8a301d [2022-11-20 20:39:05,687 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/data/4a4371630/3171d66e8ffc45af973ebbaea4250dc5 [2022-11-20 20:39:05,691 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-20 20:39:05,692 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-20 20:39:05,694 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-20 20:39:05,694 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-20 20:39:05,698 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-20 20:39:05,699 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 08:39:05" (1/1) ... [2022-11-20 20:39:05,700 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5451dc72 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:39:05, skipping insertion in model container [2022-11-20 20:39:05,701 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 08:39:05" (1/1) ... [2022-11-20 20:39:05,709 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-20 20:39:05,763 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-20 20:39:06,010 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c[2985,2998] [2022-11-20 20:39:06,163 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 20:39:06,184 INFO L203 MainTranslator]: Completed pre-run [2022-11-20 20:39:06,214 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c[2985,2998] [2022-11-20 20:39:06,262 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 20:39:06,280 INFO L208 MainTranslator]: Completed translation [2022-11-20 20:39:06,280 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:39:06 WrapperNode [2022-11-20 20:39:06,281 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-20 20:39:06,282 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-20 20:39:06,282 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-20 20:39:06,282 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-20 20:39:06,290 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:39:06" (1/1) ... [2022-11-20 20:39:06,320 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:39:06" (1/1) ... [2022-11-20 20:39:06,362 INFO L138 Inliner]: procedures = 59, calls = 107, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 225 [2022-11-20 20:39:06,363 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-20 20:39:06,364 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-20 20:39:06,364 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-20 20:39:06,364 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-20 20:39:06,374 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:39:06" (1/1) ... [2022-11-20 20:39:06,374 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:39:06" (1/1) ... [2022-11-20 20:39:06,389 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:39:06" (1/1) ... [2022-11-20 20:39:06,403 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:39:06" (1/1) ... [2022-11-20 20:39:06,407 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:39:06" (1/1) ... [2022-11-20 20:39:06,412 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:39:06" (1/1) ... [2022-11-20 20:39:06,413 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:39:06" (1/1) ... [2022-11-20 20:39:06,415 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:39:06" (1/1) ... [2022-11-20 20:39:06,429 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-20 20:39:06,430 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-20 20:39:06,430 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-20 20:39:06,430 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-20 20:39:06,431 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:39:06" (1/1) ... [2022-11-20 20:39:06,443 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 20:39:06,455 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:39:06,472 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-20 20:39:06,501 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-20 20:39:06,551 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-20 20:39:06,551 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-20 20:39:06,551 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-20 20:39:06,551 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-20 20:39:06,552 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-20 20:39:06,552 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-20 20:39:06,552 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-20 20:39:06,552 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-20 20:39:06,552 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-20 20:39:06,552 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 20:39:06,553 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 20:39:06,553 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-20 20:39:06,553 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-20 20:39:06,553 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-20 20:39:06,553 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-20 20:39:06,553 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-20 20:39:06,554 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-20 20:39:06,554 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-20 20:39:06,554 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-20 20:39:06,554 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-20 20:39:06,554 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-20 20:39:06,555 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-20 20:39:06,555 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-20 20:39:06,556 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-20 20:39:06,693 INFO L235 CfgBuilder]: Building ICFG [2022-11-20 20:39:06,695 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-20 20:39:07,034 INFO L276 CfgBuilder]: Performing block encoding [2022-11-20 20:39:07,156 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-20 20:39:07,157 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-20 20:39:07,159 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 08:39:07 BoogieIcfgContainer [2022-11-20 20:39:07,160 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-20 20:39:07,162 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-20 20:39:07,162 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-20 20:39:07,165 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-20 20:39:07,166 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 08:39:05" (1/3) ... [2022-11-20 20:39:07,166 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1d9d1a82 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 08:39:07, skipping insertion in model container [2022-11-20 20:39:07,166 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:39:06" (2/3) ... [2022-11-20 20:39:07,167 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1d9d1a82 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 08:39:07, skipping insertion in model container [2022-11-20 20:39:07,167 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 08:39:07" (3/3) ... [2022-11-20 20:39:07,168 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product63.cil.c [2022-11-20 20:39:07,187 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-20 20:39:07,188 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-20 20:39:07,234 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-20 20:39:07,241 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@72feb7ac, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-20 20:39:07,241 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-20 20:39:07,246 INFO L276 IsEmpty]: Start isEmpty. Operand has 80 states, 49 states have (on average 1.4285714285714286) internal successors, (70), 60 states have internal predecessors, (70), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2022-11-20 20:39:07,257 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-20 20:39:07,257 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:39:07,258 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:39:07,258 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:39:07,263 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:39:07,263 INFO L85 PathProgramCache]: Analyzing trace with hash 1806156663, now seen corresponding path program 1 times [2022-11-20 20:39:07,272 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:39:07,273 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [688078836] [2022-11-20 20:39:07,273 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:39:07,273 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:39:07,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:39:07,488 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 20:39:07,489 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:39:07,489 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [688078836] [2022-11-20 20:39:07,490 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [688078836] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:39:07,490 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 20:39:07,491 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-20 20:39:07,492 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1530766457] [2022-11-20 20:39:07,493 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:39:07,498 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-20 20:39:07,499 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:39:07,536 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-20 20:39:07,537 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 20:39:07,540 INFO L87 Difference]: Start difference. First operand has 80 states, 49 states have (on average 1.4285714285714286) internal successors, (70), 60 states have internal predecessors, (70), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 20:39:07,663 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:39:07,665 INFO L93 Difference]: Finished difference Result 158 states and 217 transitions. [2022-11-20 20:39:07,667 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-20 20:39:07,668 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-11-20 20:39:07,669 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:39:07,680 INFO L225 Difference]: With dead ends: 158 [2022-11-20 20:39:07,680 INFO L226 Difference]: Without dead ends: 75 [2022-11-20 20:39:07,685 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 20:39:07,692 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 20:39:07,693 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 87 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 20:39:07,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-11-20 20:39:07,742 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2022-11-20 20:39:07,745 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 46 states have (on average 1.3478260869565217) internal successors, (62), 56 states have internal predecessors, (62), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-11-20 20:39:07,751 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 99 transitions. [2022-11-20 20:39:07,753 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 99 transitions. Word has length 17 [2022-11-20 20:39:07,754 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:39:07,754 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 99 transitions. [2022-11-20 20:39:07,755 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 20:39:07,755 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 99 transitions. [2022-11-20 20:39:07,759 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-20 20:39:07,759 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:39:07,760 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:39:07,760 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-20 20:39:07,760 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:39:07,762 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:39:07,762 INFO L85 PathProgramCache]: Analyzing trace with hash -869298979, now seen corresponding path program 1 times [2022-11-20 20:39:07,762 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:39:07,762 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [291647557] [2022-11-20 20:39:07,763 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:39:07,763 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:39:07,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:39:07,891 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 20:39:07,891 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:39:07,891 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [291647557] [2022-11-20 20:39:07,891 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [291647557] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:39:07,892 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 20:39:07,892 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 20:39:07,892 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [463330790] [2022-11-20 20:39:07,892 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:39:07,893 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 20:39:07,893 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:39:07,894 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 20:39:07,894 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 20:39:07,894 INFO L87 Difference]: Start difference. First operand 75 states and 99 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 20:39:07,940 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:39:07,940 INFO L93 Difference]: Finished difference Result 122 states and 160 transitions. [2022-11-20 20:39:07,948 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 20:39:07,949 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-11-20 20:39:07,949 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:39:07,950 INFO L225 Difference]: With dead ends: 122 [2022-11-20 20:39:07,950 INFO L226 Difference]: Without dead ends: 67 [2022-11-20 20:39:07,951 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 20:39:07,952 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 14 mSDsluCounter, 56 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 129 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 20:39:07,953 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 129 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 20:39:07,954 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67 states. [2022-11-20 20:39:07,961 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 67. [2022-11-20 20:39:07,961 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 41 states have (on average 1.3658536585365855) internal successors, (56), 51 states have internal predecessors, (56), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-20 20:39:07,962 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 88 transitions. [2022-11-20 20:39:07,963 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 88 transitions. Word has length 18 [2022-11-20 20:39:07,963 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:39:07,963 INFO L495 AbstractCegarLoop]: Abstraction has 67 states and 88 transitions. [2022-11-20 20:39:07,963 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 20:39:07,963 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 88 transitions. [2022-11-20 20:39:07,964 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-20 20:39:07,964 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:39:07,965 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:39:07,965 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-20 20:39:07,965 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:39:07,966 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:39:07,966 INFO L85 PathProgramCache]: Analyzing trace with hash 457868229, now seen corresponding path program 1 times [2022-11-20 20:39:07,966 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:39:07,966 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1277264202] [2022-11-20 20:39:07,966 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:39:07,967 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:39:07,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:39:08,083 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 20:39:08,083 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:39:08,084 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1277264202] [2022-11-20 20:39:08,084 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1277264202] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:39:08,084 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 20:39:08,084 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-20 20:39:08,084 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [601150731] [2022-11-20 20:39:08,085 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:39:08,085 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-20 20:39:08,085 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:39:08,086 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 20:39:08,086 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 20:39:08,086 INFO L87 Difference]: Start difference. First operand 67 states and 88 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 20:39:08,233 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:39:08,233 INFO L93 Difference]: Finished difference Result 180 states and 242 transitions. [2022-11-20 20:39:08,234 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-20 20:39:08,234 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2022-11-20 20:39:08,234 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:39:08,236 INFO L225 Difference]: With dead ends: 180 [2022-11-20 20:39:08,236 INFO L226 Difference]: Without dead ends: 115 [2022-11-20 20:39:08,237 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-20 20:39:08,238 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 102 mSDsluCounter, 97 mSDsCounter, 0 mSdLazyCounter, 83 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 102 SdHoareTripleChecker+Valid, 184 SdHoareTripleChecker+Invalid, 92 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 83 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 20:39:08,239 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [102 Valid, 184 Invalid, 92 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 83 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 20:39:08,239 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 115 states. [2022-11-20 20:39:08,262 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 115 to 98. [2022-11-20 20:39:08,270 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98 states, 62 states have (on average 1.3709677419354838) internal successors, (85), 75 states have internal predecessors, (85), 21 states have call successors, (21), 14 states have call predecessors, (21), 14 states have return successors, (22), 15 states have call predecessors, (22), 21 states have call successors, (22) [2022-11-20 20:39:08,271 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 98 states and 128 transitions. [2022-11-20 20:39:08,272 INFO L78 Accepts]: Start accepts. Automaton has 98 states and 128 transitions. Word has length 21 [2022-11-20 20:39:08,272 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:39:08,272 INFO L495 AbstractCegarLoop]: Abstraction has 98 states and 128 transitions. [2022-11-20 20:39:08,272 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 20:39:08,273 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 128 transitions. [2022-11-20 20:39:08,274 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-20 20:39:08,277 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:39:08,278 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:39:08,278 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-20 20:39:08,278 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:39:08,279 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:39:08,279 INFO L85 PathProgramCache]: Analyzing trace with hash -373252238, now seen corresponding path program 1 times [2022-11-20 20:39:08,279 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:39:08,282 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [213106715] [2022-11-20 20:39:08,282 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:39:08,282 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:39:08,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:39:08,418 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 20:39:08,418 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:39:08,419 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [213106715] [2022-11-20 20:39:08,419 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [213106715] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:39:08,420 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 20:39:08,420 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 20:39:08,420 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1867229142] [2022-11-20 20:39:08,421 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:39:08,421 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 20:39:08,422 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:39:08,423 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 20:39:08,423 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 20:39:08,423 INFO L87 Difference]: Start difference. First operand 98 states and 128 transitions. Second operand has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 20:39:08,534 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:39:08,534 INFO L93 Difference]: Finished difference Result 194 states and 260 transitions. [2022-11-20 20:39:08,535 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 20:39:08,535 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-11-20 20:39:08,535 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:39:08,543 INFO L225 Difference]: With dead ends: 194 [2022-11-20 20:39:08,543 INFO L226 Difference]: Without dead ends: 192 [2022-11-20 20:39:08,544 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 20:39:08,545 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 64 mSDsluCounter, 70 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 158 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 20:39:08,546 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 158 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 20:39:08,547 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2022-11-20 20:39:08,591 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 192. [2022-11-20 20:39:08,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 192 states, 121 states have (on average 1.3636363636363635) internal successors, (165), 146 states have internal predecessors, (165), 42 states have call successors, (42), 28 states have call predecessors, (42), 28 states have return successors, (50), 30 states have call predecessors, (50), 42 states have call successors, (50) [2022-11-20 20:39:08,598 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 192 states to 192 states and 257 transitions. [2022-11-20 20:39:08,599 INFO L78 Accepts]: Start accepts. Automaton has 192 states and 257 transitions. Word has length 24 [2022-11-20 20:39:08,599 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:39:08,600 INFO L495 AbstractCegarLoop]: Abstraction has 192 states and 257 transitions. [2022-11-20 20:39:08,600 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 20:39:08,600 INFO L276 IsEmpty]: Start isEmpty. Operand 192 states and 257 transitions. [2022-11-20 20:39:08,602 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-20 20:39:08,606 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:39:08,607 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:39:08,607 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-20 20:39:08,607 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:39:08,608 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:39:08,608 INFO L85 PathProgramCache]: Analyzing trace with hash 1307614989, now seen corresponding path program 1 times [2022-11-20 20:39:08,609 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:39:08,609 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [945704474] [2022-11-20 20:39:08,609 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:39:08,609 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:39:08,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:39:08,916 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-20 20:39:08,917 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:39:08,918 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [945704474] [2022-11-20 20:39:08,921 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [945704474] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:39:08,921 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 20:39:08,922 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-20 20:39:08,924 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1850401363] [2022-11-20 20:39:08,925 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:39:08,926 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 20:39:08,927 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:39:08,928 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 20:39:08,928 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-20 20:39:08,932 INFO L87 Difference]: Start difference. First operand 192 states and 257 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 6 states have internal predecessors, (36), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-20 20:39:09,280 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:39:09,280 INFO L93 Difference]: Finished difference Result 507 states and 698 transitions. [2022-11-20 20:39:09,281 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-20 20:39:09,281 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 6 states have internal predecessors, (36), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 44 [2022-11-20 20:39:09,282 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:39:09,284 INFO L225 Difference]: With dead ends: 507 [2022-11-20 20:39:09,284 INFO L226 Difference]: Without dead ends: 317 [2022-11-20 20:39:09,286 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2022-11-20 20:39:09,301 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 165 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 173 mSolverCounterSat, 99 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 193 SdHoareTripleChecker+Invalid, 272 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 99 IncrementalHoareTripleChecker+Valid, 173 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 20:39:09,302 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [167 Valid, 193 Invalid, 272 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [99 Valid, 173 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 20:39:09,303 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 317 states. [2022-11-20 20:39:09,366 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 317 to 296. [2022-11-20 20:39:09,367 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 296 states, 193 states have (on average 1.2538860103626943) internal successors, (242), 212 states have internal predecessors, (242), 51 states have call successors, (51), 43 states have call predecessors, (51), 51 states have return successors, (79), 53 states have call predecessors, (79), 51 states have call successors, (79) [2022-11-20 20:39:09,369 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 296 states to 296 states and 372 transitions. [2022-11-20 20:39:09,370 INFO L78 Accepts]: Start accepts. Automaton has 296 states and 372 transitions. Word has length 44 [2022-11-20 20:39:09,370 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:39:09,370 INFO L495 AbstractCegarLoop]: Abstraction has 296 states and 372 transitions. [2022-11-20 20:39:09,371 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 6 states have internal predecessors, (36), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-20 20:39:09,371 INFO L276 IsEmpty]: Start isEmpty. Operand 296 states and 372 transitions. [2022-11-20 20:39:09,375 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2022-11-20 20:39:09,376 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:39:09,376 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:39:09,376 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-20 20:39:09,377 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:39:09,377 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:39:09,377 INFO L85 PathProgramCache]: Analyzing trace with hash -1590456974, now seen corresponding path program 1 times [2022-11-20 20:39:09,378 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:39:09,378 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1342022656] [2022-11-20 20:39:09,378 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:39:09,378 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:39:09,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:39:09,478 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-20 20:39:09,478 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:39:09,478 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1342022656] [2022-11-20 20:39:09,478 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1342022656] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:39:09,479 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 20:39:09,479 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-20 20:39:09,479 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1634527681] [2022-11-20 20:39:09,479 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:39:09,480 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-20 20:39:09,480 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:39:09,480 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 20:39:09,481 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 20:39:09,481 INFO L87 Difference]: Start difference. First operand 296 states and 372 transitions. Second operand has 4 states, 3 states have (on average 17.666666666666668) internal successors, (53), 4 states have internal predecessors, (53), 4 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) [2022-11-20 20:39:09,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:39:09,670 INFO L93 Difference]: Finished difference Result 592 states and 744 transitions. [2022-11-20 20:39:09,670 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-20 20:39:09,670 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 17.666666666666668) internal successors, (53), 4 states have internal predecessors, (53), 4 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) Word has length 79 [2022-11-20 20:39:09,671 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:39:09,674 INFO L225 Difference]: With dead ends: 592 [2022-11-20 20:39:09,674 INFO L226 Difference]: Without dead ends: 255 [2022-11-20 20:39:09,675 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 20:39:09,682 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 106 mSDsluCounter, 55 mSDsCounter, 0 mSdLazyCounter, 90 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 106 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 92 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 90 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 20:39:09,686 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [106 Valid, 150 Invalid, 92 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 90 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 20:39:09,688 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 255 states. [2022-11-20 20:39:09,728 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 255 to 255. [2022-11-20 20:39:09,728 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 255 states, 165 states have (on average 1.2181818181818183) internal successors, (201), 180 states have internal predecessors, (201), 44 states have call successors, (44), 36 states have call predecessors, (44), 45 states have return successors, (66), 47 states have call predecessors, (66), 44 states have call successors, (66) [2022-11-20 20:39:09,731 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 255 states to 255 states and 311 transitions. [2022-11-20 20:39:09,732 INFO L78 Accepts]: Start accepts. Automaton has 255 states and 311 transitions. Word has length 79 [2022-11-20 20:39:09,733 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:39:09,734 INFO L495 AbstractCegarLoop]: Abstraction has 255 states and 311 transitions. [2022-11-20 20:39:09,734 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 17.666666666666668) internal successors, (53), 4 states have internal predecessors, (53), 4 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) [2022-11-20 20:39:09,734 INFO L276 IsEmpty]: Start isEmpty. Operand 255 states and 311 transitions. [2022-11-20 20:39:09,739 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2022-11-20 20:39:09,739 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:39:09,739 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:39:09,740 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-20 20:39:09,742 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:39:09,743 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:39:09,743 INFO L85 PathProgramCache]: Analyzing trace with hash 1878394815, now seen corresponding path program 1 times [2022-11-20 20:39:09,743 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:39:09,744 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [527879242] [2022-11-20 20:39:09,744 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:39:09,745 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:39:09,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:39:10,167 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 7 proven. 9 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-20 20:39:10,168 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:39:10,168 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [527879242] [2022-11-20 20:39:10,168 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [527879242] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:39:10,168 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [504193911] [2022-11-20 20:39:10,168 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:39:10,169 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:39:10,169 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:39:10,175 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:39:10,177 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-20 20:39:10,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:39:10,321 INFO L263 TraceCheckSpWp]: Trace formula consists of 326 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-20 20:39:10,328 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:39:10,871 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-20 20:39:10,871 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-20 20:39:10,872 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [504193911] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:39:10,872 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-20 20:39:10,872 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [11] total 18 [2022-11-20 20:39:10,872 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1076630333] [2022-11-20 20:39:10,873 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:39:10,873 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-20 20:39:10,873 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:39:10,874 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-20 20:39:10,874 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=49, Invalid=257, Unknown=0, NotChecked=0, Total=306 [2022-11-20 20:39:10,874 INFO L87 Difference]: Start difference. First operand 255 states and 311 transitions. Second operand has 9 states, 9 states have (on average 5.888888888888889) internal successors, (53), 8 states have internal predecessors, (53), 6 states have call successors, (11), 4 states have call predecessors, (11), 3 states have return successors, (10), 3 states have call predecessors, (10), 6 states have call successors, (10) [2022-11-20 20:39:11,598 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:39:11,599 INFO L93 Difference]: Finished difference Result 576 states and 714 transitions. [2022-11-20 20:39:11,599 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-20 20:39:11,599 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.888888888888889) internal successors, (53), 8 states have internal predecessors, (53), 6 states have call successors, (11), 4 states have call predecessors, (11), 3 states have return successors, (10), 3 states have call predecessors, (10), 6 states have call successors, (10) Word has length 76 [2022-11-20 20:39:11,600 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:39:11,602 INFO L225 Difference]: With dead ends: 576 [2022-11-20 20:39:11,602 INFO L226 Difference]: Without dead ends: 323 [2022-11-20 20:39:11,603 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 78 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 70 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=102, Invalid=498, Unknown=0, NotChecked=0, Total=600 [2022-11-20 20:39:11,605 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 249 mSDsluCounter, 150 mSDsCounter, 0 mSdLazyCounter, 373 mSolverCounterSat, 107 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 261 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 480 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 107 IncrementalHoareTripleChecker+Valid, 373 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-20 20:39:11,606 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [261 Valid, 207 Invalid, 480 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [107 Valid, 373 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-20 20:39:11,607 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 323 states. [2022-11-20 20:39:11,655 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 323 to 280. [2022-11-20 20:39:11,656 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 280 states, 183 states have (on average 1.2131147540983607) internal successors, (222), 198 states have internal predecessors, (222), 47 states have call successors, (47), 43 states have call predecessors, (47), 49 states have return successors, (69), 48 states have call predecessors, (69), 47 states have call successors, (69) [2022-11-20 20:39:11,658 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 280 states to 280 states and 338 transitions. [2022-11-20 20:39:11,658 INFO L78 Accepts]: Start accepts. Automaton has 280 states and 338 transitions. Word has length 76 [2022-11-20 20:39:11,658 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:39:11,659 INFO L495 AbstractCegarLoop]: Abstraction has 280 states and 338 transitions. [2022-11-20 20:39:11,663 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.888888888888889) internal successors, (53), 8 states have internal predecessors, (53), 6 states have call successors, (11), 4 states have call predecessors, (11), 3 states have return successors, (10), 3 states have call predecessors, (10), 6 states have call successors, (10) [2022-11-20 20:39:11,663 INFO L276 IsEmpty]: Start isEmpty. Operand 280 states and 338 transitions. [2022-11-20 20:39:11,665 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2022-11-20 20:39:11,666 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:39:11,666 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:39:11,680 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-11-20 20:39:11,879 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:39:11,880 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:39:11,880 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:39:11,880 INFO L85 PathProgramCache]: Analyzing trace with hash -962629696, now seen corresponding path program 1 times [2022-11-20 20:39:11,881 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:39:11,881 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1906976799] [2022-11-20 20:39:11,881 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:39:11,881 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:39:11,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:39:12,268 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 7 proven. 9 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-20 20:39:12,268 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:39:12,269 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1906976799] [2022-11-20 20:39:12,269 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1906976799] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:39:12,269 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1773637842] [2022-11-20 20:39:12,269 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:39:12,269 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:39:12,269 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:39:12,270 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:39:12,285 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-20 20:39:12,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:39:12,381 INFO L263 TraceCheckSpWp]: Trace formula consists of 332 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-20 20:39:12,384 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:39:12,418 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-20 20:39:12,418 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-20 20:39:12,419 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1773637842] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:39:12,419 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-20 20:39:12,419 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [11] total 12 [2022-11-20 20:39:12,419 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1979256003] [2022-11-20 20:39:12,419 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:39:12,420 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-20 20:39:12,421 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:39:12,421 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 20:39:12,422 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=104, Unknown=0, NotChecked=0, Total=132 [2022-11-20 20:39:12,422 INFO L87 Difference]: Start difference. First operand 280 states and 338 transitions. Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-20 20:39:12,520 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:39:12,521 INFO L93 Difference]: Finished difference Result 544 states and 661 transitions. [2022-11-20 20:39:12,521 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 20:39:12,521 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 79 [2022-11-20 20:39:12,522 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:39:12,523 INFO L225 Difference]: With dead ends: 544 [2022-11-20 20:39:12,523 INFO L226 Difference]: Without dead ends: 266 [2022-11-20 20:39:12,524 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 99 GetRequests, 88 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=124, Unknown=0, NotChecked=0, Total=156 [2022-11-20 20:39:12,525 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 54 mSDsluCounter, 126 mSDsCounter, 0 mSdLazyCounter, 49 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 198 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 49 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 20:39:12,526 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 198 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 49 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 20:39:12,526 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 266 states. [2022-11-20 20:39:12,568 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 266 to 250. [2022-11-20 20:39:12,569 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 250 states, 161 states have (on average 1.1987577639751552) internal successors, (193), 175 states have internal predecessors, (193), 43 states have call successors, (43), 39 states have call predecessors, (43), 45 states have return successors, (61), 43 states have call predecessors, (61), 43 states have call successors, (61) [2022-11-20 20:39:12,571 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 250 states to 250 states and 297 transitions. [2022-11-20 20:39:12,572 INFO L78 Accepts]: Start accepts. Automaton has 250 states and 297 transitions. Word has length 79 [2022-11-20 20:39:12,574 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:39:12,574 INFO L495 AbstractCegarLoop]: Abstraction has 250 states and 297 transitions. [2022-11-20 20:39:12,574 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-20 20:39:12,574 INFO L276 IsEmpty]: Start isEmpty. Operand 250 states and 297 transitions. [2022-11-20 20:39:12,576 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2022-11-20 20:39:12,576 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:39:12,576 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:39:12,588 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-20 20:39:12,781 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2022-11-20 20:39:12,782 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:39:12,782 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:39:12,782 INFO L85 PathProgramCache]: Analyzing trace with hash 1412573353, now seen corresponding path program 1 times [2022-11-20 20:39:12,782 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:39:12,782 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1506889440] [2022-11-20 20:39:12,782 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:39:12,783 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:39:12,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:39:13,287 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 19 proven. 18 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-20 20:39:13,287 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:39:13,287 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1506889440] [2022-11-20 20:39:13,287 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1506889440] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:39:13,287 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [249449350] [2022-11-20 20:39:13,288 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:39:13,288 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:39:13,288 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:39:13,289 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:39:13,300 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-20 20:39:13,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:39:13,413 INFO L263 TraceCheckSpWp]: Trace formula consists of 360 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-20 20:39:13,423 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:39:13,481 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 43 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-20 20:39:13,481 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-20 20:39:13,482 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [249449350] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:39:13,482 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-20 20:39:13,482 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [13] total 15 [2022-11-20 20:39:13,482 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1976351317] [2022-11-20 20:39:13,482 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:39:13,483 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-20 20:39:13,483 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:39:13,483 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 20:39:13,483 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2022-11-20 20:39:13,484 INFO L87 Difference]: Start difference. First operand 250 states and 297 transitions. Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 3 states have call successors, (13), 3 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-20 20:39:13,645 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:39:13,646 INFO L93 Difference]: Finished difference Result 487 states and 595 transitions. [2022-11-20 20:39:13,646 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 20:39:13,647 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 3 states have call successors, (13), 3 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 2 states have call successors, (12) Word has length 86 [2022-11-20 20:39:13,647 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:39:13,649 INFO L225 Difference]: With dead ends: 487 [2022-11-20 20:39:13,649 INFO L226 Difference]: Without dead ends: 239 [2022-11-20 20:39:13,650 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 104 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 26 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2022-11-20 20:39:13,652 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 52 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 97 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 210 SdHoareTripleChecker+Invalid, 99 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 97 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 20:39:13,652 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 210 Invalid, 99 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 97 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 20:39:13,653 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 239 states. [2022-11-20 20:39:13,684 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 239 to 233. [2022-11-20 20:39:13,685 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 233 states, 153 states have (on average 1.1830065359477124) internal successors, (181), 167 states have internal predecessors, (181), 40 states have call successors, (40), 36 states have call predecessors, (40), 39 states have return successors, (55), 39 states have call predecessors, (55), 40 states have call successors, (55) [2022-11-20 20:39:13,688 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 233 states to 233 states and 276 transitions. [2022-11-20 20:39:13,688 INFO L78 Accepts]: Start accepts. Automaton has 233 states and 276 transitions. Word has length 86 [2022-11-20 20:39:13,688 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:39:13,688 INFO L495 AbstractCegarLoop]: Abstraction has 233 states and 276 transitions. [2022-11-20 20:39:13,688 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 3 states have call successors, (13), 3 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-20 20:39:13,689 INFO L276 IsEmpty]: Start isEmpty. Operand 233 states and 276 transitions. [2022-11-20 20:39:13,696 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2022-11-20 20:39:13,696 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:39:13,696 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:39:13,703 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-20 20:39:13,902 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:39:13,902 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:39:13,902 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:39:13,902 INFO L85 PathProgramCache]: Analyzing trace with hash -1670492553, now seen corresponding path program 1 times [2022-11-20 20:39:13,903 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:39:13,903 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1242142997] [2022-11-20 20:39:13,903 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:39:13,903 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:39:13,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:39:14,247 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 7 proven. 17 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-20 20:39:14,248 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:39:14,248 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1242142997] [2022-11-20 20:39:14,248 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1242142997] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:39:14,248 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1872709555] [2022-11-20 20:39:14,249 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:39:14,249 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:39:14,249 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:39:14,250 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:39:14,263 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-20 20:39:14,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:39:14,364 INFO L263 TraceCheckSpWp]: Trace formula consists of 367 conjuncts, 34 conjunts are in the unsatisfiable core [2022-11-20 20:39:14,367 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:39:14,857 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 19 proven. 21 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-20 20:39:14,858 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:39:15,793 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-11-20 20:39:15,794 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1872709555] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 20:39:15,794 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1381756235] [2022-11-20 20:39:15,818 INFO L159 IcfgInterpreter]: Started Sifa with 55 locations of interest [2022-11-20 20:39:15,818 INFO L166 IcfgInterpreter]: Building call graph [2022-11-20 20:39:15,822 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-20 20:39:15,827 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-20 20:39:15,828 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-20 20:39:18,922 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 116 for LOIs [2022-11-20 20:39:18,935 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 123 for LOIs [2022-11-20 20:39:20,303 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 121 for LOIs [2022-11-20 20:39:20,538 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 121 for LOIs [2022-11-20 20:39:21,032 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 121 for LOIs [2022-11-20 20:39:21,142 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 43 for LOIs [2022-11-20 20:39:21,149 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-20 20:39:36,497 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1381756235] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:39:36,497 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:39:36,497 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [27] imperfect sequences [11, 12, 16] total 61 [2022-11-20 20:39:36,498 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1936771401] [2022-11-20 20:39:36,498 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:39:36,498 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-20 20:39:36,498 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:39:36,499 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-20 20:39:36,500 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=555, Invalid=3105, Unknown=0, NotChecked=0, Total=3660 [2022-11-20 20:39:36,501 INFO L87 Difference]: Start difference. First operand 233 states and 276 transitions. Second operand has 28 states, 22 states have (on average 1.8636363636363635) internal successors, (41), 22 states have internal predecessors, (41), 8 states have call successors, (11), 6 states have call predecessors, (11), 6 states have return successors, (11), 9 states have call predecessors, (11), 8 states have call successors, (11) [2022-11-20 20:39:52,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:39:52,446 INFO L93 Difference]: Finished difference Result 722 states and 873 transitions. [2022-11-20 20:39:52,451 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2022-11-20 20:39:52,451 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 22 states have (on average 1.8636363636363635) internal successors, (41), 22 states have internal predecessors, (41), 8 states have call successors, (11), 6 states have call predecessors, (11), 6 states have return successors, (11), 9 states have call predecessors, (11), 8 states have call successors, (11) Word has length 90 [2022-11-20 20:39:52,451 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:39:52,454 INFO L225 Difference]: With dead ends: 722 [2022-11-20 20:39:52,454 INFO L226 Difference]: Without dead ends: 491 [2022-11-20 20:39:52,457 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 311 GetRequests, 219 SyntacticMatches, 9 SemanticMatches, 83 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2526 ImplicationChecksByTransitivity, 28.9s TimeCoverageRelationStatistics Valid=1225, Invalid=5915, Unknown=0, NotChecked=0, Total=7140 [2022-11-20 20:39:52,458 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 248 mSDsluCounter, 406 mSDsCounter, 0 mSdLazyCounter, 1451 mSolverCounterSat, 120 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 251 SdHoareTripleChecker+Valid, 479 SdHoareTripleChecker+Invalid, 1571 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 120 IncrementalHoareTripleChecker+Valid, 1451 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.9s IncrementalHoareTripleChecker+Time [2022-11-20 20:39:52,458 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [251 Valid, 479 Invalid, 1571 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [120 Valid, 1451 Invalid, 0 Unknown, 0 Unchecked, 2.9s Time] [2022-11-20 20:39:52,459 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 491 states. [2022-11-20 20:39:52,536 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 491 to 462. [2022-11-20 20:39:52,537 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 462 states, 310 states have (on average 1.1741935483870967) internal successors, (364), 329 states have internal predecessors, (364), 77 states have call successors, (77), 70 states have call predecessors, (77), 74 states have return successors, (104), 75 states have call predecessors, (104), 77 states have call successors, (104) [2022-11-20 20:39:52,539 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 462 states to 462 states and 545 transitions. [2022-11-20 20:39:52,539 INFO L78 Accepts]: Start accepts. Automaton has 462 states and 545 transitions. Word has length 90 [2022-11-20 20:39:52,540 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:39:52,540 INFO L495 AbstractCegarLoop]: Abstraction has 462 states and 545 transitions. [2022-11-20 20:39:52,540 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 22 states have (on average 1.8636363636363635) internal successors, (41), 22 states have internal predecessors, (41), 8 states have call successors, (11), 6 states have call predecessors, (11), 6 states have return successors, (11), 9 states have call predecessors, (11), 8 states have call successors, (11) [2022-11-20 20:39:52,540 INFO L276 IsEmpty]: Start isEmpty. Operand 462 states and 545 transitions. [2022-11-20 20:39:52,542 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2022-11-20 20:39:52,542 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:39:52,542 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:39:52,553 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-20 20:39:52,748 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:39:52,749 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:39:52,750 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:39:52,750 INFO L85 PathProgramCache]: Analyzing trace with hash 141961349, now seen corresponding path program 1 times [2022-11-20 20:39:52,751 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:39:52,751 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1315517671] [2022-11-20 20:39:52,751 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:39:52,751 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:39:52,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:39:53,076 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 7 proven. 17 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-20 20:39:53,076 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:39:53,077 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1315517671] [2022-11-20 20:39:53,077 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1315517671] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:39:53,077 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1071243819] [2022-11-20 20:39:53,077 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:39:53,077 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:39:53,077 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:39:53,078 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:39:53,083 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-20 20:39:53,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:39:53,179 INFO L263 TraceCheckSpWp]: Trace formula consists of 373 conjuncts, 27 conjunts are in the unsatisfiable core [2022-11-20 20:39:53,182 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:39:53,380 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-20 20:39:53,380 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-20 20:39:53,380 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1071243819] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:39:53,380 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-20 20:39:53,380 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [11] total 19 [2022-11-20 20:39:53,381 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [888894694] [2022-11-20 20:39:53,381 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:39:53,381 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-20 20:39:53,381 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:39:53,382 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-20 20:39:53,382 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2022-11-20 20:39:53,382 INFO L87 Difference]: Start difference. First operand 462 states and 545 transitions. Second operand has 11 states, 8 states have (on average 8.0) internal successors, (64), 8 states have internal predecessors, (64), 3 states have call successors, (15), 3 states have call predecessors, (15), 6 states have return successors, (14), 6 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-20 20:39:53,923 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:39:53,924 INFO L93 Difference]: Finished difference Result 1122 states and 1376 transitions. [2022-11-20 20:39:53,924 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-20 20:39:53,924 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 8 states have (on average 8.0) internal successors, (64), 8 states have internal predecessors, (64), 3 states have call successors, (15), 3 states have call predecessors, (15), 6 states have return successors, (14), 6 states have call predecessors, (14), 3 states have call successors, (14) Word has length 93 [2022-11-20 20:39:53,925 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:39:53,929 INFO L225 Difference]: With dead ends: 1122 [2022-11-20 20:39:53,929 INFO L226 Difference]: Without dead ends: 735 [2022-11-20 20:39:53,931 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 95 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 101 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=88, Invalid=614, Unknown=0, NotChecked=0, Total=702 [2022-11-20 20:39:53,932 INFO L413 NwaCegarLoop]: 122 mSDtfsCounter, 54 mSDsluCounter, 740 mSDsCounter, 0 mSdLazyCounter, 464 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 862 SdHoareTripleChecker+Invalid, 470 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 464 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-20 20:39:53,932 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 862 Invalid, 470 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 464 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-20 20:39:53,933 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 735 states. [2022-11-20 20:39:54,026 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 735 to 713. [2022-11-20 20:39:54,028 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 713 states, 484 states have (on average 1.1632231404958677) internal successors, (563), 506 states have internal predecessors, (563), 116 states have call successors, (116), 107 states have call predecessors, (116), 112 states have return successors, (177), 115 states have call predecessors, (177), 116 states have call successors, (177) [2022-11-20 20:39:54,031 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 713 states to 713 states and 856 transitions. [2022-11-20 20:39:54,032 INFO L78 Accepts]: Start accepts. Automaton has 713 states and 856 transitions. Word has length 93 [2022-11-20 20:39:54,033 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:39:54,033 INFO L495 AbstractCegarLoop]: Abstraction has 713 states and 856 transitions. [2022-11-20 20:39:54,033 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 8 states have (on average 8.0) internal successors, (64), 8 states have internal predecessors, (64), 3 states have call successors, (15), 3 states have call predecessors, (15), 6 states have return successors, (14), 6 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-20 20:39:54,033 INFO L276 IsEmpty]: Start isEmpty. Operand 713 states and 856 transitions. [2022-11-20 20:39:54,036 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2022-11-20 20:39:54,036 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:39:54,036 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:39:54,048 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-20 20:39:54,248 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:39:54,249 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 20:39:54,249 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:39:54,249 INFO L85 PathProgramCache]: Analyzing trace with hash 305319785, now seen corresponding path program 1 times [2022-11-20 20:39:54,249 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-20 20:39:54,250 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [834352617] [2022-11-20 20:39:54,250 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:39:54,250 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 20:39:54,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:39:54,582 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 7 proven. 17 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-20 20:39:54,582 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-20 20:39:54,582 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [834352617] [2022-11-20 20:39:54,583 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [834352617] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:39:54,583 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1816758816] [2022-11-20 20:39:54,583 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:39:54,583 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:39:54,583 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:39:54,584 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:39:54,619 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-20 20:39:54,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:39:54,701 INFO L263 TraceCheckSpWp]: Trace formula consists of 379 conjuncts, 25 conjunts are in the unsatisfiable core [2022-11-20 20:39:54,703 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:39:54,812 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-11-20 20:39:54,813 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-20 20:39:54,813 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1816758816] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:39:54,813 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-20 20:39:54,813 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [11] total 17 [2022-11-20 20:39:54,814 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1075711514] [2022-11-20 20:39:54,814 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:39:54,816 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-20 20:39:54,816 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-20 20:39:54,816 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-20 20:39:54,816 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=228, Unknown=0, NotChecked=0, Total=272 [2022-11-20 20:39:54,817 INFO L87 Difference]: Start difference. First operand 713 states and 856 transitions. Second operand has 11 states, 8 states have (on average 6.75) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (13), 2 states have call predecessors, (13), 5 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) [2022-11-20 20:39:55,297 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:39:55,297 INFO L93 Difference]: Finished difference Result 1339 states and 1642 transitions. [2022-11-20 20:39:55,298 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-11-20 20:39:55,298 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 8 states have (on average 6.75) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (13), 2 states have call predecessors, (13), 5 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) Word has length 96 [2022-11-20 20:39:55,298 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:39:55,299 INFO L225 Difference]: With dead ends: 1339 [2022-11-20 20:39:55,299 INFO L226 Difference]: Without dead ends: 0 [2022-11-20 20:39:55,302 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 127 GetRequests, 103 SyntacticMatches, 0 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 98 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=100, Invalid=550, Unknown=0, NotChecked=0, Total=650 [2022-11-20 20:39:55,303 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 60 mSDsluCounter, 442 mSDsCounter, 0 mSdLazyCounter, 470 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 523 SdHoareTripleChecker+Invalid, 477 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 470 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-20 20:39:55,303 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [67 Valid, 523 Invalid, 477 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 470 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-20 20:39:55,303 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-20 20:39:55,304 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-20 20:39:55,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 20:39:55,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-20 20:39:55,304 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 96 [2022-11-20 20:39:55,304 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:39:55,305 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-20 20:39:55,305 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 8 states have (on average 6.75) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (13), 2 states have call predecessors, (13), 5 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) [2022-11-20 20:39:55,305 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-20 20:39:55,305 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-20 20:39:55,307 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-20 20:39:55,318 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-20 20:39:55,513 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-20 20:39:55,515 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-20 20:40:19,466 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 521 528) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= 0 ~systemActive~0)) [2022-11-20 20:40:19,467 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 521 528) no Hoare annotation was computed. [2022-11-20 20:40:19,467 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 411 417) no Hoare annotation was computed. [2022-11-20 20:40:19,467 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 411 417) the Hoare annotation is: true [2022-11-20 20:40:19,467 INFO L895 garLoopResultBuilder]: At program point L459(line 459) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-20 20:40:19,467 INFO L895 garLoopResultBuilder]: At program point L455(line 455) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-20 20:40:19,468 INFO L899 garLoopResultBuilder]: For program point L453(lines 453 461) no Hoare annotation was computed. [2022-11-20 20:40:19,468 INFO L895 garLoopResultBuilder]: At program point L449(lines 449 466) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) (= ~pumpRunning~0 0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-20 20:40:19,468 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 445 469) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) (= ~pumpRunning~0 0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-20 20:40:19,468 INFO L895 garLoopResultBuilder]: At program point L464(line 464) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))) (or (not .cse1) (= ~pumpRunning~0 0) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 20:40:19,469 INFO L899 garLoopResultBuilder]: For program point L464-1(lines 445 469) no Hoare annotation was computed. [2022-11-20 20:40:19,469 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 445 469) no Hoare annotation was computed. [2022-11-20 20:40:19,469 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 237 248) the Hoare annotation is: (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~methaneLevelCritical~0)| 0)) (.cse1 (= ~methaneLevelCritical~0 0))) (and (or (not .cse0) .cse1 .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 0) .cse2 .cse0 (not .cse1)))) [2022-11-20 20:40:19,469 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 237 248) no Hoare annotation was computed. [2022-11-20 20:40:19,469 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 249 257) the Hoare annotation is: true [2022-11-20 20:40:19,469 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 249 257) no Hoare annotation was computed. [2022-11-20 20:40:19,470 INFO L895 garLoopResultBuilder]: At program point L481(line 481) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not .cse1))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (and (not (< 0 ~waterLevel~0)) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (not (= |timeShift_processEnvironment_~tmp~5#1| 0)) (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0))) (or (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (and .cse2 (= ~methAndRunningLastTime~0 0))) (or .cse2 (not (= 0 ~systemActive~0)))))) [2022-11-20 20:40:19,470 INFO L895 garLoopResultBuilder]: At program point L477(line 477) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= |old(~pumpRunning~0)| 0))) (and (or (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (and .cse1 (= ~methAndRunningLastTime~0 0) (not (= ~pumpRunning~0 0)))) (or .cse0 (and .cse1 (or (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (and (not (< 0 ~waterLevel~0)) (<= ~waterLevel~0 |old(~waterLevel~0)|)))) .cse2) (or (not .cse2) (not (= 0 ~systemActive~0))))) [2022-11-20 20:40:19,470 INFO L899 garLoopResultBuilder]: For program point L477-1(line 477) no Hoare annotation was computed. [2022-11-20 20:40:19,470 INFO L899 garLoopResultBuilder]: For program point L188(lines 188 198) no Hoare annotation was computed. [2022-11-20 20:40:19,471 INFO L895 garLoopResultBuilder]: At program point L184(lines 184 201) the Hoare annotation is: (let ((.cse47 (= |old(~pumpRunning~0)| 0))) (let ((.cse46 (= ~methaneLevelCritical~0 0)) (.cse54 (select |#memory_int| 1)) (.cse50 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| ~methaneLevelCritical~0)) (.cse1 (not .cse47)) (.cse44 (= ~pumpRunning~0 0)) (.cse48 (= 1 ~systemActive~0)) (.cse52 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse49 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse51 (and .cse1 .cse44 .cse48 .cse52 .cse49 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0))) (.cse53 (and .cse44 (<= ~waterLevel~0 1) .cse49 .cse50)) (.cse45 (= ~methAndRunningLastTime~0 0)) (.cse0 (not (= (select |#length| 12) 25))) (.cse2 (not (= (select .cse54 0) 48))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 9 (select |#length| 5)))) (.cse7 (not (= 30 (select |#length| 7)))) (.cse8 (not (= 31 (select |#length| 2)))) (.cse9 (not (= (select |#valid| 12) 1))) (.cse10 (not (= 2 (select |#length| 1)))) (.cse11 (not (= 9 (select |#length| 14)))) (.cse12 (not .cse48)) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse17 (not (= ~head~0.offset 0))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse27 (not .cse46)) (.cse28 (not (= (select .cse54 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse37 (not (= (select |#valid| 14) 1))) (.cse38 (not (= (select |#valid| 13) 1))) (.cse39 (not (= 30 (select |#length| 4)))) (.cse40 (not (= (select |#valid| 2) 1))) (.cse41 (not (= (select |#valid| 9) 1))) (.cse42 (not (= ~head~0.base 0))) (.cse43 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (not (= |old(~waterLevel~0)| 1)) .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse1 .cse44 (not (= 0 ~systemActive~0))) (or .cse3 .cse5 .cse45 .cse12 .cse17 .cse27 .cse33 (not (<= 0 |#StackHeapBarrier|)) .cse42 .cse43) (or .cse46 .cse12 .cse47 (and .cse1 .cse44 .cse48 .cse49 .cse50)) (or .cse12 .cse47 .cse51 (and (not (= |timeShift_processEnvironment_~tmp~5#1| 0)) .cse52) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse52 .cse49 .cse50)) (or .cse5 .cse45 .cse12 .cse53 .cse27 .cse51) (or .cse1 .cse5 .cse12 .cse53 (and .cse45 (<= 2 ~waterLevel~0) .cse49 .cse50)) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< |old(~waterLevel~0)| 2) .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43))))) [2022-11-20 20:40:19,472 INFO L895 garLoopResultBuilder]: At program point L184-1(lines 176 204) the Hoare annotation is: (let ((.cse47 (= ~methaneLevelCritical~0 0)) (.cse53 (= |old(~pumpRunning~0)| 0))) (let ((.cse57 (select |#memory_int| 1)) (.cse1 (not .cse53)) (.cse27 (not .cse47)) (.cse55 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse54 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse44 (= ~pumpRunning~0 0)) (.cse45 (= ~methAndRunningLastTime~0 0)) (.cse48 (<= 2 ~waterLevel~0)) (.cse56 (= 1 ~systemActive~0)) (.cse49 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse50 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| ~methaneLevelCritical~0))) (let ((.cse51 (and .cse45 .cse48 .cse56 .cse49 .cse50)) (.cse52 (and .cse54 .cse44 .cse45 (<= ~waterLevel~0 1) .cse56 .cse49 .cse50)) (.cse46 (and .cse1 .cse44 .cse45 .cse56 .cse27 .cse55 .cse49 .cse50)) (.cse0 (not (= (select |#length| 12) 25))) (.cse2 (not (= (select .cse57 0) 48))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 9 (select |#length| 5)))) (.cse7 (not (= 30 (select |#length| 7)))) (.cse8 (not (= 31 (select |#length| 2)))) (.cse9 (not (= (select |#valid| 12) 1))) (.cse10 (not (= 2 (select |#length| 1)))) (.cse11 (not (= 9 (select |#length| 14)))) (.cse12 (not .cse56)) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse17 (not (= ~head~0.offset 0))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse28 (not (= (select .cse57 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse37 (not (= (select |#valid| 14) 1))) (.cse38 (not (= (select |#valid| 13) 1))) (.cse39 (not (= 30 (select |#length| 4)))) (.cse40 (not (= (select |#valid| 2) 1))) (.cse41 (not (= (select |#valid| 9) 1))) (.cse42 (not (= ~head~0.base 0))) (.cse43 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (not (= |old(~waterLevel~0)| 1)) .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse1 (not (= 0 ~systemActive~0)) (and .cse44 .cse45)) (or .cse5 .cse46 .cse47 .cse12 (and (not .cse44) .cse48 (= ~pumpRunning~0 |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1|) .cse49 .cse50) .cse51 .cse52) (or .cse1 .cse5 .cse12 .cse27 .cse51 .cse52) (or .cse46 .cse47 .cse12 .cse53) (or .cse46 .cse12 (and .cse54 .cse45 .cse55 .cse49 .cse50) .cse53 (and .cse1 .cse44 .cse45 .cse56 .cse55 .cse49 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0))) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< |old(~waterLevel~0)| 2) .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43))))) [2022-11-20 20:40:19,473 INFO L895 garLoopResultBuilder]: At program point L490(line 490) the Hoare annotation is: (let ((.cse44 (select |#memory_int| 1))) (let ((.cse2 (= |old(~pumpRunning~0)| 0)) (.cse3 (not (= (select |#length| 12) 25))) (.cse4 (not (= (select .cse44 0) 48))) (.cse5 (not (= |#NULL.offset| 0))) (.cse6 (not (= 9 (select |#length| 11)))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (= 9 (select |#length| 5)))) (.cse8 (not (= 30 (select |#length| 7)))) (.cse9 (not (= 31 (select |#length| 2)))) (.cse10 (not (= (select |#valid| 12) 1))) (.cse11 (not (= 2 (select |#length| 1)))) (.cse12 (not (= 9 (select |#length| 14)))) (.cse1 (not (= 1 ~systemActive~0))) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse17 (not (= ~head~0.offset 0))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse27 (not (= ~methaneLevelCritical~0 0))) (.cse28 (not (= (select .cse44 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse37 (not (= (select |#valid| 14) 1))) (.cse38 (not (= (select |#valid| 13) 1))) (.cse39 (not (= 30 (select |#length| 4)))) (.cse40 (not (= (select |#valid| 2) 1))) (.cse41 (not (= (select |#valid| 9) 1))) (.cse42 (not (= ~head~0.base 0))) (.cse43 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse6 .cse0 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or (not .cse2) (not (= 0 ~systemActive~0))) (or .cse3 .cse4 .cse5 .cse6 .cse0 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse1 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< |old(~waterLevel~0)| 2) .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43)))) [2022-11-20 20:40:19,474 INFO L895 garLoopResultBuilder]: At program point L490-1(lines 471 495) the Hoare annotation is: (let ((.cse51 (= |old(~pumpRunning~0)| 0))) (let ((.cse49 (= ~methaneLevelCritical~0 0)) (.cse53 (select |#memory_int| 1)) (.cse1 (not .cse51)) (.cse48 (= ~pumpRunning~0 0)) (.cse50 (= 1 ~systemActive~0)) (.cse52 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse46 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse44 (= ~methAndRunningLastTime~0 0)) (.cse47 (and .cse1 .cse48 .cse50 .cse52 .cse46)) (.cse45 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (= (select |#length| 12) 25))) (.cse2 (not (= (select .cse53 0) 48))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 9 (select |#length| 5)))) (.cse7 (not (= 30 (select |#length| 7)))) (.cse8 (not (= 31 (select |#length| 2)))) (.cse9 (not (= (select |#valid| 12) 1))) (.cse10 (not (= 2 (select |#length| 1)))) (.cse11 (not (= 9 (select |#length| 14)))) (.cse12 (not .cse50)) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse17 (not (= ~head~0.offset 0))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse27 (not .cse49)) (.cse28 (not (= (select .cse53 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse37 (not (= (select |#valid| 14) 1))) (.cse38 (not (= (select |#valid| 13) 1))) (.cse39 (not (= 30 (select |#length| 4)))) (.cse40 (not (= (select |#valid| 2) 1))) (.cse41 (not (= (select |#valid| 9) 1))) (.cse42 (not (= ~head~0.base 0))) (.cse43 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (not (= |old(~waterLevel~0)| 1)) .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse3 .cse5 .cse44 .cse12 .cse17 .cse27 .cse33 (not (<= 0 |#StackHeapBarrier|)) .cse42 .cse43) (or (and .cse45 .cse44 .cse46) .cse5 .cse12 .cse47 (and .cse48 (<= ~waterLevel~0 1) .cse46) (and .cse44 (<= 2 ~waterLevel~0) .cse46)) (or .cse49 .cse12 (and .cse1 .cse48 .cse50 .cse46) .cse51) (or .cse12 .cse51 .cse47 (and .cse45 .cse52 .cse46)) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< |old(~waterLevel~0)| 2) .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse1 (not (= 0 ~systemActive~0))))))) [2022-11-20 20:40:19,474 INFO L899 garLoopResultBuilder]: For program point L391-1(lines 390 409) no Hoare annotation was computed. [2022-11-20 20:40:19,474 INFO L895 garLoopResultBuilder]: At program point L160(line 160) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~pumpRunning~0)| 0))) (and (or .cse0 .cse1) (or (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0) (or (not .cse1) (not (= 0 ~systemActive~0))))) [2022-11-20 20:40:19,474 INFO L899 garLoopResultBuilder]: For program point L189(lines 189 195) no Hoare annotation was computed. [2022-11-20 20:40:19,475 INFO L899 garLoopResultBuilder]: For program point L479(lines 479 487) no Hoare annotation was computed. [2022-11-20 20:40:19,475 INFO L899 garLoopResultBuilder]: For program point L475(lines 475 492) no Hoare annotation was computed. [2022-11-20 20:40:19,476 INFO L895 garLoopResultBuilder]: At program point L182(line 182) the Hoare annotation is: (let ((.cse51 (= |old(~pumpRunning~0)| 0))) (let ((.cse49 (= ~methaneLevelCritical~0 0)) (.cse53 (select |#memory_int| 1)) (.cse1 (not .cse51)) (.cse44 (= ~pumpRunning~0 0)) (.cse50 (= 1 ~systemActive~0)) (.cse52 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse47 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse45 (= ~methAndRunningLastTime~0 0)) (.cse48 (and .cse1 .cse44 .cse50 .cse52 .cse47)) (.cse46 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (= (select |#length| 12) 25))) (.cse2 (not (= (select .cse53 0) 48))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 9 (select |#length| 5)))) (.cse7 (not (= 30 (select |#length| 7)))) (.cse8 (not (= 31 (select |#length| 2)))) (.cse9 (not (= (select |#valid| 12) 1))) (.cse10 (not (= 2 (select |#length| 1)))) (.cse11 (not (= 9 (select |#length| 14)))) (.cse12 (not .cse50)) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse17 (not (= ~head~0.offset 0))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse27 (not .cse49)) (.cse28 (not (= (select .cse53 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse37 (not (= (select |#valid| 14) 1))) (.cse38 (not (= (select |#valid| 13) 1))) (.cse39 (not (= 30 (select |#length| 4)))) (.cse40 (not (= (select |#valid| 2) 1))) (.cse41 (not (= (select |#valid| 9) 1))) (.cse42 (not (= ~head~0.base 0))) (.cse43 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (not (= |old(~waterLevel~0)| 1)) .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse1 .cse44 (not (= 0 ~systemActive~0))) (or .cse3 .cse5 .cse45 .cse12 .cse17 .cse27 .cse33 (not (<= 0 |#StackHeapBarrier|)) .cse42 .cse43) (or (and .cse46 .cse45 .cse47) .cse5 .cse12 .cse48 (and .cse44 (<= ~waterLevel~0 1) .cse47) (and .cse45 (<= 2 ~waterLevel~0) .cse47)) (or .cse49 .cse12 (and .cse1 .cse44 .cse50 .cse47) .cse51) (or .cse12 .cse51 .cse48 (and .cse46 .cse52 .cse47)) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< |old(~waterLevel~0)| 2) .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43))))) [2022-11-20 20:40:19,476 INFO L899 garLoopResultBuilder]: For program point L182-1(line 182) no Hoare annotation was computed. [2022-11-20 20:40:19,476 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 387 410) the Hoare annotation is: (let ((.cse49 (select |#memory_int| 1)) (.cse45 (= |old(~pumpRunning~0)| 0))) (let ((.cse44 (not (= 0 ~systemActive~0))) (.cse46 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse48 (= ~methAndRunningLastTime~0 0)) (.cse47 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse0 (not (= (select |#length| 12) 25))) (.cse1 (not .cse45)) (.cse2 (not (= (select .cse49 0) 48))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 9 (select |#length| 5)))) (.cse7 (not (= 30 (select |#length| 7)))) (.cse8 (not (= 31 (select |#length| 2)))) (.cse9 (not (= (select |#valid| 12) 1))) (.cse10 (not (= 2 (select |#length| 1)))) (.cse11 (not (= 9 (select |#length| 14)))) (.cse12 (not (= 1 ~systemActive~0))) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse17 (not (= ~head~0.offset 0))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse27 (not (= ~methaneLevelCritical~0 0))) (.cse28 (not (= (select .cse49 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse37 (not (= (select |#valid| 14) 1))) (.cse38 (not (= (select |#valid| 13) 1))) (.cse39 (not (= 30 (select |#length| 4)))) (.cse40 (not (= (select |#valid| 2) 1))) (.cse41 (not (= (select |#valid| 9) 1))) (.cse42 (not (= ~head~0.base 0))) (.cse43 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (not (= |old(~waterLevel~0)| 1)) .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse1 (= ~pumpRunning~0 0) .cse44) (or .cse12 .cse45 (and .cse46 .cse47)) (or .cse1 .cse5 .cse48 .cse44) (or (and .cse46 .cse48 .cse47) .cse5 .cse12) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< |old(~waterLevel~0)| 2) .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43)))) [2022-11-20 20:40:19,477 INFO L899 garLoopResultBuilder]: For program point L398-1(lines 398 404) no Hoare annotation was computed. [2022-11-20 20:40:19,477 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 387 410) no Hoare annotation was computed. [2022-11-20 20:40:19,477 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 160) no Hoare annotation was computed. [2022-11-20 20:40:19,477 INFO L895 garLoopResultBuilder]: At program point L485(line 485) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= |old(~pumpRunning~0)| 0))) (and (or (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (and .cse1 (= ~methAndRunningLastTime~0 0) (not (= ~pumpRunning~0 0)))) (or (= ~methaneLevelCritical~0 0) .cse0 .cse2) (or .cse0 .cse2 (and .cse1 (or (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (and (not (< 0 ~waterLevel~0)) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0))) (or (not .cse2) (not (= 0 ~systemActive~0))))) [2022-11-20 20:40:19,477 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-11-20 20:40:19,478 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-11-20 20:40:19,478 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-11-20 20:40:19,478 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-11-20 20:40:19,478 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-11-20 20:40:19,478 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-11-20 20:40:19,478 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-11-20 20:40:19,479 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-11-20 20:40:19,479 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-11-20 20:40:19,479 INFO L899 garLoopResultBuilder]: For program point L345(lines 345 351) no Hoare annotation was computed. [2022-11-20 20:40:19,479 INFO L899 garLoopResultBuilder]: For program point L345-1(lines 345 351) no Hoare annotation was computed. [2022-11-20 20:40:19,479 INFO L895 garLoopResultBuilder]: At program point L370(lines 325 372) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse1 (= 1 ~systemActive~0)) (.cse3 (not .cse5)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (not .cse0) .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse5)))) [2022-11-20 20:40:19,479 INFO L895 garLoopResultBuilder]: At program point L337(line 337) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse1 (= 1 ~systemActive~0)) (.cse3 (not .cse5)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (not .cse0) .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse5)))) [2022-11-20 20:40:19,480 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-20 20:40:19,480 INFO L899 garLoopResultBuilder]: For program point L627(lines 627 633) no Hoare annotation was computed. [2022-11-20 20:40:19,480 INFO L895 garLoopResultBuilder]: At program point L627-1(lines 627 633) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (not (= 0 ~systemActive~0))) (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1))) [2022-11-20 20:40:19,480 INFO L899 garLoopResultBuilder]: For program point L326(lines 325 372) no Hoare annotation was computed. [2022-11-20 20:40:19,480 INFO L899 garLoopResultBuilder]: For program point L355(lines 355 368) no Hoare annotation was computed. [2022-11-20 20:40:19,480 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-20 20:40:19,481 INFO L895 garLoopResultBuilder]: At program point L347(line 347) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse1 (= 1 ~systemActive~0)) (.cse3 (not .cse5)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (not .cse0) .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse5)))) [2022-11-20 20:40:19,481 INFO L902 garLoopResultBuilder]: At program point L376(lines 315 380) the Hoare annotation is: true [2022-11-20 20:40:19,481 INFO L899 garLoopResultBuilder]: For program point L335(lines 335 341) no Hoare annotation was computed. [2022-11-20 20:40:19,481 INFO L899 garLoopResultBuilder]: For program point L335-1(lines 335 341) no Hoare annotation was computed. [2022-11-20 20:40:19,481 INFO L895 garLoopResultBuilder]: At program point L629(line 629) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2022-11-20 20:40:19,481 INFO L895 garLoopResultBuilder]: At program point L373(lines 324 374) the Hoare annotation is: false [2022-11-20 20:40:19,482 INFO L895 garLoopResultBuilder]: At program point L142(lines 142 149) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (and (= (select |#length| 15) 25) (= 9 (select |#length| 5)) (= (select |#length| 9) 21) (= 30 (select |#length| 7)) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_main_~tmp~0#1|) (= ~methAndRunningLastTime~0 0) (= (select |#valid| 9) 1) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_valid_product_~retValue_acc~10#1|) (= (select |#length| 12) 25) (= (select |#valid| 11) 1) (= ~methaneLevelCritical~0 0) (= 30 (select |#length| 4)) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~10#1|) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= 2 (select |#length| 1)) (= (select |#length| 8) 9) (= (select |#valid| 3) 1) (= (select |#valid| 7) 1) (= 30 (select |#length| 13)) (= 1 ~systemActive~0) (= 30 (select |#length| 10)) (= (select |#valid| 12) 1) (= (select |#valid| 4) 1) (= (select |#valid| 1) 1) (= (select |#length| 6) 21) (= (select |#valid| 14) 1) (= 9 (select |#length| 14)) (= (select |#valid| 0) 0) (= ~head~0.base 0) (= (select |#valid| 2) 1) (= |#NULL.offset| 0) (= 9 (select |#length| 11)) (= ~waterLevel~0 1) (= (select .cse0 0) 48) (= (select |#valid| 6) 1) (= (select .cse0 1) 0) (= (select |#valid| 10) 1) (= (select |#valid| 8) 1) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))) [2022-11-20 20:40:19,482 INFO L902 garLoopResultBuilder]: At program point L142-2(lines 142 149) the Hoare annotation is: true [2022-11-20 20:40:19,482 INFO L899 garLoopResultBuilder]: For program point L361(lines 361 367) no Hoare annotation was computed. [2022-11-20 20:40:19,483 INFO L895 garLoopResultBuilder]: At program point L361-2(lines 355 368) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse3 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not .cse4))) (or (and (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2) (and .cse3 .cse1 .cse4) (and (not .cse3) .cse0 .cse1 .cse2)))) [2022-11-20 20:40:19,483 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 419 443) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) (= ~pumpRunning~0 0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-20 20:40:19,483 INFO L895 garLoopResultBuilder]: At program point L438(line 438) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-20 20:40:19,483 INFO L899 garLoopResultBuilder]: For program point L438-1(lines 419 443) no Hoare annotation was computed. [2022-11-20 20:40:19,484 INFO L895 garLoopResultBuilder]: At program point L509(line 509) the Hoare annotation is: (let ((.cse4 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not .cse4)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (let ((.cse0 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= (select .cse0 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) .cse1 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse2 (not (= (select .cse0 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~7#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 1)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) .cse3 (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) (or .cse1 .cse4 .cse2) (or .cse5 .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 1)) .cse3) (or .cse5 .cse1 (not (<= ~waterLevel~0 1)) .cse3)))) [2022-11-20 20:40:19,485 INFO L895 garLoopResultBuilder]: At program point L509-1(line 509) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not .cse1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2) (let ((.cse3 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= (select .cse3 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (and (<= |processEnvironment__wrappee__highWaterSensor_activatePump_#t~ret19#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~7#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 1) (<= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0) (<= 0 |processEnvironment__wrappee__highWaterSensor_activatePump_#t~ret19#1|) (<= 0 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) .cse0 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse2 (not (= (select .cse3 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) .cse4 (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) (or .cse5 .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 1)) .cse4) (or .cse5 .cse0 (not (<= ~waterLevel~0 1)) .cse4)))) [2022-11-20 20:40:19,486 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 419 443) no Hoare annotation was computed. [2022-11-20 20:40:19,487 INFO L895 garLoopResultBuilder]: At program point L433(line 433) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)) .cse3) (let ((.cse4 (select |#memory_int| 1))) (or (not (= ~waterLevel~0 1)) (not (= (select |#length| 12) 25)) (not (= (select .cse4 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) .cse0 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse2 (not (= (select .cse4 1) 0)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~3#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~7#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) .cse3 (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))))) [2022-11-20 20:40:19,487 INFO L899 garLoopResultBuilder]: For program point L427(lines 427 435) no Hoare annotation was computed. [2022-11-20 20:40:19,487 INFO L895 garLoopResultBuilder]: At program point L423(lines 423 440) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) (= ~pumpRunning~0 0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-20 20:40:19,487 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 225 236) no Hoare annotation was computed. [2022-11-20 20:40:19,488 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 225 236) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (let ((.cse4 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= (select .cse4 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not .cse0) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) .cse2 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not .cse1) (not (= (select .cse4 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (= |old(~waterLevel~0)| ~waterLevel~0) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) .cse5 (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) (or .cse2 .cse3 .cse5))) [2022-11-20 20:40:19,488 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 529 539) the Hoare annotation is: true [2022-11-20 20:40:19,488 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 529 539) no Hoare annotation was computed. [2022-11-20 20:40:19,488 INFO L902 garLoopResultBuilder]: At program point L534(line 534) the Hoare annotation is: true [2022-11-20 20:40:19,489 INFO L899 garLoopResultBuilder]: For program point L534-1(line 534) no Hoare annotation was computed. [2022-11-20 20:40:19,492 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:40:19,494 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-20 20:40:19,563 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 08:40:19 BoogieIcfgContainer [2022-11-20 20:40:19,580 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-20 20:40:19,581 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-20 20:40:19,581 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-20 20:40:19,581 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-20 20:40:19,582 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 08:39:07" (3/4) ... [2022-11-20 20:40:19,584 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-20 20:40:19,590 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-20 20:40:19,590 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-20 20:40:19,590 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-20 20:40:19,590 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-20 20:40:19,590 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-20 20:40:19,591 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-20 20:40:19,591 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 20:40:19,591 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-20 20:40:19,591 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-20 20:40:19,591 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-20 20:40:19,598 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2022-11-20 20:40:19,599 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 13 nodes and edges [2022-11-20 20:40:19,599 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 6 nodes and edges [2022-11-20 20:40:19,600 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 20:40:19,600 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 20:40:19,625 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && pumpRunning == 0) && \result == tmp) && methAndRunningLastTime == 0) && \valid[9] == 1) && \result == retValue_acc) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && 1 == retValue_acc) && 31 == unknown-#length-unknown[2]) && head == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && 30 == unknown-#length-unknown[13]) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[1][0] == 48) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 [2022-11-20 20:40:19,625 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && ((!(1 == systemActive) || \old(pumpRunning) == 0) || (pumpRunning == \old(pumpRunning) && waterLevel <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(0 == systemActive))) && ((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && waterLevel <= \old(waterLevel)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) [2022-11-20 20:40:19,626 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && (((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && waterLevel <= \old(waterLevel)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || ((methAndRunningLastTime == 0 && 2 <= waterLevel) && waterLevel <= \old(waterLevel)))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && waterLevel <= \old(waterLevel))) || \old(pumpRunning) == 0)) && (((!(1 == systemActive) || \old(pumpRunning) == 0) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-20 20:40:19,627 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) [2022-11-20 20:40:19,627 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && (((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || \old(pumpRunning) == 0) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && ((((!(1 == systemActive) || \old(pumpRunning) == 0) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == 0)) || (!(tmp == 0) && tmp == methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || (((methAndRunningLastTime == 0 && 2 <= waterLevel) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) [2022-11-20 20:40:19,627 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) [2022-11-20 20:40:19,628 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || (pumpRunning == 0 && methAndRunningLastTime == 0))) && ((((((!(\old(methAndRunningLastTime) == 0) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((!(pumpRunning == 0) && 2 <= waterLevel) && pumpRunning == tmp___0) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || ((((methAndRunningLastTime == 0 && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((methAndRunningLastTime == 0 && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && ((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical) || methaneLevelCritical == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0)) && (((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || \old(pumpRunning) == 0) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == 0))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) [2022-11-20 20:40:19,628 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || ((((((((aux-isMethaneAlarm()-aux <= 0 && retValue_acc == tmp___0) && tmp == \result) && \result == tmp) && retValue_acc == \result) && tmp___0 == 1) && tmp <= 0) && 0 <= aux-isMethaneAlarm()-aux) && 0 <= \result)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(methAndRunningLastTime == 0)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && tmp == 1)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) || !(methAndRunningLastTime == 0)) [2022-11-20 20:40:19,629 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || \old(pumpRunning) == 0) && (!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-20 20:40:19,653 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/witness.graphml [2022-11-20 20:40:19,653 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-20 20:40:19,654 INFO L158 Benchmark]: Toolchain (without parser) took 73961.61ms. Allocated memory was 123.7MB in the beginning and 408.9MB in the end (delta: 285.2MB). Free memory was 78.6MB in the beginning and 195.4MB in the end (delta: -116.8MB). Peak memory consumption was 171.0MB. Max. memory is 16.1GB. [2022-11-20 20:40:19,654 INFO L158 Benchmark]: CDTParser took 0.24ms. Allocated memory is still 123.7MB. Free memory is still 77.3MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-20 20:40:19,654 INFO L158 Benchmark]: CACSL2BoogieTranslator took 587.52ms. Allocated memory is still 123.7MB. Free memory was 78.4MB in the beginning and 59.2MB in the end (delta: 19.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-20 20:40:19,655 INFO L158 Benchmark]: Boogie Procedure Inliner took 81.05ms. Allocated memory is still 123.7MB. Free memory was 59.2MB in the beginning and 56.8MB in the end (delta: 2.4MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-20 20:40:19,655 INFO L158 Benchmark]: Boogie Preprocessor took 65.42ms. Allocated memory is still 123.7MB. Free memory was 56.8MB in the beginning and 55.0MB in the end (delta: 1.8MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-20 20:40:19,655 INFO L158 Benchmark]: RCFGBuilder took 730.03ms. Allocated memory is still 123.7MB. Free memory was 55.0MB in the beginning and 72.3MB in the end (delta: -17.3MB). Peak memory consumption was 11.6MB. Max. memory is 16.1GB. [2022-11-20 20:40:19,656 INFO L158 Benchmark]: TraceAbstraction took 72418.50ms. Allocated memory was 123.7MB in the beginning and 408.9MB in the end (delta: 285.2MB). Free memory was 71.8MB in the beginning and 201.7MB in the end (delta: -129.9MB). Peak memory consumption was 228.6MB. Max. memory is 16.1GB. [2022-11-20 20:40:19,656 INFO L158 Benchmark]: Witness Printer took 72.30ms. Allocated memory is still 408.9MB. Free memory was 200.6MB in the beginning and 195.4MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-20 20:40:19,658 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.24ms. Allocated memory is still 123.7MB. Free memory is still 77.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 587.52ms. Allocated memory is still 123.7MB. Free memory was 78.4MB in the beginning and 59.2MB in the end (delta: 19.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 81.05ms. Allocated memory is still 123.7MB. Free memory was 59.2MB in the beginning and 56.8MB in the end (delta: 2.4MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 65.42ms. Allocated memory is still 123.7MB. Free memory was 56.8MB in the beginning and 55.0MB in the end (delta: 1.8MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 730.03ms. Allocated memory is still 123.7MB. Free memory was 55.0MB in the beginning and 72.3MB in the end (delta: -17.3MB). Peak memory consumption was 11.6MB. Max. memory is 16.1GB. * TraceAbstraction took 72418.50ms. Allocated memory was 123.7MB in the beginning and 408.9MB in the end (delta: 285.2MB). Free memory was 71.8MB in the beginning and 201.7MB in the end (delta: -129.9MB). Peak memory consumption was 228.6MB. Max. memory is 16.1GB. * Witness Printer took 72.30ms. Allocated memory is still 408.9MB. Free memory was 200.6MB in the beginning and 195.4MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 160]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 80 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 72.3s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 19.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 24.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1202 SdHoareTripleChecker+Valid, 4.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1168 mSDsluCounter, 3380 SdHoareTripleChecker+Invalid, 3.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2366 mSDsCounter, 361 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3326 IncrementalHoareTripleChecker+Invalid, 3687 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 361 mSolverCounterUnsat, 1014 mSDtfsCounter, 3326 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 892 GetRequests, 688 SyntacticMatches, 9 SemanticMatches, 195 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2838 ImplicationChecksByTransitivity, 30.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=713occurred in iteration=11, InterpolantAutomatonStates: 122, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 154 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 1968 PreInvPairs, 2218 NumberOfFragments, 6049 HoareAnnotationTreeSize, 1968 FomulaSimplifications, 3924 FormulaSimplificationTreeSizeReduction, 1.7s HoareSimplificationTime, 44 FomulaSimplificationsInter, 64216 FormulaSimplificationTreeSizeReductionInter, 22.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 5.3s InterpolantComputationTime, 1243 NumberOfCodeBlocks, 1243 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 1314 ConstructedInterpolants, 0 QuantifiedInterpolants, 3428 SizeOfPredicates, 38 NumberOfNonLiveVariables, 2137 ConjunctsInSsa, 128 ConjunctsInUnsatCore, 19 InterpolantComputations, 11 PerfectInterpolantSequences, 471/582 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 5.3s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 7, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 63, DAG_INTERPRETER_EARLY_EXITS: 7, TOOLS_POST_APPLICATIONS: 69, TOOLS_POST_TIME: 1.3s, TOOLS_POST_CALL_APPLICATIONS: 43, TOOLS_POST_CALL_TIME: 2.5s, TOOLS_POST_RETURN_APPLICATIONS: 36, TOOLS_POST_RETURN_TIME: 0.8s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 146, TOOLS_QUANTIFIERELIM_TIME: 4.6s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.3s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 175, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 30, DOMAIN_JOIN_TIME: 0.5s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 0, DOMAIN_WIDEN_TIME: 0.0s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 1, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 63, DOMAIN_ISBOTTOM_TIME: 0.1s, LOOP_SUMMARIZER_APPLICATIONS: 1, LOOP_SUMMARIZER_CACHE_MISSES: 1, LOOP_SUMMARIZER_OVERALL_TIME: 1.1s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 1.1s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 1, CALL_SUMMARIZER_APPLICATIONS: 36, CALL_SUMMARIZER_CACHE_MISSES: 7, CALL_SUMMARIZER_OVERALL_TIME: 0.2s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.2s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 913, DAG_COMPRESSION_RETAINED_NODES: 184, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 471]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && (((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && waterLevel <= \old(waterLevel)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || ((methAndRunningLastTime == 0 && 2 <= waterLevel) && waterLevel <= \old(waterLevel)))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && waterLevel <= \old(waterLevel))) || \old(pumpRunning) == 0)) && (((!(1 == systemActive) || \old(pumpRunning) == 0) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 387]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && ((!(1 == systemActive) || \old(pumpRunning) == 0) || (pumpRunning == \old(pumpRunning) && waterLevel <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(0 == systemActive))) && ((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && waterLevel <= \old(waterLevel)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) - InvariantResult [Line: 325]: Loop Invariant Derived loop invariant: (((((!(pumpRunning == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && splverifierCounter == 0) && !(0 == systemActive)) || (((methAndRunningLastTime == 0 && 1 == systemActive) && splverifierCounter == 0) && !(0 == systemActive))) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 509]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || ((((((((aux-isMethaneAlarm()-aux <= 0 && retValue_acc == tmp___0) && tmp == \result) && \result == tmp) && retValue_acc == \result) && tmp___0 == 1) && tmp <= 0) && 0 <= aux-isMethaneAlarm()-aux) && 0 <= \result)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(methAndRunningLastTime == 0)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && tmp == 1)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || \old(pumpRunning) == 0) && (!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 627]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && splverifierCounter == 0) && !(0 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) - InvariantResult [Line: 142]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 184]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && (((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || \old(pumpRunning) == 0) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && ((((!(1 == systemActive) || \old(pumpRunning) == 0) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == 0)) || (!(tmp == 0) && tmp == methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || (((methAndRunningLastTime == 0 && 2 <= waterLevel) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) - InvariantResult [Line: 423]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 142]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && pumpRunning == 0) && \result == tmp) && methAndRunningLastTime == 0) && \valid[9] == 1) && \result == retValue_acc) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && 1 == retValue_acc) && 31 == unknown-#length-unknown[2]) && head == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && 30 == unknown-#length-unknown[13]) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[1][0] == 48) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 - InvariantResult [Line: 176]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || (pumpRunning == 0 && methAndRunningLastTime == 0))) && ((((((!(\old(methAndRunningLastTime) == 0) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((!(pumpRunning == 0) && 2 <= waterLevel) && pumpRunning == tmp___0) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || ((((methAndRunningLastTime == 0 && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((methAndRunningLastTime == 0 && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && ((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical) || methaneLevelCritical == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0)) && (((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || \old(pumpRunning) == 0) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == 0))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) - InvariantResult [Line: 324]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2022-11-20 20:40:19,700 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8b43e21c-6e17-4030-93f6-e8eb9f99334f/bin/utaipan-6cKwYrpEi9/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE