./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 4e7fbc69 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash bff509ff7af2b9788fd6216f7196709183d48c973cf9a066c9793f96467b2abf --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-4e7fbc6 [2022-11-23 14:24:00,815 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-23 14:24:00,818 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-23 14:24:00,842 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-23 14:24:00,842 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-23 14:24:00,844 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-23 14:24:00,845 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-23 14:24:00,847 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-23 14:24:00,849 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-23 14:24:00,851 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-23 14:24:00,852 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-23 14:24:00,853 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-23 14:24:00,854 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-23 14:24:00,855 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-23 14:24:00,856 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-23 14:24:00,858 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-23 14:24:00,859 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-23 14:24:00,860 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-23 14:24:00,862 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-23 14:24:00,865 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-23 14:24:00,867 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-23 14:24:00,868 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-23 14:24:00,870 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-23 14:24:00,871 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-23 14:24:00,876 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-23 14:24:00,876 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-23 14:24:00,877 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-23 14:24:00,878 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-23 14:24:00,879 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-23 14:24:00,880 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-23 14:24:00,881 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-23 14:24:00,882 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-23 14:24:00,883 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-23 14:24:00,884 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-23 14:24:00,885 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-23 14:24:00,885 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-23 14:24:00,886 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-23 14:24:00,887 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-23 14:24:00,887 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-23 14:24:00,888 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-23 14:24:00,889 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-23 14:24:00,891 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-23 14:24:00,920 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-23 14:24:00,920 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-23 14:24:00,921 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-23 14:24:00,921 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-23 14:24:00,922 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-23 14:24:00,922 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-23 14:24:00,922 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-23 14:24:00,923 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-23 14:24:00,923 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-23 14:24:00,923 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-23 14:24:00,924 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-23 14:24:00,924 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-23 14:24:00,924 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-23 14:24:00,925 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-23 14:24:00,925 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-23 14:24:00,925 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-23 14:24:00,926 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-23 14:24:00,926 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-23 14:24:00,927 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-23 14:24:00,927 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-23 14:24:00,927 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-23 14:24:00,928 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-23 14:24:00,928 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-23 14:24:00,928 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-23 14:24:00,929 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-23 14:24:00,929 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-23 14:24:00,929 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-23 14:24:00,930 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-23 14:24:00,930 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-23 14:24:00,930 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-23 14:24:00,931 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-23 14:24:00,931 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-23 14:24:00,931 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 14:24:00,932 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-23 14:24:00,932 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-23 14:24:00,932 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-23 14:24:00,933 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-23 14:24:00,933 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-23 14:24:00,933 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-23 14:24:00,933 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-23 14:24:00,934 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-23 14:24:00,934 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> bff509ff7af2b9788fd6216f7196709183d48c973cf9a066c9793f96467b2abf [2022-11-23 14:24:01,233 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-23 14:24:01,277 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-23 14:24:01,280 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-23 14:24:01,282 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-23 14:24:01,283 INFO L275 PluginConnector]: CDTParser initialized [2022-11-23 14:24:01,285 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/../../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c [2022-11-23 14:24:04,441 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-23 14:24:04,743 INFO L351 CDTParser]: Found 1 translation units. [2022-11-23 14:24:04,744 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c [2022-11-23 14:24:04,759 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/data/6c2d3c478/19306172903948dd8a9d77490dfb2efa/FLAG27a638749 [2022-11-23 14:24:04,781 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/data/6c2d3c478/19306172903948dd8a9d77490dfb2efa [2022-11-23 14:24:04,786 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-23 14:24:04,788 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-23 14:24:04,793 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-23 14:24:04,793 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-23 14:24:04,797 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-23 14:24:04,797 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:24:04" (1/1) ... [2022-11-23 14:24:04,798 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@56ed5162 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:04, skipping insertion in model container [2022-11-23 14:24:04,800 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:24:04" (1/1) ... [2022-11-23 14:24:04,809 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-23 14:24:04,874 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-23 14:24:05,117 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c[2985,2998] [2022-11-23 14:24:05,268 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 14:24:05,279 INFO L203 MainTranslator]: Completed pre-run [2022-11-23 14:24:05,309 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c[2985,2998] [2022-11-23 14:24:05,354 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 14:24:05,372 INFO L208 MainTranslator]: Completed translation [2022-11-23 14:24:05,373 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:05 WrapperNode [2022-11-23 14:24:05,373 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-23 14:24:05,374 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-23 14:24:05,375 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-23 14:24:05,375 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-23 14:24:05,382 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:05" (1/1) ... [2022-11-23 14:24:05,406 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:05" (1/1) ... [2022-11-23 14:24:05,444 INFO L138 Inliner]: procedures = 59, calls = 107, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 225 [2022-11-23 14:24:05,445 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-23 14:24:05,446 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-23 14:24:05,446 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-23 14:24:05,446 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-23 14:24:05,456 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:05" (1/1) ... [2022-11-23 14:24:05,456 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:05" (1/1) ... [2022-11-23 14:24:05,468 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:05" (1/1) ... [2022-11-23 14:24:05,468 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:05" (1/1) ... [2022-11-23 14:24:05,473 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:05" (1/1) ... [2022-11-23 14:24:05,478 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:05" (1/1) ... [2022-11-23 14:24:05,479 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:05" (1/1) ... [2022-11-23 14:24:05,481 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:05" (1/1) ... [2022-11-23 14:24:05,483 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-23 14:24:05,484 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-23 14:24:05,485 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-23 14:24:05,485 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-23 14:24:05,486 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:05" (1/1) ... [2022-11-23 14:24:05,493 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 14:24:05,505 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 14:24:05,516 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-23 14:24:05,524 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-23 14:24:05,564 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-23 14:24:05,564 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-23 14:24:05,564 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-23 14:24:05,564 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-23 14:24:05,564 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-23 14:24:05,565 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-23 14:24:05,565 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-23 14:24:05,565 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-23 14:24:05,565 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-23 14:24:05,565 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 14:24:05,566 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 14:24:05,566 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-23 14:24:05,566 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-23 14:24:05,566 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-23 14:24:05,566 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-23 14:24:05,567 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-23 14:24:05,567 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-23 14:24:05,567 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-23 14:24:05,567 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-23 14:24:05,567 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-23 14:24:05,568 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-23 14:24:05,568 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-23 14:24:05,568 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-23 14:24:05,569 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-23 14:24:05,650 INFO L235 CfgBuilder]: Building ICFG [2022-11-23 14:24:05,652 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-23 14:24:06,092 INFO L276 CfgBuilder]: Performing block encoding [2022-11-23 14:24:06,214 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-23 14:24:06,214 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-23 14:24:06,217 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:24:06 BoogieIcfgContainer [2022-11-23 14:24:06,217 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-23 14:24:06,220 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-23 14:24:06,220 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-23 14:24:06,223 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-23 14:24:06,224 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 02:24:04" (1/3) ... [2022-11-23 14:24:06,224 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@66618ff6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 02:24:06, skipping insertion in model container [2022-11-23 14:24:06,225 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:05" (2/3) ... [2022-11-23 14:24:06,225 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@66618ff6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 02:24:06, skipping insertion in model container [2022-11-23 14:24:06,225 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:24:06" (3/3) ... [2022-11-23 14:24:06,227 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product63.cil.c [2022-11-23 14:24:06,247 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-23 14:24:06,248 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-23 14:24:06,317 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-23 14:24:06,325 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2af48df7, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-23 14:24:06,325 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-23 14:24:06,329 INFO L276 IsEmpty]: Start isEmpty. Operand has 80 states, 49 states have (on average 1.4285714285714286) internal successors, (70), 60 states have internal predecessors, (70), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2022-11-23 14:24:06,339 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-23 14:24:06,339 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:24:06,340 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:24:06,341 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:24:06,346 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:24:06,346 INFO L85 PathProgramCache]: Analyzing trace with hash 1806156663, now seen corresponding path program 1 times [2022-11-23 14:24:06,356 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:24:06,356 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1800925732] [2022-11-23 14:24:06,356 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:24:06,357 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:24:06,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:24:06,571 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 14:24:06,572 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:24:06,572 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1800925732] [2022-11-23 14:24:06,573 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1800925732] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:24:06,573 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:24:06,573 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-23 14:24:06,575 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2093328027] [2022-11-23 14:24:06,576 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:24:06,580 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-23 14:24:06,581 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:24:06,608 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-23 14:24:06,609 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-23 14:24:06,612 INFO L87 Difference]: Start difference. First operand has 80 states, 49 states have (on average 1.4285714285714286) internal successors, (70), 60 states have internal predecessors, (70), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 14:24:06,713 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:24:06,714 INFO L93 Difference]: Finished difference Result 158 states and 217 transitions. [2022-11-23 14:24:06,722 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-23 14:24:06,723 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-11-23 14:24:06,723 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:24:06,732 INFO L225 Difference]: With dead ends: 158 [2022-11-23 14:24:06,733 INFO L226 Difference]: Without dead ends: 75 [2022-11-23 14:24:06,737 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-23 14:24:06,740 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 14:24:06,742 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 87 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 14:24:06,756 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-11-23 14:24:06,782 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2022-11-23 14:24:06,786 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 46 states have (on average 1.3478260869565217) internal successors, (62), 56 states have internal predecessors, (62), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-11-23 14:24:06,789 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 99 transitions. [2022-11-23 14:24:06,794 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 99 transitions. Word has length 17 [2022-11-23 14:24:06,795 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:24:06,796 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 99 transitions. [2022-11-23 14:24:06,797 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 14:24:06,797 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 99 transitions. [2022-11-23 14:24:06,802 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-23 14:24:06,804 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:24:06,805 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:24:06,806 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-23 14:24:06,806 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:24:06,807 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:24:06,807 INFO L85 PathProgramCache]: Analyzing trace with hash -869298979, now seen corresponding path program 1 times [2022-11-23 14:24:06,807 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:24:06,808 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2051954540] [2022-11-23 14:24:06,808 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:24:06,808 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:24:06,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:24:06,953 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 14:24:06,954 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:24:06,954 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2051954540] [2022-11-23 14:24:06,954 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2051954540] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:24:06,955 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:24:06,955 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 14:24:06,955 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [114044920] [2022-11-23 14:24:06,955 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:24:06,957 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 14:24:06,957 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:24:06,958 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 14:24:06,958 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:24:06,959 INFO L87 Difference]: Start difference. First operand 75 states and 99 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 14:24:07,059 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:24:07,072 INFO L93 Difference]: Finished difference Result 122 states and 160 transitions. [2022-11-23 14:24:07,072 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 14:24:07,073 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-11-23 14:24:07,073 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:24:07,074 INFO L225 Difference]: With dead ends: 122 [2022-11-23 14:24:07,075 INFO L226 Difference]: Without dead ends: 67 [2022-11-23 14:24:07,075 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:24:07,077 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 14 mSDsluCounter, 56 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 129 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 14:24:07,078 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 129 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 14:24:07,079 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67 states. [2022-11-23 14:24:07,087 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 67. [2022-11-23 14:24:07,087 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 41 states have (on average 1.3658536585365855) internal successors, (56), 51 states have internal predecessors, (56), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-23 14:24:07,089 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 88 transitions. [2022-11-23 14:24:07,089 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 88 transitions. Word has length 18 [2022-11-23 14:24:07,089 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:24:07,090 INFO L495 AbstractCegarLoop]: Abstraction has 67 states and 88 transitions. [2022-11-23 14:24:07,090 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 14:24:07,090 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 88 transitions. [2022-11-23 14:24:07,091 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-23 14:24:07,091 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:24:07,091 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:24:07,092 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-23 14:24:07,092 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:24:07,092 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:24:07,093 INFO L85 PathProgramCache]: Analyzing trace with hash 457868229, now seen corresponding path program 1 times [2022-11-23 14:24:07,093 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:24:07,093 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1341007888] [2022-11-23 14:24:07,093 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:24:07,094 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:24:07,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:24:07,258 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 14:24:07,258 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:24:07,258 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1341007888] [2022-11-23 14:24:07,258 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1341007888] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:24:07,259 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:24:07,259 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-23 14:24:07,259 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1987568986] [2022-11-23 14:24:07,259 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:24:07,260 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-23 14:24:07,260 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:24:07,260 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-23 14:24:07,261 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-23 14:24:07,261 INFO L87 Difference]: Start difference. First operand 67 states and 88 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 14:24:07,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:24:07,500 INFO L93 Difference]: Finished difference Result 180 states and 242 transitions. [2022-11-23 14:24:07,500 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-23 14:24:07,501 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2022-11-23 14:24:07,501 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:24:07,505 INFO L225 Difference]: With dead ends: 180 [2022-11-23 14:24:07,505 INFO L226 Difference]: Without dead ends: 115 [2022-11-23 14:24:07,506 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-23 14:24:07,510 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 102 mSDsluCounter, 97 mSDsCounter, 0 mSdLazyCounter, 83 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 102 SdHoareTripleChecker+Valid, 184 SdHoareTripleChecker+Invalid, 92 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 83 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 14:24:07,510 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [102 Valid, 184 Invalid, 92 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 83 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 14:24:07,511 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 115 states. [2022-11-23 14:24:07,540 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 115 to 98. [2022-11-23 14:24:07,542 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98 states, 62 states have (on average 1.3709677419354838) internal successors, (85), 75 states have internal predecessors, (85), 21 states have call successors, (21), 14 states have call predecessors, (21), 14 states have return successors, (22), 15 states have call predecessors, (22), 21 states have call successors, (22) [2022-11-23 14:24:07,547 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 98 states and 128 transitions. [2022-11-23 14:24:07,548 INFO L78 Accepts]: Start accepts. Automaton has 98 states and 128 transitions. Word has length 21 [2022-11-23 14:24:07,548 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:24:07,548 INFO L495 AbstractCegarLoop]: Abstraction has 98 states and 128 transitions. [2022-11-23 14:24:07,548 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 14:24:07,549 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 128 transitions. [2022-11-23 14:24:07,550 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-23 14:24:07,550 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:24:07,550 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:24:07,550 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-23 14:24:07,551 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:24:07,551 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:24:07,551 INFO L85 PathProgramCache]: Analyzing trace with hash -373252238, now seen corresponding path program 1 times [2022-11-23 14:24:07,551 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:24:07,552 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1431379759] [2022-11-23 14:24:07,552 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:24:07,552 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:24:07,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:24:07,639 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 14:24:07,640 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:24:07,640 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1431379759] [2022-11-23 14:24:07,640 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1431379759] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:24:07,640 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:24:07,641 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 14:24:07,641 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [936983118] [2022-11-23 14:24:07,641 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:24:07,641 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 14:24:07,642 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:24:07,642 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 14:24:07,642 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:24:07,643 INFO L87 Difference]: Start difference. First operand 98 states and 128 transitions. Second operand has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 14:24:07,712 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:24:07,713 INFO L93 Difference]: Finished difference Result 194 states and 260 transitions. [2022-11-23 14:24:07,713 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 14:24:07,713 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-11-23 14:24:07,714 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:24:07,716 INFO L225 Difference]: With dead ends: 194 [2022-11-23 14:24:07,716 INFO L226 Difference]: Without dead ends: 192 [2022-11-23 14:24:07,717 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:24:07,718 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 64 mSDsluCounter, 70 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 158 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 14:24:07,718 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 158 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 14:24:07,720 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2022-11-23 14:24:07,747 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 192. [2022-11-23 14:24:07,748 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 192 states, 121 states have (on average 1.3636363636363635) internal successors, (165), 146 states have internal predecessors, (165), 42 states have call successors, (42), 28 states have call predecessors, (42), 28 states have return successors, (50), 30 states have call predecessors, (50), 42 states have call successors, (50) [2022-11-23 14:24:07,750 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 192 states to 192 states and 257 transitions. [2022-11-23 14:24:07,750 INFO L78 Accepts]: Start accepts. Automaton has 192 states and 257 transitions. Word has length 24 [2022-11-23 14:24:07,751 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:24:07,751 INFO L495 AbstractCegarLoop]: Abstraction has 192 states and 257 transitions. [2022-11-23 14:24:07,751 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 14:24:07,751 INFO L276 IsEmpty]: Start isEmpty. Operand 192 states and 257 transitions. [2022-11-23 14:24:07,754 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-23 14:24:07,754 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:24:07,754 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:24:07,754 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-23 14:24:07,755 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:24:07,755 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:24:07,755 INFO L85 PathProgramCache]: Analyzing trace with hash 1307614989, now seen corresponding path program 1 times [2022-11-23 14:24:07,756 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:24:07,756 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [22291509] [2022-11-23 14:24:07,756 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:24:07,756 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:24:07,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:24:07,973 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-23 14:24:07,977 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:24:07,978 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [22291509] [2022-11-23 14:24:07,978 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [22291509] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:24:07,978 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:24:07,978 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-23 14:24:07,979 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [37488520] [2022-11-23 14:24:07,979 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:24:07,979 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-23 14:24:07,980 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:24:07,980 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-23 14:24:07,980 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-23 14:24:07,981 INFO L87 Difference]: Start difference. First operand 192 states and 257 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 6 states have internal predecessors, (36), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-23 14:24:08,373 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:24:08,373 INFO L93 Difference]: Finished difference Result 507 states and 698 transitions. [2022-11-23 14:24:08,374 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-23 14:24:08,374 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 6 states have internal predecessors, (36), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 44 [2022-11-23 14:24:08,374 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:24:08,382 INFO L225 Difference]: With dead ends: 507 [2022-11-23 14:24:08,382 INFO L226 Difference]: Without dead ends: 317 [2022-11-23 14:24:08,384 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2022-11-23 14:24:08,386 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 165 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 173 mSolverCounterSat, 99 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 193 SdHoareTripleChecker+Invalid, 272 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 99 IncrementalHoareTripleChecker+Valid, 173 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-23 14:24:08,386 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [167 Valid, 193 Invalid, 272 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [99 Valid, 173 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-23 14:24:08,387 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 317 states. [2022-11-23 14:24:08,454 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 317 to 296. [2022-11-23 14:24:08,456 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 296 states, 193 states have (on average 1.2538860103626943) internal successors, (242), 212 states have internal predecessors, (242), 51 states have call successors, (51), 43 states have call predecessors, (51), 51 states have return successors, (79), 53 states have call predecessors, (79), 51 states have call successors, (79) [2022-11-23 14:24:08,459 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 296 states to 296 states and 372 transitions. [2022-11-23 14:24:08,459 INFO L78 Accepts]: Start accepts. Automaton has 296 states and 372 transitions. Word has length 44 [2022-11-23 14:24:08,460 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:24:08,460 INFO L495 AbstractCegarLoop]: Abstraction has 296 states and 372 transitions. [2022-11-23 14:24:08,461 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 6 states have internal predecessors, (36), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-23 14:24:08,461 INFO L276 IsEmpty]: Start isEmpty. Operand 296 states and 372 transitions. [2022-11-23 14:24:08,465 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2022-11-23 14:24:08,466 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:24:08,466 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:24:08,466 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-23 14:24:08,467 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:24:08,467 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:24:08,467 INFO L85 PathProgramCache]: Analyzing trace with hash -1590456974, now seen corresponding path program 1 times [2022-11-23 14:24:08,468 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:24:08,468 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [269045765] [2022-11-23 14:24:08,469 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:24:08,469 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:24:08,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:24:08,563 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-23 14:24:08,564 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:24:08,564 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [269045765] [2022-11-23 14:24:08,564 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [269045765] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:24:08,564 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:24:08,565 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-23 14:24:08,565 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1070023413] [2022-11-23 14:24:08,565 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:24:08,566 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-23 14:24:08,567 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:24:08,567 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-23 14:24:08,567 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-23 14:24:08,568 INFO L87 Difference]: Start difference. First operand 296 states and 372 transitions. Second operand has 4 states, 3 states have (on average 17.666666666666668) internal successors, (53), 4 states have internal predecessors, (53), 4 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) [2022-11-23 14:24:08,722 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:24:08,722 INFO L93 Difference]: Finished difference Result 592 states and 744 transitions. [2022-11-23 14:24:08,723 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-23 14:24:08,723 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 17.666666666666668) internal successors, (53), 4 states have internal predecessors, (53), 4 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) Word has length 79 [2022-11-23 14:24:08,724 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:24:08,727 INFO L225 Difference]: With dead ends: 592 [2022-11-23 14:24:08,728 INFO L226 Difference]: Without dead ends: 255 [2022-11-23 14:24:08,729 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-23 14:24:08,737 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 106 mSDsluCounter, 55 mSDsCounter, 0 mSdLazyCounter, 90 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 106 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 92 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 90 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 14:24:08,740 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [106 Valid, 150 Invalid, 92 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 90 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 14:24:08,743 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 255 states. [2022-11-23 14:24:08,783 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 255 to 255. [2022-11-23 14:24:08,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 255 states, 165 states have (on average 1.2181818181818183) internal successors, (201), 180 states have internal predecessors, (201), 44 states have call successors, (44), 36 states have call predecessors, (44), 45 states have return successors, (66), 47 states have call predecessors, (66), 44 states have call successors, (66) [2022-11-23 14:24:08,787 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 255 states to 255 states and 311 transitions. [2022-11-23 14:24:08,787 INFO L78 Accepts]: Start accepts. Automaton has 255 states and 311 transitions. Word has length 79 [2022-11-23 14:24:08,789 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:24:08,789 INFO L495 AbstractCegarLoop]: Abstraction has 255 states and 311 transitions. [2022-11-23 14:24:08,790 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 17.666666666666668) internal successors, (53), 4 states have internal predecessors, (53), 4 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) [2022-11-23 14:24:08,790 INFO L276 IsEmpty]: Start isEmpty. Operand 255 states and 311 transitions. [2022-11-23 14:24:08,794 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2022-11-23 14:24:08,794 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:24:08,795 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:24:08,795 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-23 14:24:08,795 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:24:08,796 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:24:08,796 INFO L85 PathProgramCache]: Analyzing trace with hash 1878394815, now seen corresponding path program 1 times [2022-11-23 14:24:08,796 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:24:08,796 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1021364725] [2022-11-23 14:24:08,796 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:24:08,797 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:24:08,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:24:09,310 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 7 proven. 9 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-23 14:24:09,310 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:24:09,310 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1021364725] [2022-11-23 14:24:09,311 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1021364725] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 14:24:09,311 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [684556849] [2022-11-23 14:24:09,311 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:24:09,311 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:24:09,311 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 14:24:09,318 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 14:24:09,349 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-23 14:24:09,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:24:09,457 INFO L263 TraceCheckSpWp]: Trace formula consists of 326 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-23 14:24:09,465 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:24:10,086 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 14:24:10,087 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:24:10,087 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [684556849] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:24:10,087 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-23 14:24:10,087 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [11] total 18 [2022-11-23 14:24:10,088 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [472922261] [2022-11-23 14:24:10,088 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:24:10,088 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-23 14:24:10,089 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:24:10,089 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-23 14:24:10,090 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=49, Invalid=257, Unknown=0, NotChecked=0, Total=306 [2022-11-23 14:24:10,090 INFO L87 Difference]: Start difference. First operand 255 states and 311 transitions. Second operand has 9 states, 9 states have (on average 5.888888888888889) internal successors, (53), 8 states have internal predecessors, (53), 6 states have call successors, (11), 4 states have call predecessors, (11), 3 states have return successors, (10), 3 states have call predecessors, (10), 6 states have call successors, (10) [2022-11-23 14:24:10,834 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:24:10,835 INFO L93 Difference]: Finished difference Result 576 states and 714 transitions. [2022-11-23 14:24:10,835 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-23 14:24:10,835 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.888888888888889) internal successors, (53), 8 states have internal predecessors, (53), 6 states have call successors, (11), 4 states have call predecessors, (11), 3 states have return successors, (10), 3 states have call predecessors, (10), 6 states have call successors, (10) Word has length 76 [2022-11-23 14:24:10,836 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:24:10,838 INFO L225 Difference]: With dead ends: 576 [2022-11-23 14:24:10,838 INFO L226 Difference]: Without dead ends: 323 [2022-11-23 14:24:10,839 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 78 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 70 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=102, Invalid=498, Unknown=0, NotChecked=0, Total=600 [2022-11-23 14:24:10,840 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 249 mSDsluCounter, 150 mSDsCounter, 0 mSdLazyCounter, 373 mSolverCounterSat, 107 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 261 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 480 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 107 IncrementalHoareTripleChecker+Valid, 373 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-23 14:24:10,840 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [261 Valid, 207 Invalid, 480 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [107 Valid, 373 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-23 14:24:10,842 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 323 states. [2022-11-23 14:24:10,896 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 323 to 280. [2022-11-23 14:24:10,897 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 280 states, 183 states have (on average 1.2131147540983607) internal successors, (222), 198 states have internal predecessors, (222), 47 states have call successors, (47), 43 states have call predecessors, (47), 49 states have return successors, (69), 48 states have call predecessors, (69), 47 states have call successors, (69) [2022-11-23 14:24:10,899 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 280 states to 280 states and 338 transitions. [2022-11-23 14:24:10,899 INFO L78 Accepts]: Start accepts. Automaton has 280 states and 338 transitions. Word has length 76 [2022-11-23 14:24:10,899 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:24:10,900 INFO L495 AbstractCegarLoop]: Abstraction has 280 states and 338 transitions. [2022-11-23 14:24:10,900 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.888888888888889) internal successors, (53), 8 states have internal predecessors, (53), 6 states have call successors, (11), 4 states have call predecessors, (11), 3 states have return successors, (10), 3 states have call predecessors, (10), 6 states have call successors, (10) [2022-11-23 14:24:10,903 INFO L276 IsEmpty]: Start isEmpty. Operand 280 states and 338 transitions. [2022-11-23 14:24:10,905 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2022-11-23 14:24:10,905 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:24:10,905 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:24:10,921 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-23 14:24:11,110 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:24:11,111 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:24:11,111 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:24:11,111 INFO L85 PathProgramCache]: Analyzing trace with hash -962629696, now seen corresponding path program 1 times [2022-11-23 14:24:11,112 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:24:11,112 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [670839751] [2022-11-23 14:24:11,112 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:24:11,112 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:24:11,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:24:11,448 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 7 proven. 9 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-23 14:24:11,448 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:24:11,448 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [670839751] [2022-11-23 14:24:11,449 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [670839751] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 14:24:11,449 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [919061237] [2022-11-23 14:24:11,449 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:24:11,449 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:24:11,449 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 14:24:11,450 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 14:24:11,460 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-23 14:24:11,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:24:11,565 INFO L263 TraceCheckSpWp]: Trace formula consists of 332 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-23 14:24:11,568 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:24:11,597 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-23 14:24:11,597 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:24:11,597 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [919061237] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:24:11,598 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-23 14:24:11,598 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [11] total 12 [2022-11-23 14:24:11,598 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2146429189] [2022-11-23 14:24:11,598 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:24:11,599 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-23 14:24:11,599 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:24:11,599 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-23 14:24:11,599 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=104, Unknown=0, NotChecked=0, Total=132 [2022-11-23 14:24:11,600 INFO L87 Difference]: Start difference. First operand 280 states and 338 transitions. Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-23 14:24:11,700 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:24:11,700 INFO L93 Difference]: Finished difference Result 544 states and 661 transitions. [2022-11-23 14:24:11,701 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-23 14:24:11,701 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 79 [2022-11-23 14:24:11,701 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:24:11,703 INFO L225 Difference]: With dead ends: 544 [2022-11-23 14:24:11,703 INFO L226 Difference]: Without dead ends: 266 [2022-11-23 14:24:11,704 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 99 GetRequests, 88 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=124, Unknown=0, NotChecked=0, Total=156 [2022-11-23 14:24:11,705 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 54 mSDsluCounter, 126 mSDsCounter, 0 mSdLazyCounter, 49 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 198 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 49 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 14:24:11,705 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 198 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 49 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 14:24:11,706 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 266 states. [2022-11-23 14:24:11,743 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 266 to 250. [2022-11-23 14:24:11,744 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 250 states, 161 states have (on average 1.1987577639751552) internal successors, (193), 175 states have internal predecessors, (193), 43 states have call successors, (43), 39 states have call predecessors, (43), 45 states have return successors, (61), 43 states have call predecessors, (61), 43 states have call successors, (61) [2022-11-23 14:24:11,746 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 250 states to 250 states and 297 transitions. [2022-11-23 14:24:11,746 INFO L78 Accepts]: Start accepts. Automaton has 250 states and 297 transitions. Word has length 79 [2022-11-23 14:24:11,746 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:24:11,747 INFO L495 AbstractCegarLoop]: Abstraction has 250 states and 297 transitions. [2022-11-23 14:24:11,747 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-23 14:24:11,747 INFO L276 IsEmpty]: Start isEmpty. Operand 250 states and 297 transitions. [2022-11-23 14:24:11,748 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2022-11-23 14:24:11,748 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:24:11,749 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:24:11,767 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-23 14:24:11,954 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:24:11,955 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:24:11,955 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:24:11,955 INFO L85 PathProgramCache]: Analyzing trace with hash 1412573353, now seen corresponding path program 1 times [2022-11-23 14:24:11,955 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:24:11,955 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1937188842] [2022-11-23 14:24:11,956 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:24:11,956 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:24:11,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:24:12,371 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 19 proven. 18 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-23 14:24:12,372 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:24:12,372 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1937188842] [2022-11-23 14:24:12,372 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1937188842] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 14:24:12,372 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [664517767] [2022-11-23 14:24:12,372 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:24:12,373 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:24:12,373 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 14:24:12,374 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 14:24:12,401 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-23 14:24:12,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:24:12,488 INFO L263 TraceCheckSpWp]: Trace formula consists of 360 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-23 14:24:12,490 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:24:12,548 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 43 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 14:24:12,548 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:24:12,548 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [664517767] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:24:12,548 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-23 14:24:12,548 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [13] total 15 [2022-11-23 14:24:12,549 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1201799169] [2022-11-23 14:24:12,549 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:24:12,549 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-23 14:24:12,549 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:24:12,550 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-23 14:24:12,550 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2022-11-23 14:24:12,550 INFO L87 Difference]: Start difference. First operand 250 states and 297 transitions. Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 3 states have call successors, (13), 3 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-23 14:24:12,697 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:24:12,697 INFO L93 Difference]: Finished difference Result 487 states and 595 transitions. [2022-11-23 14:24:12,698 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-23 14:24:12,698 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 3 states have call successors, (13), 3 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 2 states have call successors, (12) Word has length 86 [2022-11-23 14:24:12,698 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:24:12,700 INFO L225 Difference]: With dead ends: 487 [2022-11-23 14:24:12,700 INFO L226 Difference]: Without dead ends: 239 [2022-11-23 14:24:12,701 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 104 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 26 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2022-11-23 14:24:12,702 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 52 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 97 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 210 SdHoareTripleChecker+Invalid, 99 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 97 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 14:24:12,702 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 210 Invalid, 99 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 97 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 14:24:12,703 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 239 states. [2022-11-23 14:24:12,736 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 239 to 233. [2022-11-23 14:24:12,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 233 states, 153 states have (on average 1.1830065359477124) internal successors, (181), 167 states have internal predecessors, (181), 40 states have call successors, (40), 36 states have call predecessors, (40), 39 states have return successors, (55), 39 states have call predecessors, (55), 40 states have call successors, (55) [2022-11-23 14:24:12,739 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 233 states to 233 states and 276 transitions. [2022-11-23 14:24:12,739 INFO L78 Accepts]: Start accepts. Automaton has 233 states and 276 transitions. Word has length 86 [2022-11-23 14:24:12,739 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:24:12,739 INFO L495 AbstractCegarLoop]: Abstraction has 233 states and 276 transitions. [2022-11-23 14:24:12,740 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 3 states have call successors, (13), 3 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-23 14:24:12,740 INFO L276 IsEmpty]: Start isEmpty. Operand 233 states and 276 transitions. [2022-11-23 14:24:12,741 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2022-11-23 14:24:12,741 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:24:12,742 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:24:12,752 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-23 14:24:12,947 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2022-11-23 14:24:12,948 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:24:12,948 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:24:12,949 INFO L85 PathProgramCache]: Analyzing trace with hash -1670492553, now seen corresponding path program 1 times [2022-11-23 14:24:12,949 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:24:12,949 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [921566407] [2022-11-23 14:24:12,949 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:24:12,949 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:24:12,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:24:13,345 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 7 proven. 17 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-23 14:24:13,346 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:24:13,346 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [921566407] [2022-11-23 14:24:13,346 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [921566407] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 14:24:13,346 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [418343744] [2022-11-23 14:24:13,346 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:24:13,346 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:24:13,347 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 14:24:13,348 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 14:24:13,380 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-23 14:24:13,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:24:13,467 INFO L263 TraceCheckSpWp]: Trace formula consists of 367 conjuncts, 34 conjunts are in the unsatisfiable core [2022-11-23 14:24:13,475 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:24:14,024 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 19 proven. 21 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-23 14:24:14,024 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 14:24:14,933 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-11-23 14:24:14,933 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [418343744] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 14:24:14,934 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1116624177] [2022-11-23 14:24:14,957 INFO L159 IcfgInterpreter]: Started Sifa with 55 locations of interest [2022-11-23 14:24:14,958 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 14:24:14,962 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 14:24:14,967 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 14:24:14,968 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 14:24:17,937 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 116 for LOIs [2022-11-23 14:24:17,970 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 123 for LOIs [2022-11-23 14:24:19,466 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 121 for LOIs [2022-11-23 14:24:19,825 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 121 for LOIs [2022-11-23 14:24:20,373 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 121 for LOIs [2022-11-23 14:24:20,489 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 43 for LOIs [2022-11-23 14:24:20,496 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 14:24:36,267 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1116624177] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:24:36,267 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-23 14:24:36,267 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [27] imperfect sequences [11, 12, 16] total 61 [2022-11-23 14:24:36,268 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1230172398] [2022-11-23 14:24:36,268 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:24:36,269 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-23 14:24:36,269 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:24:36,269 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-23 14:24:36,271 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=555, Invalid=3105, Unknown=0, NotChecked=0, Total=3660 [2022-11-23 14:24:36,271 INFO L87 Difference]: Start difference. First operand 233 states and 276 transitions. Second operand has 28 states, 22 states have (on average 1.8636363636363635) internal successors, (41), 22 states have internal predecessors, (41), 8 states have call successors, (11), 6 states have call predecessors, (11), 6 states have return successors, (11), 9 states have call predecessors, (11), 8 states have call successors, (11) [2022-11-23 14:24:52,578 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:24:52,578 INFO L93 Difference]: Finished difference Result 722 states and 873 transitions. [2022-11-23 14:24:52,579 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2022-11-23 14:24:52,579 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 22 states have (on average 1.8636363636363635) internal successors, (41), 22 states have internal predecessors, (41), 8 states have call successors, (11), 6 states have call predecessors, (11), 6 states have return successors, (11), 9 states have call predecessors, (11), 8 states have call successors, (11) Word has length 90 [2022-11-23 14:24:52,579 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:24:52,582 INFO L225 Difference]: With dead ends: 722 [2022-11-23 14:24:52,582 INFO L226 Difference]: Without dead ends: 491 [2022-11-23 14:24:52,585 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 311 GetRequests, 219 SyntacticMatches, 9 SemanticMatches, 83 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2526 ImplicationChecksByTransitivity, 29.8s TimeCoverageRelationStatistics Valid=1225, Invalid=5915, Unknown=0, NotChecked=0, Total=7140 [2022-11-23 14:24:52,586 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 248 mSDsluCounter, 406 mSDsCounter, 0 mSdLazyCounter, 1451 mSolverCounterSat, 120 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 251 SdHoareTripleChecker+Valid, 479 SdHoareTripleChecker+Invalid, 1571 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 120 IncrementalHoareTripleChecker+Valid, 1451 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.8s IncrementalHoareTripleChecker+Time [2022-11-23 14:24:52,586 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [251 Valid, 479 Invalid, 1571 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [120 Valid, 1451 Invalid, 0 Unknown, 0 Unchecked, 2.8s Time] [2022-11-23 14:24:52,587 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 491 states. [2022-11-23 14:24:52,670 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 491 to 462. [2022-11-23 14:24:52,671 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 462 states, 310 states have (on average 1.1741935483870967) internal successors, (364), 329 states have internal predecessors, (364), 77 states have call successors, (77), 70 states have call predecessors, (77), 74 states have return successors, (104), 75 states have call predecessors, (104), 77 states have call successors, (104) [2022-11-23 14:24:52,673 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 462 states to 462 states and 545 transitions. [2022-11-23 14:24:52,674 INFO L78 Accepts]: Start accepts. Automaton has 462 states and 545 transitions. Word has length 90 [2022-11-23 14:24:52,676 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:24:52,676 INFO L495 AbstractCegarLoop]: Abstraction has 462 states and 545 transitions. [2022-11-23 14:24:52,676 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 22 states have (on average 1.8636363636363635) internal successors, (41), 22 states have internal predecessors, (41), 8 states have call successors, (11), 6 states have call predecessors, (11), 6 states have return successors, (11), 9 states have call predecessors, (11), 8 states have call successors, (11) [2022-11-23 14:24:52,676 INFO L276 IsEmpty]: Start isEmpty. Operand 462 states and 545 transitions. [2022-11-23 14:24:52,678 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2022-11-23 14:24:52,679 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:24:52,679 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:24:52,690 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2022-11-23 14:24:52,885 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:24:52,885 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:24:52,886 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:24:52,886 INFO L85 PathProgramCache]: Analyzing trace with hash 141961349, now seen corresponding path program 1 times [2022-11-23 14:24:52,886 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:24:52,886 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [42119302] [2022-11-23 14:24:52,886 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:24:52,886 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:24:52,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:24:53,219 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 7 proven. 17 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-23 14:24:53,219 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:24:53,220 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [42119302] [2022-11-23 14:24:53,220 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [42119302] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 14:24:53,220 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1895813143] [2022-11-23 14:24:53,220 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:24:53,220 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:24:53,220 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 14:24:53,221 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 14:24:53,227 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-23 14:24:53,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:24:53,320 INFO L263 TraceCheckSpWp]: Trace formula consists of 373 conjuncts, 27 conjunts are in the unsatisfiable core [2022-11-23 14:24:53,336 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:24:53,487 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 14:24:53,487 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:24:53,488 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1895813143] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:24:53,488 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-23 14:24:53,488 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [11] total 19 [2022-11-23 14:24:53,488 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1453598454] [2022-11-23 14:24:53,488 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:24:53,489 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-23 14:24:53,489 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:24:53,489 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-23 14:24:53,489 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2022-11-23 14:24:53,490 INFO L87 Difference]: Start difference. First operand 462 states and 545 transitions. Second operand has 11 states, 8 states have (on average 8.0) internal successors, (64), 8 states have internal predecessors, (64), 3 states have call successors, (15), 3 states have call predecessors, (15), 6 states have return successors, (14), 6 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-23 14:24:53,928 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:24:53,928 INFO L93 Difference]: Finished difference Result 1122 states and 1376 transitions. [2022-11-23 14:24:53,929 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-23 14:24:53,929 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 8 states have (on average 8.0) internal successors, (64), 8 states have internal predecessors, (64), 3 states have call successors, (15), 3 states have call predecessors, (15), 6 states have return successors, (14), 6 states have call predecessors, (14), 3 states have call successors, (14) Word has length 93 [2022-11-23 14:24:53,930 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:24:53,934 INFO L225 Difference]: With dead ends: 1122 [2022-11-23 14:24:53,934 INFO L226 Difference]: Without dead ends: 735 [2022-11-23 14:24:53,936 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 95 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 101 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=88, Invalid=614, Unknown=0, NotChecked=0, Total=702 [2022-11-23 14:24:53,936 INFO L413 NwaCegarLoop]: 122 mSDtfsCounter, 54 mSDsluCounter, 740 mSDsCounter, 0 mSdLazyCounter, 464 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 862 SdHoareTripleChecker+Invalid, 470 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 464 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 14:24:53,937 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 862 Invalid, 470 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 464 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 14:24:53,938 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 735 states. [2022-11-23 14:24:54,030 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 735 to 713. [2022-11-23 14:24:54,032 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 713 states, 484 states have (on average 1.1632231404958677) internal successors, (563), 506 states have internal predecessors, (563), 116 states have call successors, (116), 107 states have call predecessors, (116), 112 states have return successors, (177), 115 states have call predecessors, (177), 116 states have call successors, (177) [2022-11-23 14:24:54,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 713 states to 713 states and 856 transitions. [2022-11-23 14:24:54,036 INFO L78 Accepts]: Start accepts. Automaton has 713 states and 856 transitions. Word has length 93 [2022-11-23 14:24:54,037 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:24:54,037 INFO L495 AbstractCegarLoop]: Abstraction has 713 states and 856 transitions. [2022-11-23 14:24:54,038 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 8 states have (on average 8.0) internal successors, (64), 8 states have internal predecessors, (64), 3 states have call successors, (15), 3 states have call predecessors, (15), 6 states have return successors, (14), 6 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-23 14:24:54,038 INFO L276 IsEmpty]: Start isEmpty. Operand 713 states and 856 transitions. [2022-11-23 14:24:54,040 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2022-11-23 14:24:54,040 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:24:54,040 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:24:54,051 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-23 14:24:54,246 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:24:54,247 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:24:54,247 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:24:54,247 INFO L85 PathProgramCache]: Analyzing trace with hash 305319785, now seen corresponding path program 1 times [2022-11-23 14:24:54,247 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:24:54,247 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1357936309] [2022-11-23 14:24:54,247 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:24:54,248 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:24:54,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:24:54,569 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 7 proven. 17 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-23 14:24:54,569 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:24:54,569 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1357936309] [2022-11-23 14:24:54,569 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1357936309] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 14:24:54,570 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1093340006] [2022-11-23 14:24:54,570 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:24:54,570 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:24:54,570 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 14:24:54,571 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 14:24:54,597 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-23 14:24:54,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:24:54,684 INFO L263 TraceCheckSpWp]: Trace formula consists of 379 conjuncts, 25 conjunts are in the unsatisfiable core [2022-11-23 14:24:54,687 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:24:54,792 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-11-23 14:24:54,792 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:24:54,792 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1093340006] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:24:54,792 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-23 14:24:54,792 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [11] total 17 [2022-11-23 14:24:54,792 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1837116480] [2022-11-23 14:24:54,793 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:24:54,793 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-23 14:24:54,793 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:24:54,793 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-23 14:24:54,794 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=228, Unknown=0, NotChecked=0, Total=272 [2022-11-23 14:24:54,794 INFO L87 Difference]: Start difference. First operand 713 states and 856 transitions. Second operand has 11 states, 8 states have (on average 6.75) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (13), 2 states have call predecessors, (13), 5 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) [2022-11-23 14:24:55,250 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:24:55,251 INFO L93 Difference]: Finished difference Result 1339 states and 1642 transitions. [2022-11-23 14:24:55,252 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-11-23 14:24:55,252 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 8 states have (on average 6.75) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (13), 2 states have call predecessors, (13), 5 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) Word has length 96 [2022-11-23 14:24:55,252 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:24:55,253 INFO L225 Difference]: With dead ends: 1339 [2022-11-23 14:24:55,253 INFO L226 Difference]: Without dead ends: 0 [2022-11-23 14:24:55,256 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 127 GetRequests, 103 SyntacticMatches, 0 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 98 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=100, Invalid=550, Unknown=0, NotChecked=0, Total=650 [2022-11-23 14:24:55,257 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 60 mSDsluCounter, 442 mSDsCounter, 0 mSdLazyCounter, 470 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 523 SdHoareTripleChecker+Invalid, 477 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 470 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-23 14:24:55,258 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [67 Valid, 523 Invalid, 477 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 470 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-23 14:24:55,258 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-23 14:24:55,259 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-23 14:24:55,259 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 14:24:55,259 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-23 14:24:55,259 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 96 [2022-11-23 14:24:55,259 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:24:55,260 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-23 14:24:55,260 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 8 states have (on average 6.75) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (13), 2 states have call predecessors, (13), 5 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) [2022-11-23 14:24:55,260 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-23 14:24:55,260 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-23 14:24:55,263 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-23 14:24:55,270 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2022-11-23 14:24:55,470 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:24:55,473 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-23 14:25:19,946 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 521 528) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= 0 ~systemActive~0)) [2022-11-23 14:25:19,946 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 521 528) no Hoare annotation was computed. [2022-11-23 14:25:19,946 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 411 417) no Hoare annotation was computed. [2022-11-23 14:25:19,946 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 411 417) the Hoare annotation is: true [2022-11-23 14:25:19,947 INFO L895 garLoopResultBuilder]: At program point L459(line 459) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-23 14:25:19,947 INFO L895 garLoopResultBuilder]: At program point L455(line 455) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-23 14:25:19,947 INFO L899 garLoopResultBuilder]: For program point L453(lines 453 461) no Hoare annotation was computed. [2022-11-23 14:25:19,948 INFO L895 garLoopResultBuilder]: At program point L449(lines 449 466) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) (= ~pumpRunning~0 0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-23 14:25:19,948 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 445 469) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) (= ~pumpRunning~0 0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-23 14:25:19,948 INFO L895 garLoopResultBuilder]: At program point L464(line 464) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))) (or (not .cse1) (= ~pumpRunning~0 0) .cse0 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-23 14:25:19,948 INFO L899 garLoopResultBuilder]: For program point L464-1(lines 445 469) no Hoare annotation was computed. [2022-11-23 14:25:19,948 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 445 469) no Hoare annotation was computed. [2022-11-23 14:25:19,949 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 237 248) the Hoare annotation is: (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~methaneLevelCritical~0)| 0)) (.cse1 (= ~methaneLevelCritical~0 0))) (and (or (not .cse0) .cse1 .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 0) .cse2 .cse0 (not .cse1)))) [2022-11-23 14:25:19,949 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 237 248) no Hoare annotation was computed. [2022-11-23 14:25:19,949 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 249 257) the Hoare annotation is: true [2022-11-23 14:25:19,949 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 249 257) no Hoare annotation was computed. [2022-11-23 14:25:19,950 INFO L895 garLoopResultBuilder]: At program point L481(line 481) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not .cse1))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (and (not (< 0 ~waterLevel~0)) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (not (= |timeShift_processEnvironment_~tmp~5#1| 0)) (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0))) (or (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (and .cse2 (= ~methAndRunningLastTime~0 0))) (or .cse2 (not (= 0 ~systemActive~0)))))) [2022-11-23 14:25:19,950 INFO L895 garLoopResultBuilder]: At program point L477(line 477) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= |old(~pumpRunning~0)| 0))) (and (or (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (and .cse1 (= ~methAndRunningLastTime~0 0) (not (= ~pumpRunning~0 0)))) (or .cse0 (and .cse1 (or (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (and (not (< 0 ~waterLevel~0)) (<= ~waterLevel~0 |old(~waterLevel~0)|)))) .cse2) (or (not .cse2) (not (= 0 ~systemActive~0))))) [2022-11-23 14:25:19,950 INFO L899 garLoopResultBuilder]: For program point L477-1(line 477) no Hoare annotation was computed. [2022-11-23 14:25:19,950 INFO L899 garLoopResultBuilder]: For program point L188(lines 188 198) no Hoare annotation was computed. [2022-11-23 14:25:19,951 INFO L895 garLoopResultBuilder]: At program point L184(lines 184 201) the Hoare annotation is: (let ((.cse47 (= |old(~pumpRunning~0)| 0))) (let ((.cse46 (= ~methaneLevelCritical~0 0)) (.cse54 (select |#memory_int| 1)) (.cse50 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| ~methaneLevelCritical~0)) (.cse1 (not .cse47)) (.cse44 (= ~pumpRunning~0 0)) (.cse48 (= 1 ~systemActive~0)) (.cse52 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse49 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse51 (and .cse1 .cse44 .cse48 .cse52 .cse49 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0))) (.cse53 (and .cse44 (<= ~waterLevel~0 1) .cse49 .cse50)) (.cse45 (= ~methAndRunningLastTime~0 0)) (.cse0 (not (= (select |#length| 12) 25))) (.cse2 (not (= (select .cse54 0) 48))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 9 (select |#length| 5)))) (.cse7 (not (= 30 (select |#length| 7)))) (.cse8 (not (= 31 (select |#length| 2)))) (.cse9 (not (= (select |#valid| 12) 1))) (.cse10 (not (= 2 (select |#length| 1)))) (.cse11 (not (= 9 (select |#length| 14)))) (.cse12 (not .cse48)) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse17 (not (= ~head~0.offset 0))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse27 (not .cse46)) (.cse28 (not (= (select .cse54 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse37 (not (= (select |#valid| 14) 1))) (.cse38 (not (= (select |#valid| 13) 1))) (.cse39 (not (= 30 (select |#length| 4)))) (.cse40 (not (= (select |#valid| 2) 1))) (.cse41 (not (= (select |#valid| 9) 1))) (.cse42 (not (= ~head~0.base 0))) (.cse43 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (not (= |old(~waterLevel~0)| 1)) .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse1 .cse44 (not (= 0 ~systemActive~0))) (or .cse3 .cse5 .cse45 .cse12 .cse17 .cse27 .cse33 (not (<= 0 |#StackHeapBarrier|)) .cse42 .cse43) (or .cse46 .cse12 .cse47 (and .cse1 .cse44 .cse48 .cse49 .cse50)) (or .cse12 .cse47 .cse51 (and (not (= |timeShift_processEnvironment_~tmp~5#1| 0)) .cse52) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse52 .cse49 .cse50)) (or .cse5 .cse45 .cse12 .cse53 .cse27 .cse51) (or .cse1 .cse5 .cse12 .cse53 (and .cse45 (<= 2 ~waterLevel~0) .cse49 .cse50)) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< |old(~waterLevel~0)| 2) .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43))))) [2022-11-23 14:25:19,952 INFO L895 garLoopResultBuilder]: At program point L184-1(lines 176 204) the Hoare annotation is: (let ((.cse47 (= ~methaneLevelCritical~0 0)) (.cse53 (= |old(~pumpRunning~0)| 0))) (let ((.cse57 (select |#memory_int| 1)) (.cse1 (not .cse53)) (.cse27 (not .cse47)) (.cse55 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse54 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse44 (= ~pumpRunning~0 0)) (.cse45 (= ~methAndRunningLastTime~0 0)) (.cse48 (<= 2 ~waterLevel~0)) (.cse56 (= 1 ~systemActive~0)) (.cse49 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse50 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| ~methaneLevelCritical~0))) (let ((.cse51 (and .cse45 .cse48 .cse56 .cse49 .cse50)) (.cse52 (and .cse54 .cse44 .cse45 (<= ~waterLevel~0 1) .cse56 .cse49 .cse50)) (.cse46 (and .cse1 .cse44 .cse45 .cse56 .cse27 .cse55 .cse49 .cse50)) (.cse0 (not (= (select |#length| 12) 25))) (.cse2 (not (= (select .cse57 0) 48))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 9 (select |#length| 5)))) (.cse7 (not (= 30 (select |#length| 7)))) (.cse8 (not (= 31 (select |#length| 2)))) (.cse9 (not (= (select |#valid| 12) 1))) (.cse10 (not (= 2 (select |#length| 1)))) (.cse11 (not (= 9 (select |#length| 14)))) (.cse12 (not .cse56)) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse17 (not (= ~head~0.offset 0))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse28 (not (= (select .cse57 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse37 (not (= (select |#valid| 14) 1))) (.cse38 (not (= (select |#valid| 13) 1))) (.cse39 (not (= 30 (select |#length| 4)))) (.cse40 (not (= (select |#valid| 2) 1))) (.cse41 (not (= (select |#valid| 9) 1))) (.cse42 (not (= ~head~0.base 0))) (.cse43 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (not (= |old(~waterLevel~0)| 1)) .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse1 (not (= 0 ~systemActive~0)) (and .cse44 .cse45)) (or .cse5 .cse46 .cse47 .cse12 (and (not .cse44) .cse48 (= ~pumpRunning~0 |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1|) .cse49 .cse50) .cse51 .cse52) (or .cse1 .cse5 .cse12 .cse27 .cse51 .cse52) (or .cse46 .cse47 .cse12 .cse53) (or .cse46 .cse12 (and .cse54 .cse45 .cse55 .cse49 .cse50) .cse53 (and .cse1 .cse44 .cse45 .cse56 .cse55 .cse49 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0))) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< |old(~waterLevel~0)| 2) .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43))))) [2022-11-23 14:25:19,953 INFO L895 garLoopResultBuilder]: At program point L490(line 490) the Hoare annotation is: (let ((.cse44 (select |#memory_int| 1))) (let ((.cse2 (= |old(~pumpRunning~0)| 0)) (.cse3 (not (= (select |#length| 12) 25))) (.cse4 (not (= (select .cse44 0) 48))) (.cse5 (not (= |#NULL.offset| 0))) (.cse6 (not (= 9 (select |#length| 11)))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (= 9 (select |#length| 5)))) (.cse8 (not (= 30 (select |#length| 7)))) (.cse9 (not (= 31 (select |#length| 2)))) (.cse10 (not (= (select |#valid| 12) 1))) (.cse11 (not (= 2 (select |#length| 1)))) (.cse12 (not (= 9 (select |#length| 14)))) (.cse1 (not (= 1 ~systemActive~0))) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse17 (not (= ~head~0.offset 0))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse27 (not (= ~methaneLevelCritical~0 0))) (.cse28 (not (= (select .cse44 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse37 (not (= (select |#valid| 14) 1))) (.cse38 (not (= (select |#valid| 13) 1))) (.cse39 (not (= 30 (select |#length| 4)))) (.cse40 (not (= (select |#valid| 2) 1))) (.cse41 (not (= (select |#valid| 9) 1))) (.cse42 (not (= ~head~0.base 0))) (.cse43 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse6 .cse0 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or (not .cse2) (not (= 0 ~systemActive~0))) (or .cse3 .cse4 .cse5 .cse6 .cse0 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse1 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< |old(~waterLevel~0)| 2) .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43)))) [2022-11-23 14:25:19,954 INFO L895 garLoopResultBuilder]: At program point L490-1(lines 471 495) the Hoare annotation is: (let ((.cse51 (= |old(~pumpRunning~0)| 0))) (let ((.cse49 (= ~methaneLevelCritical~0 0)) (.cse53 (select |#memory_int| 1)) (.cse1 (not .cse51)) (.cse48 (= ~pumpRunning~0 0)) (.cse50 (= 1 ~systemActive~0)) (.cse52 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse46 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse44 (= ~methAndRunningLastTime~0 0)) (.cse47 (and .cse1 .cse48 .cse50 .cse52 .cse46)) (.cse45 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (= (select |#length| 12) 25))) (.cse2 (not (= (select .cse53 0) 48))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 9 (select |#length| 5)))) (.cse7 (not (= 30 (select |#length| 7)))) (.cse8 (not (= 31 (select |#length| 2)))) (.cse9 (not (= (select |#valid| 12) 1))) (.cse10 (not (= 2 (select |#length| 1)))) (.cse11 (not (= 9 (select |#length| 14)))) (.cse12 (not .cse50)) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse17 (not (= ~head~0.offset 0))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse27 (not .cse49)) (.cse28 (not (= (select .cse53 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse37 (not (= (select |#valid| 14) 1))) (.cse38 (not (= (select |#valid| 13) 1))) (.cse39 (not (= 30 (select |#length| 4)))) (.cse40 (not (= (select |#valid| 2) 1))) (.cse41 (not (= (select |#valid| 9) 1))) (.cse42 (not (= ~head~0.base 0))) (.cse43 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (not (= |old(~waterLevel~0)| 1)) .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse3 .cse5 .cse44 .cse12 .cse17 .cse27 .cse33 (not (<= 0 |#StackHeapBarrier|)) .cse42 .cse43) (or (and .cse45 .cse44 .cse46) .cse5 .cse12 .cse47 (and .cse48 (<= ~waterLevel~0 1) .cse46) (and .cse44 (<= 2 ~waterLevel~0) .cse46)) (or .cse49 .cse12 (and .cse1 .cse48 .cse50 .cse46) .cse51) (or .cse12 .cse51 .cse47 (and .cse45 .cse52 .cse46)) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< |old(~waterLevel~0)| 2) .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse1 (not (= 0 ~systemActive~0))))))) [2022-11-23 14:25:19,954 INFO L899 garLoopResultBuilder]: For program point L391-1(lines 390 409) no Hoare annotation was computed. [2022-11-23 14:25:19,955 INFO L895 garLoopResultBuilder]: At program point L160(line 160) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~pumpRunning~0)| 0))) (and (or .cse0 .cse1) (or (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0) (or (not .cse1) (not (= 0 ~systemActive~0))))) [2022-11-23 14:25:19,955 INFO L899 garLoopResultBuilder]: For program point L189(lines 189 195) no Hoare annotation was computed. [2022-11-23 14:25:19,955 INFO L899 garLoopResultBuilder]: For program point L479(lines 479 487) no Hoare annotation was computed. [2022-11-23 14:25:19,955 INFO L899 garLoopResultBuilder]: For program point L475(lines 475 492) no Hoare annotation was computed. [2022-11-23 14:25:19,956 INFO L895 garLoopResultBuilder]: At program point L182(line 182) the Hoare annotation is: (let ((.cse51 (= |old(~pumpRunning~0)| 0))) (let ((.cse49 (= ~methaneLevelCritical~0 0)) (.cse53 (select |#memory_int| 1)) (.cse1 (not .cse51)) (.cse44 (= ~pumpRunning~0 0)) (.cse50 (= 1 ~systemActive~0)) (.cse52 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse47 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse45 (= ~methAndRunningLastTime~0 0)) (.cse48 (and .cse1 .cse44 .cse50 .cse52 .cse47)) (.cse46 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (= (select |#length| 12) 25))) (.cse2 (not (= (select .cse53 0) 48))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 9 (select |#length| 5)))) (.cse7 (not (= 30 (select |#length| 7)))) (.cse8 (not (= 31 (select |#length| 2)))) (.cse9 (not (= (select |#valid| 12) 1))) (.cse10 (not (= 2 (select |#length| 1)))) (.cse11 (not (= 9 (select |#length| 14)))) (.cse12 (not .cse50)) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse17 (not (= ~head~0.offset 0))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse27 (not .cse49)) (.cse28 (not (= (select .cse53 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse37 (not (= (select |#valid| 14) 1))) (.cse38 (not (= (select |#valid| 13) 1))) (.cse39 (not (= 30 (select |#length| 4)))) (.cse40 (not (= (select |#valid| 2) 1))) (.cse41 (not (= (select |#valid| 9) 1))) (.cse42 (not (= ~head~0.base 0))) (.cse43 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (not (= |old(~waterLevel~0)| 1)) .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse1 .cse44 (not (= 0 ~systemActive~0))) (or .cse3 .cse5 .cse45 .cse12 .cse17 .cse27 .cse33 (not (<= 0 |#StackHeapBarrier|)) .cse42 .cse43) (or (and .cse46 .cse45 .cse47) .cse5 .cse12 .cse48 (and .cse44 (<= ~waterLevel~0 1) .cse47) (and .cse45 (<= 2 ~waterLevel~0) .cse47)) (or .cse49 .cse12 (and .cse1 .cse44 .cse50 .cse47) .cse51) (or .cse12 .cse51 .cse48 (and .cse46 .cse52 .cse47)) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< |old(~waterLevel~0)| 2) .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43))))) [2022-11-23 14:25:19,956 INFO L899 garLoopResultBuilder]: For program point L182-1(line 182) no Hoare annotation was computed. [2022-11-23 14:25:19,957 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 387 410) the Hoare annotation is: (let ((.cse49 (select |#memory_int| 1)) (.cse45 (= |old(~pumpRunning~0)| 0))) (let ((.cse44 (not (= 0 ~systemActive~0))) (.cse46 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse48 (= ~methAndRunningLastTime~0 0)) (.cse47 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse0 (not (= (select |#length| 12) 25))) (.cse1 (not .cse45)) (.cse2 (not (= (select .cse49 0) 48))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 9 (select |#length| 5)))) (.cse7 (not (= 30 (select |#length| 7)))) (.cse8 (not (= 31 (select |#length| 2)))) (.cse9 (not (= (select |#valid| 12) 1))) (.cse10 (not (= 2 (select |#length| 1)))) (.cse11 (not (= 9 (select |#length| 14)))) (.cse12 (not (= 1 ~systemActive~0))) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse17 (not (= ~head~0.offset 0))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse27 (not (= ~methaneLevelCritical~0 0))) (.cse28 (not (= (select .cse49 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse37 (not (= (select |#valid| 14) 1))) (.cse38 (not (= (select |#valid| 13) 1))) (.cse39 (not (= 30 (select |#length| 4)))) (.cse40 (not (= (select |#valid| 2) 1))) (.cse41 (not (= (select |#valid| 9) 1))) (.cse42 (not (= ~head~0.base 0))) (.cse43 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (not (= |old(~waterLevel~0)| 1)) .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse1 (= ~pumpRunning~0 0) .cse44) (or .cse12 .cse45 (and .cse46 .cse47)) (or .cse1 .cse5 .cse48 .cse44) (or (and .cse46 .cse48 .cse47) .cse5 .cse12) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< |old(~waterLevel~0)| 2) .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43)))) [2022-11-23 14:25:19,957 INFO L899 garLoopResultBuilder]: For program point L398-1(lines 398 404) no Hoare annotation was computed. [2022-11-23 14:25:19,957 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 387 410) no Hoare annotation was computed. [2022-11-23 14:25:19,958 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 160) no Hoare annotation was computed. [2022-11-23 14:25:19,958 INFO L895 garLoopResultBuilder]: At program point L485(line 485) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= |old(~pumpRunning~0)| 0))) (and (or (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (and .cse1 (= ~methAndRunningLastTime~0 0) (not (= ~pumpRunning~0 0)))) (or (= ~methaneLevelCritical~0 0) .cse0 .cse2) (or .cse0 .cse2 (and .cse1 (or (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (and (not (< 0 ~waterLevel~0)) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0))) (or (not .cse2) (not (= 0 ~systemActive~0))))) [2022-11-23 14:25:19,958 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-11-23 14:25:19,958 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-11-23 14:25:19,959 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-11-23 14:25:19,959 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-11-23 14:25:19,959 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-11-23 14:25:19,959 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-11-23 14:25:19,959 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-11-23 14:25:19,959 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-11-23 14:25:19,960 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-11-23 14:25:19,960 INFO L899 garLoopResultBuilder]: For program point L345(lines 345 351) no Hoare annotation was computed. [2022-11-23 14:25:19,960 INFO L899 garLoopResultBuilder]: For program point L345-1(lines 345 351) no Hoare annotation was computed. [2022-11-23 14:25:19,960 INFO L895 garLoopResultBuilder]: At program point L370(lines 325 372) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse1 (= 1 ~systemActive~0)) (.cse3 (not .cse5)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (not .cse0) .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse5)))) [2022-11-23 14:25:19,961 INFO L895 garLoopResultBuilder]: At program point L337(line 337) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse1 (= 1 ~systemActive~0)) (.cse3 (not .cse5)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (not .cse0) .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse5)))) [2022-11-23 14:25:19,961 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-23 14:25:19,961 INFO L899 garLoopResultBuilder]: For program point L627(lines 627 633) no Hoare annotation was computed. [2022-11-23 14:25:19,961 INFO L895 garLoopResultBuilder]: At program point L627-1(lines 627 633) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (not (= 0 ~systemActive~0))) (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1))) [2022-11-23 14:25:19,961 INFO L899 garLoopResultBuilder]: For program point L326(lines 325 372) no Hoare annotation was computed. [2022-11-23 14:25:19,961 INFO L899 garLoopResultBuilder]: For program point L355(lines 355 368) no Hoare annotation was computed. [2022-11-23 14:25:19,962 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-23 14:25:19,962 INFO L895 garLoopResultBuilder]: At program point L347(line 347) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse1 (= 1 ~systemActive~0)) (.cse3 (not .cse5)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (not .cse0) .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse5)))) [2022-11-23 14:25:19,962 INFO L902 garLoopResultBuilder]: At program point L376(lines 315 380) the Hoare annotation is: true [2022-11-23 14:25:19,962 INFO L899 garLoopResultBuilder]: For program point L335(lines 335 341) no Hoare annotation was computed. [2022-11-23 14:25:19,962 INFO L899 garLoopResultBuilder]: For program point L335-1(lines 335 341) no Hoare annotation was computed. [2022-11-23 14:25:19,963 INFO L895 garLoopResultBuilder]: At program point L629(line 629) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2022-11-23 14:25:19,963 INFO L895 garLoopResultBuilder]: At program point L373(lines 324 374) the Hoare annotation is: false [2022-11-23 14:25:19,964 INFO L895 garLoopResultBuilder]: At program point L142(lines 142 149) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (and (= (select |#length| 15) 25) (= 9 (select |#length| 5)) (= (select |#length| 9) 21) (= 30 (select |#length| 7)) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_main_~tmp~0#1|) (= ~methAndRunningLastTime~0 0) (= (select |#valid| 9) 1) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_valid_product_~retValue_acc~10#1|) (= (select |#length| 12) 25) (= (select |#valid| 11) 1) (= ~methaneLevelCritical~0 0) (= 30 (select |#length| 4)) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~10#1|) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= 2 (select |#length| 1)) (= (select |#length| 8) 9) (= (select |#valid| 3) 1) (= (select |#valid| 7) 1) (= 30 (select |#length| 13)) (= 1 ~systemActive~0) (= 30 (select |#length| 10)) (= (select |#valid| 12) 1) (= (select |#valid| 4) 1) (= (select |#valid| 1) 1) (= (select |#length| 6) 21) (= (select |#valid| 14) 1) (= 9 (select |#length| 14)) (= (select |#valid| 0) 0) (= ~head~0.base 0) (= (select |#valid| 2) 1) (= |#NULL.offset| 0) (= 9 (select |#length| 11)) (= ~waterLevel~0 1) (= (select .cse0 0) 48) (= (select |#valid| 6) 1) (= (select .cse0 1) 0) (= (select |#valid| 10) 1) (= (select |#valid| 8) 1) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))) [2022-11-23 14:25:19,964 INFO L902 garLoopResultBuilder]: At program point L142-2(lines 142 149) the Hoare annotation is: true [2022-11-23 14:25:19,964 INFO L899 garLoopResultBuilder]: For program point L361(lines 361 367) no Hoare annotation was computed. [2022-11-23 14:25:19,964 INFO L895 garLoopResultBuilder]: At program point L361-2(lines 355 368) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse3 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not .cse4))) (or (and (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2) (and .cse3 .cse1 .cse4) (and (not .cse3) .cse0 .cse1 .cse2)))) [2022-11-23 14:25:19,964 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 419 443) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) (= ~pumpRunning~0 0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-23 14:25:19,965 INFO L895 garLoopResultBuilder]: At program point L438(line 438) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-23 14:25:19,965 INFO L899 garLoopResultBuilder]: For program point L438-1(lines 419 443) no Hoare annotation was computed. [2022-11-23 14:25:19,966 INFO L895 garLoopResultBuilder]: At program point L509(line 509) the Hoare annotation is: (let ((.cse4 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not .cse4)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (let ((.cse0 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= (select .cse0 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) .cse1 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse2 (not (= (select .cse0 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~7#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 1)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) .cse3 (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) (or .cse1 .cse4 .cse2) (or .cse5 .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 1)) .cse3) (or .cse5 .cse1 (not (<= ~waterLevel~0 1)) .cse3)))) [2022-11-23 14:25:19,967 INFO L895 garLoopResultBuilder]: At program point L509-1(line 509) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not .cse1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2) (let ((.cse3 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= (select .cse3 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (and (<= |processEnvironment__wrappee__highWaterSensor_activatePump_#t~ret19#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~7#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 1) (<= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0) (<= 0 |processEnvironment__wrappee__highWaterSensor_activatePump_#t~ret19#1|) (<= 0 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) .cse0 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse2 (not (= (select .cse3 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) .cse4 (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) (or .cse5 .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 1)) .cse4) (or .cse5 .cse0 (not (<= ~waterLevel~0 1)) .cse4)))) [2022-11-23 14:25:19,967 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 419 443) no Hoare annotation was computed. [2022-11-23 14:25:19,968 INFO L895 garLoopResultBuilder]: At program point L433(line 433) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)) .cse3) (let ((.cse4 (select |#memory_int| 1))) (or (not (= ~waterLevel~0 1)) (not (= (select |#length| 12) 25)) (not (= (select .cse4 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) .cse0 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse2 (not (= (select .cse4 1) 0)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~3#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~7#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~3#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) .cse3 (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))))) [2022-11-23 14:25:19,969 INFO L899 garLoopResultBuilder]: For program point L427(lines 427 435) no Hoare annotation was computed. [2022-11-23 14:25:19,969 INFO L895 garLoopResultBuilder]: At program point L423(lines 423 440) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~pumpRunning~0)| 0))) (and (or (not .cse0) (= ~pumpRunning~0 0) .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-23 14:25:19,969 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 225 236) no Hoare annotation was computed. [2022-11-23 14:25:19,970 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 225 236) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (let ((.cse4 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) (not (= (select .cse4 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not .cse0) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) .cse2 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not .cse1) (not (= (select .cse4 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (= |old(~waterLevel~0)| ~waterLevel~0) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) .cse5 (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) (or .cse2 .cse3 .cse5))) [2022-11-23 14:25:19,970 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 529 539) the Hoare annotation is: true [2022-11-23 14:25:19,970 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 529 539) no Hoare annotation was computed. [2022-11-23 14:25:19,970 INFO L902 garLoopResultBuilder]: At program point L534(line 534) the Hoare annotation is: true [2022-11-23 14:25:19,971 INFO L899 garLoopResultBuilder]: For program point L534-1(line 534) no Hoare annotation was computed. [2022-11-23 14:25:19,974 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:25:19,977 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-23 14:25:20,064 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 02:25:20 BoogieIcfgContainer [2022-11-23 14:25:20,064 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-23 14:25:20,065 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-23 14:25:20,065 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-23 14:25:20,066 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-23 14:25:20,066 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:24:06" (3/4) ... [2022-11-23 14:25:20,083 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-23 14:25:20,090 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-23 14:25:20,090 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-23 14:25:20,090 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-23 14:25:20,090 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-23 14:25:20,090 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-23 14:25:20,090 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-23 14:25:20,091 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 14:25:20,091 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-23 14:25:20,091 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-23 14:25:20,091 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-23 14:25:20,108 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2022-11-23 14:25:20,108 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 13 nodes and edges [2022-11-23 14:25:20,109 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 6 nodes and edges [2022-11-23 14:25:20,109 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-23 14:25:20,110 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-23 14:25:20,142 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && pumpRunning == 0) && \result == tmp) && methAndRunningLastTime == 0) && \valid[9] == 1) && \result == retValue_acc) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && 1 == retValue_acc) && 31 == unknown-#length-unknown[2]) && head == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && 30 == unknown-#length-unknown[13]) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[1][0] == 48) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 [2022-11-23 14:25:20,143 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && ((!(1 == systemActive) || \old(pumpRunning) == 0) || (pumpRunning == \old(pumpRunning) && waterLevel <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(0 == systemActive))) && ((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && waterLevel <= \old(waterLevel)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) [2022-11-23 14:25:20,145 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && (((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && waterLevel <= \old(waterLevel)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || ((methAndRunningLastTime == 0 && 2 <= waterLevel) && waterLevel <= \old(waterLevel)))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && waterLevel <= \old(waterLevel))) || \old(pumpRunning) == 0)) && (((!(1 == systemActive) || \old(pumpRunning) == 0) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-23 14:25:20,145 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) [2022-11-23 14:25:20,147 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && (((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || \old(pumpRunning) == 0) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && ((((!(1 == systemActive) || \old(pumpRunning) == 0) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == 0)) || (!(tmp == 0) && tmp == methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || (((methAndRunningLastTime == 0 && 2 <= waterLevel) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) [2022-11-23 14:25:20,147 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) [2022-11-23 14:25:20,147 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || (pumpRunning == 0 && methAndRunningLastTime == 0))) && ((((((!(\old(methAndRunningLastTime) == 0) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((!(pumpRunning == 0) && 2 <= waterLevel) && pumpRunning == tmp___0) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || ((((methAndRunningLastTime == 0 && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((methAndRunningLastTime == 0 && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && ((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical) || methaneLevelCritical == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0)) && (((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || \old(pumpRunning) == 0) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == 0))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) [2022-11-23 14:25:20,148 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || ((((((((aux-isMethaneAlarm()-aux <= 0 && retValue_acc == tmp___0) && tmp == \result) && \result == tmp) && retValue_acc == \result) && tmp___0 == 1) && tmp <= 0) && 0 <= aux-isMethaneAlarm()-aux) && 0 <= \result)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(methAndRunningLastTime == 0)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && tmp == 1)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) || !(methAndRunningLastTime == 0)) [2022-11-23 14:25:20,150 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || \old(pumpRunning) == 0) && (!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-23 14:25:20,207 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/witness.graphml [2022-11-23 14:25:20,208 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-23 14:25:20,208 INFO L158 Benchmark]: Toolchain (without parser) took 75420.67ms. Allocated memory was 178.3MB in the beginning and 448.8MB in the end (delta: 270.5MB). Free memory was 146.5MB in the beginning and 291.5MB in the end (delta: -145.0MB). Peak memory consumption was 126.6MB. Max. memory is 16.1GB. [2022-11-23 14:25:20,209 INFO L158 Benchmark]: CDTParser took 0.29ms. Allocated memory is still 127.9MB. Free memory was 70.2MB in the beginning and 70.1MB in the end (delta: 117.6kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-23 14:25:20,210 INFO L158 Benchmark]: CACSL2BoogieTranslator took 581.00ms. Allocated memory is still 178.3MB. Free memory was 145.7MB in the beginning and 127.0MB in the end (delta: 18.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-23 14:25:20,210 INFO L158 Benchmark]: Boogie Procedure Inliner took 70.71ms. Allocated memory is still 178.3MB. Free memory was 127.0MB in the beginning and 124.5MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-23 14:25:20,210 INFO L158 Benchmark]: Boogie Preprocessor took 38.24ms. Allocated memory is still 178.3MB. Free memory was 124.5MB in the beginning and 122.8MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-23 14:25:20,211 INFO L158 Benchmark]: RCFGBuilder took 733.12ms. Allocated memory is still 178.3MB. Free memory was 122.8MB in the beginning and 95.6MB in the end (delta: 27.2MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. [2022-11-23 14:25:20,212 INFO L158 Benchmark]: TraceAbstraction took 73844.88ms. Allocated memory was 178.3MB in the beginning and 448.8MB in the end (delta: 270.5MB). Free memory was 95.2MB in the beginning and 297.8MB in the end (delta: -202.7MB). Peak memory consumption was 225.1MB. Max. memory is 16.1GB. [2022-11-23 14:25:20,212 INFO L158 Benchmark]: Witness Printer took 142.50ms. Allocated memory is still 448.8MB. Free memory was 297.8MB in the beginning and 291.5MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-23 14:25:20,219 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29ms. Allocated memory is still 127.9MB. Free memory was 70.2MB in the beginning and 70.1MB in the end (delta: 117.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 581.00ms. Allocated memory is still 178.3MB. Free memory was 145.7MB in the beginning and 127.0MB in the end (delta: 18.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 70.71ms. Allocated memory is still 178.3MB. Free memory was 127.0MB in the beginning and 124.5MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 38.24ms. Allocated memory is still 178.3MB. Free memory was 124.5MB in the beginning and 122.8MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 733.12ms. Allocated memory is still 178.3MB. Free memory was 122.8MB in the beginning and 95.6MB in the end (delta: 27.2MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. * TraceAbstraction took 73844.88ms. Allocated memory was 178.3MB in the beginning and 448.8MB in the end (delta: 270.5MB). Free memory was 95.2MB in the beginning and 297.8MB in the end (delta: -202.7MB). Peak memory consumption was 225.1MB. Max. memory is 16.1GB. * Witness Printer took 142.50ms. Allocated memory is still 448.8MB. Free memory was 297.8MB in the beginning and 291.5MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 160]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 80 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 73.7s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 19.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 24.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1202 SdHoareTripleChecker+Valid, 4.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1168 mSDsluCounter, 3380 SdHoareTripleChecker+Invalid, 3.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2366 mSDsCounter, 361 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3326 IncrementalHoareTripleChecker+Invalid, 3687 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 361 mSolverCounterUnsat, 1014 mSDtfsCounter, 3326 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 892 GetRequests, 688 SyntacticMatches, 9 SemanticMatches, 195 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2838 ImplicationChecksByTransitivity, 31.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=713occurred in iteration=11, InterpolantAutomatonStates: 122, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 154 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 1968 PreInvPairs, 2218 NumberOfFragments, 6049 HoareAnnotationTreeSize, 1968 FomulaSimplifications, 3924 FormulaSimplificationTreeSizeReduction, 1.6s HoareSimplificationTime, 44 FomulaSimplificationsInter, 64216 FormulaSimplificationTreeSizeReductionInter, 22.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 5.3s InterpolantComputationTime, 1243 NumberOfCodeBlocks, 1243 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 1314 ConstructedInterpolants, 0 QuantifiedInterpolants, 3428 SizeOfPredicates, 38 NumberOfNonLiveVariables, 2137 ConjunctsInSsa, 128 ConjunctsInUnsatCore, 19 InterpolantComputations, 11 PerfectInterpolantSequences, 471/582 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 5.5s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 7, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 63, DAG_INTERPRETER_EARLY_EXITS: 7, TOOLS_POST_APPLICATIONS: 69, TOOLS_POST_TIME: 1.5s, TOOLS_POST_CALL_APPLICATIONS: 43, TOOLS_POST_CALL_TIME: 2.5s, TOOLS_POST_RETURN_APPLICATIONS: 36, TOOLS_POST_RETURN_TIME: 0.9s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 146, TOOLS_QUANTIFIERELIM_TIME: 4.8s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.3s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 175, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 30, DOMAIN_JOIN_TIME: 0.4s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 0, DOMAIN_WIDEN_TIME: 0.0s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 1, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 63, DOMAIN_ISBOTTOM_TIME: 0.1s, LOOP_SUMMARIZER_APPLICATIONS: 1, LOOP_SUMMARIZER_CACHE_MISSES: 1, LOOP_SUMMARIZER_OVERALL_TIME: 1.1s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 1.1s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 1, CALL_SUMMARIZER_APPLICATIONS: 36, CALL_SUMMARIZER_CACHE_MISSES: 7, CALL_SUMMARIZER_OVERALL_TIME: 0.2s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.2s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 913, DAG_COMPRESSION_RETAINED_NODES: 184, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 471]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && (((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && waterLevel <= \old(waterLevel)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || ((methAndRunningLastTime == 0 && 2 <= waterLevel) && waterLevel <= \old(waterLevel)))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && waterLevel <= \old(waterLevel))) || \old(pumpRunning) == 0)) && (((!(1 == systemActive) || \old(pumpRunning) == 0) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 387]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && ((!(1 == systemActive) || \old(pumpRunning) == 0) || (pumpRunning == \old(pumpRunning) && waterLevel <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(0 == systemActive))) && ((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && waterLevel <= \old(waterLevel)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) - InvariantResult [Line: 325]: Loop Invariant Derived loop invariant: (((((!(pumpRunning == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && splverifierCounter == 0) && !(0 == systemActive)) || (((methAndRunningLastTime == 0 && 1 == systemActive) && splverifierCounter == 0) && !(0 == systemActive))) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 509]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || ((((((((aux-isMethaneAlarm()-aux <= 0 && retValue_acc == tmp___0) && tmp == \result) && \result == tmp) && retValue_acc == \result) && tmp___0 == 1) && tmp <= 0) && 0 <= aux-isMethaneAlarm()-aux) && 0 <= \result)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(methAndRunningLastTime == 0)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && tmp == 1)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || \old(pumpRunning) == 0) && (!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 627]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && splverifierCounter == 0) && !(0 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) - InvariantResult [Line: 142]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 184]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && (((((((((!(#NULL == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || \old(pumpRunning) == 0) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && ((((!(1 == systemActive) || \old(pumpRunning) == 0) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == 0)) || (!(tmp == 0) && tmp == methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && (((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || (((methAndRunningLastTime == 0 && 2 <= waterLevel) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) - InvariantResult [Line: 423]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 142]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && pumpRunning == 0) && \result == tmp) && methAndRunningLastTime == 0) && \valid[9] == 1) && \result == retValue_acc) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && 1 == retValue_acc) && 31 == unknown-#length-unknown[2]) && head == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && 30 == unknown-#length-unknown[13]) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[1][0] == 48) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 - InvariantResult [Line: 176]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && ((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || (pumpRunning == 0 && methAndRunningLastTime == 0))) && ((((((!(\old(methAndRunningLastTime) == 0) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((!(pumpRunning == 0) && 2 <= waterLevel) && pumpRunning == tmp___0) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || ((((methAndRunningLastTime == 0 && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((methAndRunningLastTime == 0 && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical))) && ((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical) || methaneLevelCritical == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0)) && (((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == methaneLevelCritical)) || \old(pumpRunning) == 0) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && tmp == 0))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(\old(methAndRunningLastTime) == 0)) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || \old(waterLevel) < 2) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) - InvariantResult [Line: 324]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2022-11-23 14:25:20,282 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa935d3d-b8e5-49e2-9c1f-6db21b85ab00/bin/utaipan-Q6hlc19bkW/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE