./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 4e7fbc69 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash cbcb1e9315abec7fabb6a689d6a1c811fb94154c71589df191460c14d014c3cb --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-4e7fbc6 [2022-11-23 14:27:36,210 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-23 14:27:36,212 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-23 14:27:36,248 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-23 14:27:36,250 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-23 14:27:36,254 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-23 14:27:36,259 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-23 14:27:36,263 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-23 14:27:36,265 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-23 14:27:36,271 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-23 14:27:36,273 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-23 14:27:36,276 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-23 14:27:36,276 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-23 14:27:36,279 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-23 14:27:36,282 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-23 14:27:36,285 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-23 14:27:36,287 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-23 14:27:36,288 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-23 14:27:36,290 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-23 14:27:36,298 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-23 14:27:36,299 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-23 14:27:36,302 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-23 14:27:36,304 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-23 14:27:36,305 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-23 14:27:36,317 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-23 14:27:36,318 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-23 14:27:36,318 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-23 14:27:36,320 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-23 14:27:36,321 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-23 14:27:36,322 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-23 14:27:36,322 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-23 14:27:36,323 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-23 14:27:36,326 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-23 14:27:36,328 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-23 14:27:36,329 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-23 14:27:36,330 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-23 14:27:36,331 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-23 14:27:36,331 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-23 14:27:36,331 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-23 14:27:36,333 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-23 14:27:36,334 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-23 14:27:36,335 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-23 14:27:36,386 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-23 14:27:36,387 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-23 14:27:36,388 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-23 14:27:36,388 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-23 14:27:36,389 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-23 14:27:36,390 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-23 14:27:36,390 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-23 14:27:36,391 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-23 14:27:36,391 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-23 14:27:36,391 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-23 14:27:36,393 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-23 14:27:36,393 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-23 14:27:36,393 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-23 14:27:36,394 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-23 14:27:36,394 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-23 14:27:36,395 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-23 14:27:36,395 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-23 14:27:36,395 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-23 14:27:36,396 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-23 14:27:36,397 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-23 14:27:36,397 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-23 14:27:36,397 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-23 14:27:36,398 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-23 14:27:36,398 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-23 14:27:36,398 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-23 14:27:36,398 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-23 14:27:36,399 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-23 14:27:36,400 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-23 14:27:36,400 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-23 14:27:36,401 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-23 14:27:36,401 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-23 14:27:36,402 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-23 14:27:36,402 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 14:27:36,402 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-23 14:27:36,403 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-23 14:27:36,403 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-23 14:27:36,403 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-23 14:27:36,404 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-23 14:27:36,404 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-23 14:27:36,404 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-23 14:27:36,405 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-23 14:27:36,406 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> cbcb1e9315abec7fabb6a689d6a1c811fb94154c71589df191460c14d014c3cb [2022-11-23 14:27:36,761 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-23 14:27:36,798 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-23 14:27:36,801 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-23 14:27:36,803 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-23 14:27:36,803 INFO L275 PluginConnector]: CDTParser initialized [2022-11-23 14:27:36,805 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/../../sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c [2022-11-23 14:27:39,829 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-23 14:27:40,182 INFO L351 CDTParser]: Found 1 translation units. [2022-11-23 14:27:40,188 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c [2022-11-23 14:27:40,206 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/data/926cc6a11/94616f12b482479ebdcfa12f1a33f096/FLAG12900ed3b [2022-11-23 14:27:40,221 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/data/926cc6a11/94616f12b482479ebdcfa12f1a33f096 [2022-11-23 14:27:40,224 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-23 14:27:40,226 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-23 14:27:40,227 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-23 14:27:40,228 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-23 14:27:40,232 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-23 14:27:40,233 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:27:40" (1/1) ... [2022-11-23 14:27:40,234 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5e4a7d65 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:27:40, skipping insertion in model container [2022-11-23 14:27:40,234 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:27:40" (1/1) ... [2022-11-23 14:27:40,242 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-23 14:27:40,283 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-23 14:27:40,509 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c[4478,4491] [2022-11-23 14:27:40,669 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 14:27:40,688 INFO L203 MainTranslator]: Completed pre-run [2022-11-23 14:27:40,722 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c[4478,4491] [2022-11-23 14:27:40,760 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 14:27:40,780 INFO L208 MainTranslator]: Completed translation [2022-11-23 14:27:40,780 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:27:40 WrapperNode [2022-11-23 14:27:40,781 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-23 14:27:40,782 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-23 14:27:40,782 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-23 14:27:40,782 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-23 14:27:40,791 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:27:40" (1/1) ... [2022-11-23 14:27:40,814 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:27:40" (1/1) ... [2022-11-23 14:27:40,860 INFO L138 Inliner]: procedures = 57, calls = 104, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 228 [2022-11-23 14:27:40,861 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-23 14:27:40,862 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-23 14:27:40,862 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-23 14:27:40,863 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-23 14:27:40,874 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:27:40" (1/1) ... [2022-11-23 14:27:40,874 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:27:40" (1/1) ... [2022-11-23 14:27:40,892 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:27:40" (1/1) ... [2022-11-23 14:27:40,893 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:27:40" (1/1) ... [2022-11-23 14:27:40,897 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:27:40" (1/1) ... [2022-11-23 14:27:40,901 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:27:40" (1/1) ... [2022-11-23 14:27:40,903 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:27:40" (1/1) ... [2022-11-23 14:27:40,921 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:27:40" (1/1) ... [2022-11-23 14:27:40,923 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-23 14:27:40,924 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-23 14:27:40,924 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-23 14:27:40,924 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-23 14:27:40,925 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:27:40" (1/1) ... [2022-11-23 14:27:40,944 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 14:27:40,957 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 14:27:40,974 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-23 14:27:40,993 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-23 14:27:41,023 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-23 14:27:41,023 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-23 14:27:41,023 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-23 14:27:41,024 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-23 14:27:41,024 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-23 14:27:41,024 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-23 14:27:41,024 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-23 14:27:41,024 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-23 14:27:41,024 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-23 14:27:41,025 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 14:27:41,025 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 14:27:41,025 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-23 14:27:41,025 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-23 14:27:41,025 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-23 14:27:41,026 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-23 14:27:41,026 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-23 14:27:41,026 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-23 14:27:41,026 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-23 14:27:41,026 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-23 14:27:41,027 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-23 14:27:41,027 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-23 14:27:41,027 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-23 14:27:41,110 INFO L235 CfgBuilder]: Building ICFG [2022-11-23 14:27:41,112 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-23 14:27:41,519 INFO L276 CfgBuilder]: Performing block encoding [2022-11-23 14:27:41,742 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-23 14:27:41,742 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-23 14:27:41,745 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:27:41 BoogieIcfgContainer [2022-11-23 14:27:41,745 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-23 14:27:41,748 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-23 14:27:41,748 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-23 14:27:41,752 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-23 14:27:41,752 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 02:27:40" (1/3) ... [2022-11-23 14:27:41,753 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6558e767 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 02:27:41, skipping insertion in model container [2022-11-23 14:27:41,753 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:27:40" (2/3) ... [2022-11-23 14:27:41,753 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6558e767 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 02:27:41, skipping insertion in model container [2022-11-23 14:27:41,753 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:27:41" (3/3) ... [2022-11-23 14:27:41,759 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product54.cil.c [2022-11-23 14:27:41,782 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-23 14:27:41,782 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-23 14:27:41,839 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-23 14:27:41,846 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7209fc76, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-23 14:27:41,846 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-23 14:27:41,851 INFO L276 IsEmpty]: Start isEmpty. Operand has 69 states, 42 states have (on average 1.4285714285714286) internal successors, (60), 52 states have internal predecessors, (60), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-23 14:27:41,867 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-23 14:27:41,867 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:27:41,868 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:27:41,868 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:27:41,874 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:27:41,874 INFO L85 PathProgramCache]: Analyzing trace with hash 17196712, now seen corresponding path program 1 times [2022-11-23 14:27:41,885 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:27:41,886 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [271454844] [2022-11-23 14:27:41,886 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:27:41,887 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:27:42,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:27:42,120 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 14:27:42,120 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:27:42,127 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [271454844] [2022-11-23 14:27:42,128 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [271454844] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:27:42,128 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:27:42,128 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-23 14:27:42,130 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [317101380] [2022-11-23 14:27:42,133 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:27:42,140 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-23 14:27:42,142 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:27:42,180 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-23 14:27:42,180 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-23 14:27:42,182 INFO L87 Difference]: Start difference. First operand has 69 states, 42 states have (on average 1.4285714285714286) internal successors, (60), 52 states have internal predecessors, (60), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 14:27:42,263 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:27:42,263 INFO L93 Difference]: Finished difference Result 136 states and 185 transitions. [2022-11-23 14:27:42,265 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-23 14:27:42,266 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-11-23 14:27:42,267 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:27:42,278 INFO L225 Difference]: With dead ends: 136 [2022-11-23 14:27:42,278 INFO L226 Difference]: Without dead ends: 64 [2022-11-23 14:27:42,282 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-23 14:27:42,286 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 70 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 14:27:42,289 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 70 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 14:27:42,311 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2022-11-23 14:27:42,357 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 64. [2022-11-23 14:27:42,359 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 39 states have (on average 1.3333333333333333) internal successors, (52), 48 states have internal predecessors, (52), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-23 14:27:42,371 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 83 transitions. [2022-11-23 14:27:42,373 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 83 transitions. Word has length 17 [2022-11-23 14:27:42,373 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:27:42,373 INFO L495 AbstractCegarLoop]: Abstraction has 64 states and 83 transitions. [2022-11-23 14:27:42,374 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 14:27:42,374 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 83 transitions. [2022-11-23 14:27:42,376 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-23 14:27:42,376 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:27:42,377 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:27:42,377 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-23 14:27:42,377 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:27:42,378 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:27:42,378 INFO L85 PathProgramCache]: Analyzing trace with hash -820237942, now seen corresponding path program 1 times [2022-11-23 14:27:42,379 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:27:42,379 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [403028024] [2022-11-23 14:27:42,379 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:27:42,379 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:27:42,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:27:42,592 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 14:27:42,593 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:27:42,593 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [403028024] [2022-11-23 14:27:42,593 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [403028024] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:27:42,593 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:27:42,594 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 14:27:42,594 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [261678073] [2022-11-23 14:27:42,594 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:27:42,596 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 14:27:42,596 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:27:42,596 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 14:27:42,597 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:27:42,597 INFO L87 Difference]: Start difference. First operand 64 states and 83 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 14:27:42,695 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:27:42,696 INFO L93 Difference]: Finished difference Result 105 states and 137 transitions. [2022-11-23 14:27:42,698 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 14:27:42,698 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-11-23 14:27:42,698 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:27:42,699 INFO L225 Difference]: With dead ends: 105 [2022-11-23 14:27:42,700 INFO L226 Difference]: Without dead ends: 56 [2022-11-23 14:27:42,700 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:27:42,703 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 7 mSDsluCounter, 47 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 103 SdHoareTripleChecker+Invalid, 29 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 14:27:42,704 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 103 Invalid, 29 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 14:27:42,707 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2022-11-23 14:27:42,714 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 56. [2022-11-23 14:27:42,714 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 34 states have (on average 1.3529411764705883) internal successors, (46), 43 states have internal predecessors, (46), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-23 14:27:42,715 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 72 transitions. [2022-11-23 14:27:42,716 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 72 transitions. Word has length 18 [2022-11-23 14:27:42,716 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:27:42,716 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 72 transitions. [2022-11-23 14:27:42,716 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 14:27:42,719 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 72 transitions. [2022-11-23 14:27:42,729 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-23 14:27:42,729 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:27:42,729 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:27:42,729 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-23 14:27:42,730 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:27:42,730 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:27:42,730 INFO L85 PathProgramCache]: Analyzing trace with hash 784674455, now seen corresponding path program 1 times [2022-11-23 14:27:42,731 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:27:42,731 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1008337547] [2022-11-23 14:27:42,731 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:27:42,731 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:27:42,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:27:43,100 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 14:27:43,101 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:27:43,101 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1008337547] [2022-11-23 14:27:43,101 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1008337547] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:27:43,102 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:27:43,102 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-23 14:27:43,102 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [679735769] [2022-11-23 14:27:43,102 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:27:43,102 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 14:27:43,103 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:27:43,103 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 14:27:43,103 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-23 14:27:43,104 INFO L87 Difference]: Start difference. First operand 56 states and 72 transitions. Second operand has 5 states, 5 states have (on average 3.4) internal successors, (17), 5 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 14:27:43,274 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:27:43,274 INFO L93 Difference]: Finished difference Result 177 states and 233 transitions. [2022-11-23 14:27:43,275 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-23 14:27:43,275 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 3.4) internal successors, (17), 5 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2022-11-23 14:27:43,276 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:27:43,282 INFO L225 Difference]: With dead ends: 177 [2022-11-23 14:27:43,282 INFO L226 Difference]: Without dead ends: 123 [2022-11-23 14:27:43,286 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-23 14:27:43,291 INFO L413 NwaCegarLoop]: 74 mSDtfsCounter, 76 mSDsluCounter, 182 mSDsCounter, 0 mSdLazyCounter, 96 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 256 SdHoareTripleChecker+Invalid, 100 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 96 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 14:27:43,294 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [76 Valid, 256 Invalid, 100 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 96 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 14:27:43,296 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 123 states. [2022-11-23 14:27:43,328 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 123 to 104. [2022-11-23 14:27:43,329 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 104 states, 63 states have (on average 1.3492063492063493) internal successors, (85), 79 states have internal predecessors, (85), 25 states have call successors, (25), 15 states have call predecessors, (25), 15 states have return successors, (25), 15 states have call predecessors, (25), 25 states have call successors, (25) [2022-11-23 14:27:43,332 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 104 states to 104 states and 135 transitions. [2022-11-23 14:27:43,332 INFO L78 Accepts]: Start accepts. Automaton has 104 states and 135 transitions. Word has length 20 [2022-11-23 14:27:43,333 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:27:43,333 INFO L495 AbstractCegarLoop]: Abstraction has 104 states and 135 transitions. [2022-11-23 14:27:43,333 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 3.4) internal successors, (17), 5 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 14:27:43,333 INFO L276 IsEmpty]: Start isEmpty. Operand 104 states and 135 transitions. [2022-11-23 14:27:43,336 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-23 14:27:43,337 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:27:43,337 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:27:43,337 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-23 14:27:43,338 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:27:43,338 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:27:43,339 INFO L85 PathProgramCache]: Analyzing trace with hash 1586982121, now seen corresponding path program 1 times [2022-11-23 14:27:43,340 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:27:43,341 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [143553002] [2022-11-23 14:27:43,341 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:27:43,341 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:27:43,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:27:43,559 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 14:27:43,560 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:27:43,560 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [143553002] [2022-11-23 14:27:43,561 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [143553002] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:27:43,561 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:27:43,561 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 14:27:43,561 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1641367267] [2022-11-23 14:27:43,562 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:27:43,562 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 14:27:43,562 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:27:43,562 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 14:27:43,563 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:27:43,563 INFO L87 Difference]: Start difference. First operand 104 states and 135 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-23 14:27:43,622 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:27:43,622 INFO L93 Difference]: Finished difference Result 206 states and 270 transitions. [2022-11-23 14:27:43,622 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 14:27:43,624 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 23 [2022-11-23 14:27:43,624 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:27:43,629 INFO L225 Difference]: With dead ends: 206 [2022-11-23 14:27:43,629 INFO L226 Difference]: Without dead ends: 104 [2022-11-23 14:27:43,631 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:27:43,639 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 60 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 54 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 14:27:43,640 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 54 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 14:27:43,640 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104 states. [2022-11-23 14:27:43,667 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104 to 104. [2022-11-23 14:27:43,668 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 104 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 79 states have internal predecessors, (83), 25 states have call successors, (25), 15 states have call predecessors, (25), 15 states have return successors, (25), 15 states have call predecessors, (25), 25 states have call successors, (25) [2022-11-23 14:27:43,669 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 104 states to 104 states and 133 transitions. [2022-11-23 14:27:43,670 INFO L78 Accepts]: Start accepts. Automaton has 104 states and 133 transitions. Word has length 23 [2022-11-23 14:27:43,670 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:27:43,671 INFO L495 AbstractCegarLoop]: Abstraction has 104 states and 133 transitions. [2022-11-23 14:27:43,671 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-23 14:27:43,671 INFO L276 IsEmpty]: Start isEmpty. Operand 104 states and 133 transitions. [2022-11-23 14:27:43,673 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-23 14:27:43,673 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:27:43,673 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:27:43,674 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-23 14:27:43,674 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:27:43,675 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:27:43,675 INFO L85 PathProgramCache]: Analyzing trace with hash 955946380, now seen corresponding path program 1 times [2022-11-23 14:27:43,675 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:27:43,675 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [248824567] [2022-11-23 14:27:43,675 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:27:43,676 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:27:43,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:27:44,083 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-23 14:27:44,083 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:27:44,083 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [248824567] [2022-11-23 14:27:44,084 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [248824567] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:27:44,085 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:27:44,088 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-23 14:27:44,089 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [875045303] [2022-11-23 14:27:44,090 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:27:44,090 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-23 14:27:44,091 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:27:44,092 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-23 14:27:44,093 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2022-11-23 14:27:44,093 INFO L87 Difference]: Start difference. First operand 104 states and 133 transitions. Second operand has 9 states, 8 states have (on average 2.875) internal successors, (23), 8 states have internal predecessors, (23), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 14:27:45,072 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:27:45,077 INFO L93 Difference]: Finished difference Result 331 states and 442 transitions. [2022-11-23 14:27:45,077 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-11-23 14:27:45,078 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 2.875) internal successors, (23), 8 states have internal predecessors, (23), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 33 [2022-11-23 14:27:45,078 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:27:45,084 INFO L225 Difference]: With dead ends: 331 [2022-11-23 14:27:45,085 INFO L226 Difference]: Without dead ends: 277 [2022-11-23 14:27:45,086 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 63 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=102, Invalid=278, Unknown=0, NotChecked=0, Total=380 [2022-11-23 14:27:45,090 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 253 mSDsluCounter, 189 mSDsCounter, 0 mSdLazyCounter, 588 mSolverCounterSat, 141 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 262 SdHoareTripleChecker+Valid, 261 SdHoareTripleChecker+Invalid, 729 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 141 IncrementalHoareTripleChecker+Valid, 588 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-23 14:27:45,090 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [262 Valid, 261 Invalid, 729 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [141 Valid, 588 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-23 14:27:45,093 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 277 states. [2022-11-23 14:27:45,169 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 277 to 237. [2022-11-23 14:27:45,170 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 237 states, 153 states have (on average 1.3202614379084967) internal successors, (202), 176 states have internal predecessors, (202), 50 states have call successors, (50), 31 states have call predecessors, (50), 33 states have return successors, (65), 38 states have call predecessors, (65), 50 states have call successors, (65) [2022-11-23 14:27:45,173 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 237 states to 237 states and 317 transitions. [2022-11-23 14:27:45,174 INFO L78 Accepts]: Start accepts. Automaton has 237 states and 317 transitions. Word has length 33 [2022-11-23 14:27:45,174 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:27:45,174 INFO L495 AbstractCegarLoop]: Abstraction has 237 states and 317 transitions. [2022-11-23 14:27:45,174 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 2.875) internal successors, (23), 8 states have internal predecessors, (23), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 14:27:45,174 INFO L276 IsEmpty]: Start isEmpty. Operand 237 states and 317 transitions. [2022-11-23 14:27:45,176 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-23 14:27:45,176 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:27:45,177 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:27:45,177 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-23 14:27:45,177 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:27:45,177 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:27:45,178 INFO L85 PathProgramCache]: Analyzing trace with hash 562392241, now seen corresponding path program 1 times [2022-11-23 14:27:45,178 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:27:45,178 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1101241396] [2022-11-23 14:27:45,178 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:27:45,178 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:27:45,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:27:45,281 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 14:27:45,282 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:27:45,282 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1101241396] [2022-11-23 14:27:45,282 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1101241396] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:27:45,282 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:27:45,282 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-23 14:27:45,283 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [148544185] [2022-11-23 14:27:45,283 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:27:45,283 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-23 14:27:45,283 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:27:45,284 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-23 14:27:45,284 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-23 14:27:45,284 INFO L87 Difference]: Start difference. First operand 237 states and 317 transitions. Second operand has 4 states, 4 states have (on average 6.75) internal successors, (27), 4 states have internal predecessors, (27), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 14:27:45,436 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:27:45,436 INFO L93 Difference]: Finished difference Result 635 states and 885 transitions. [2022-11-23 14:27:45,437 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-23 14:27:45,437 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 6.75) internal successors, (27), 4 states have internal predecessors, (27), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 36 [2022-11-23 14:27:45,438 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:27:45,442 INFO L225 Difference]: With dead ends: 635 [2022-11-23 14:27:45,442 INFO L226 Difference]: Without dead ends: 403 [2022-11-23 14:27:45,444 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-23 14:27:45,446 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 51 mSDsluCounter, 149 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 246 SdHoareTripleChecker+Invalid, 83 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 14:27:45,446 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 246 Invalid, 83 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 14:27:45,450 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 403 states. [2022-11-23 14:27:45,533 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 403 to 389. [2022-11-23 14:27:45,535 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 389 states, 255 states have (on average 1.2666666666666666) internal successors, (323), 283 states have internal predecessors, (323), 78 states have call successors, (78), 53 states have call predecessors, (78), 55 states have return successors, (120), 66 states have call predecessors, (120), 78 states have call successors, (120) [2022-11-23 14:27:45,540 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 389 states to 389 states and 521 transitions. [2022-11-23 14:27:45,541 INFO L78 Accepts]: Start accepts. Automaton has 389 states and 521 transitions. Word has length 36 [2022-11-23 14:27:45,541 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:27:45,541 INFO L495 AbstractCegarLoop]: Abstraction has 389 states and 521 transitions. [2022-11-23 14:27:45,542 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 6.75) internal successors, (27), 4 states have internal predecessors, (27), 2 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 14:27:45,542 INFO L276 IsEmpty]: Start isEmpty. Operand 389 states and 521 transitions. [2022-11-23 14:27:45,545 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-11-23 14:27:45,545 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:27:45,546 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:27:45,546 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-23 14:27:45,546 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:27:45,547 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:27:45,547 INFO L85 PathProgramCache]: Analyzing trace with hash 1658856462, now seen corresponding path program 1 times [2022-11-23 14:27:45,547 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:27:45,547 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [191292552] [2022-11-23 14:27:45,547 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:27:45,548 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:27:45,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:27:45,931 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 14:27:45,932 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:27:45,932 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [191292552] [2022-11-23 14:27:45,932 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [191292552] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:27:45,932 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:27:45,933 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-23 14:27:45,933 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [230666513] [2022-11-23 14:27:45,933 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:27:45,934 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-23 14:27:45,934 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:27:45,935 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-23 14:27:45,935 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-23 14:27:45,935 INFO L87 Difference]: Start difference. First operand 389 states and 521 transitions. Second operand has 9 states, 8 states have (on average 3.5) internal successors, (28), 8 states have internal predecessors, (28), 5 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) [2022-11-23 14:27:46,867 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:27:46,868 INFO L93 Difference]: Finished difference Result 1379 states and 1915 transitions. [2022-11-23 14:27:46,868 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-23 14:27:46,868 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 3.5) internal successors, (28), 8 states have internal predecessors, (28), 5 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) Word has length 39 [2022-11-23 14:27:46,870 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:27:46,877 INFO L225 Difference]: With dead ends: 1379 [2022-11-23 14:27:46,877 INFO L226 Difference]: Without dead ends: 995 [2022-11-23 14:27:46,879 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=85, Invalid=221, Unknown=0, NotChecked=0, Total=306 [2022-11-23 14:27:46,880 INFO L413 NwaCegarLoop]: 101 mSDtfsCounter, 308 mSDsluCounter, 248 mSDsCounter, 0 mSdLazyCounter, 615 mSolverCounterSat, 193 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 321 SdHoareTripleChecker+Valid, 349 SdHoareTripleChecker+Invalid, 808 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 193 IncrementalHoareTripleChecker+Valid, 615 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-23 14:27:46,881 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [321 Valid, 349 Invalid, 808 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [193 Valid, 615 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-23 14:27:46,883 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 995 states. [2022-11-23 14:27:47,045 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 995 to 970. [2022-11-23 14:27:47,048 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 970 states, 651 states have (on average 1.2488479262672811) internal successors, (813), 702 states have internal predecessors, (813), 180 states have call successors, (180), 126 states have call predecessors, (180), 138 states have return successors, (311), 171 states have call predecessors, (311), 180 states have call successors, (311) [2022-11-23 14:27:47,055 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 970 states to 970 states and 1304 transitions. [2022-11-23 14:27:47,056 INFO L78 Accepts]: Start accepts. Automaton has 970 states and 1304 transitions. Word has length 39 [2022-11-23 14:27:47,057 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:27:47,057 INFO L495 AbstractCegarLoop]: Abstraction has 970 states and 1304 transitions. [2022-11-23 14:27:47,057 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 3.5) internal successors, (28), 8 states have internal predecessors, (28), 5 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 5 states have call successors, (5) [2022-11-23 14:27:47,057 INFO L276 IsEmpty]: Start isEmpty. Operand 970 states and 1304 transitions. [2022-11-23 14:27:47,063 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-11-23 14:27:47,063 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:27:47,064 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:27:47,064 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-23 14:27:47,064 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:27:47,064 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:27:47,065 INFO L85 PathProgramCache]: Analyzing trace with hash -1387617154, now seen corresponding path program 1 times [2022-11-23 14:27:47,065 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:27:47,065 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [277705676] [2022-11-23 14:27:47,065 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:27:47,065 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:27:47,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:27:47,179 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-23 14:27:47,179 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:27:47,180 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [277705676] [2022-11-23 14:27:47,180 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [277705676] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:27:47,180 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:27:47,180 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-23 14:27:47,180 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [622292018] [2022-11-23 14:27:47,180 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:27:47,181 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 14:27:47,182 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:27:47,183 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 14:27:47,183 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 14:27:47,183 INFO L87 Difference]: Start difference. First operand 970 states and 1304 transitions. Second operand has 5 states, 4 states have (on average 10.25) internal successors, (41), 5 states have internal predecessors, (41), 5 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 2 states have call predecessors, (8), 5 states have call successors, (8) [2022-11-23 14:27:47,436 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:27:47,436 INFO L93 Difference]: Finished difference Result 1371 states and 1821 transitions. [2022-11-23 14:27:47,436 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-23 14:27:47,437 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 10.25) internal successors, (41), 5 states have internal predecessors, (41), 5 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 2 states have call predecessors, (8), 5 states have call successors, (8) Word has length 65 [2022-11-23 14:27:47,437 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:27:47,440 INFO L225 Difference]: With dead ends: 1371 [2022-11-23 14:27:47,440 INFO L226 Difference]: Without dead ends: 406 [2022-11-23 14:27:47,443 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-11-23 14:27:47,444 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 125 mSDsluCounter, 91 mSDsCounter, 0 mSdLazyCounter, 151 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 127 SdHoareTripleChecker+Valid, 166 SdHoareTripleChecker+Invalid, 210 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 151 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 14:27:47,445 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [127 Valid, 166 Invalid, 210 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 151 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 14:27:47,446 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 406 states. [2022-11-23 14:27:47,513 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 406 to 355. [2022-11-23 14:27:47,514 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 355 states, 236 states have (on average 1.194915254237288) internal successors, (282), 254 states have internal predecessors, (282), 57 states have call successors, (57), 49 states have call predecessors, (57), 61 states have return successors, (72), 60 states have call predecessors, (72), 57 states have call successors, (72) [2022-11-23 14:27:47,516 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 355 states to 355 states and 411 transitions. [2022-11-23 14:27:47,517 INFO L78 Accepts]: Start accepts. Automaton has 355 states and 411 transitions. Word has length 65 [2022-11-23 14:27:47,517 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:27:47,518 INFO L495 AbstractCegarLoop]: Abstraction has 355 states and 411 transitions. [2022-11-23 14:27:47,518 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 10.25) internal successors, (41), 5 states have internal predecessors, (41), 5 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 2 states have call predecessors, (8), 5 states have call successors, (8) [2022-11-23 14:27:47,518 INFO L276 IsEmpty]: Start isEmpty. Operand 355 states and 411 transitions. [2022-11-23 14:27:47,520 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-11-23 14:27:47,520 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:27:47,521 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:27:47,521 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-23 14:27:47,521 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:27:47,522 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:27:47,522 INFO L85 PathProgramCache]: Analyzing trace with hash 1586710619, now seen corresponding path program 1 times [2022-11-23 14:27:47,522 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:27:47,522 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1521275687] [2022-11-23 14:27:47,522 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:27:47,523 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:27:47,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:27:47,665 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 15 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 14:27:47,665 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:27:47,666 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1521275687] [2022-11-23 14:27:47,666 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1521275687] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 14:27:47,666 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [774750965] [2022-11-23 14:27:47,666 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:27:47,666 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:27:47,667 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 14:27:47,673 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 14:27:47,678 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-23 14:27:47,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:27:47,810 INFO L263 TraceCheckSpWp]: Trace formula consists of 288 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-23 14:27:47,817 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:27:48,239 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 4 proven. 11 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-23 14:27:48,239 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 14:27:48,700 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-23 14:27:48,701 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [774750965] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 14:27:48,701 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2070914259] [2022-11-23 14:27:48,723 INFO L159 IcfgInterpreter]: Started Sifa with 45 locations of interest [2022-11-23 14:27:48,723 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 14:27:48,727 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 14:27:48,733 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 14:27:48,733 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 14:27:54,092 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 114 for LOIs [2022-11-23 14:27:54,107 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 123 for LOIs [2022-11-23 14:27:55,129 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 123 for LOIs [2022-11-23 14:27:55,795 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 123 for LOIs [2022-11-23 14:27:56,109 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 112 for LOIs [2022-11-23 14:27:56,119 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 14:28:06,325 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [2070914259] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:28:06,326 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-23 14:28:06,326 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [23] imperfect sequences [7, 9, 8] total 41 [2022-11-23 14:28:06,327 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [126117800] [2022-11-23 14:28:06,327 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:28:06,327 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2022-11-23 14:28:06,327 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:28:06,328 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2022-11-23 14:28:06,329 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=243, Invalid=1397, Unknown=0, NotChecked=0, Total=1640 [2022-11-23 14:28:06,329 INFO L87 Difference]: Start difference. First operand 355 states and 411 transitions. Second operand has 24 states, 20 states have (on average 1.7) internal successors, (34), 20 states have internal predecessors, (34), 6 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 6 states have call successors, (7) [2022-11-23 14:28:13,802 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:28:13,803 INFO L93 Difference]: Finished difference Result 853 states and 1000 transitions. [2022-11-23 14:28:13,803 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-23 14:28:13,804 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 20 states have (on average 1.7) internal successors, (34), 20 states have internal predecessors, (34), 6 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 6 states have call successors, (7) Word has length 63 [2022-11-23 14:28:13,804 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:28:13,807 INFO L225 Difference]: With dead ends: 853 [2022-11-23 14:28:13,807 INFO L226 Difference]: Without dead ends: 536 [2022-11-23 14:28:13,809 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 203 GetRequests, 144 SyntacticMatches, 11 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 743 ImplicationChecksByTransitivity, 15.7s TimeCoverageRelationStatistics Valid=376, Invalid=2074, Unknown=0, NotChecked=0, Total=2450 [2022-11-23 14:28:13,809 INFO L413 NwaCegarLoop]: 64 mSDtfsCounter, 129 mSDsluCounter, 472 mSDsCounter, 0 mSdLazyCounter, 1156 mSolverCounterSat, 62 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 132 SdHoareTripleChecker+Valid, 536 SdHoareTripleChecker+Invalid, 1218 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 62 IncrementalHoareTripleChecker+Valid, 1156 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2022-11-23 14:28:13,810 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [132 Valid, 536 Invalid, 1218 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [62 Valid, 1156 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2022-11-23 14:28:13,811 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 536 states. [2022-11-23 14:28:13,923 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 536 to 499. [2022-11-23 14:28:13,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 499 states, 336 states have (on average 1.1785714285714286) internal successors, (396), 357 states have internal predecessors, (396), 78 states have call successors, (78), 69 states have call predecessors, (78), 84 states have return successors, (99), 80 states have call predecessors, (99), 78 states have call successors, (99) [2022-11-23 14:28:13,927 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 499 states to 499 states and 573 transitions. [2022-11-23 14:28:13,927 INFO L78 Accepts]: Start accepts. Automaton has 499 states and 573 transitions. Word has length 63 [2022-11-23 14:28:13,928 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:28:13,928 INFO L495 AbstractCegarLoop]: Abstraction has 499 states and 573 transitions. [2022-11-23 14:28:13,928 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 20 states have (on average 1.7) internal successors, (34), 20 states have internal predecessors, (34), 6 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 6 states have call successors, (7) [2022-11-23 14:28:13,928 INFO L276 IsEmpty]: Start isEmpty. Operand 499 states and 573 transitions. [2022-11-23 14:28:13,930 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-11-23 14:28:13,930 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:28:13,930 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:28:13,945 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-23 14:28:14,136 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:28:14,137 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:28:14,137 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:28:14,137 INFO L85 PathProgramCache]: Analyzing trace with hash 1416667601, now seen corresponding path program 1 times [2022-11-23 14:28:14,138 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:28:14,138 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [951548179] [2022-11-23 14:28:14,138 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:28:14,138 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:28:14,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:28:14,579 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 4 proven. 12 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-23 14:28:14,579 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:28:14,579 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [951548179] [2022-11-23 14:28:14,580 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [951548179] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 14:28:14,580 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [370211556] [2022-11-23 14:28:14,580 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:28:14,580 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:28:14,580 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 14:28:14,581 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 14:28:14,583 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-23 14:28:14,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:28:14,679 INFO L263 TraceCheckSpWp]: Trace formula consists of 298 conjuncts, 30 conjunts are in the unsatisfiable core [2022-11-23 14:28:14,682 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:28:14,996 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 8 proven. 9 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-23 14:28:14,996 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 14:28:15,379 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 1 proven. 15 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-23 14:28:15,379 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [370211556] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 14:28:15,379 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1573494616] [2022-11-23 14:28:15,382 INFO L159 IcfgInterpreter]: Started Sifa with 45 locations of interest [2022-11-23 14:28:15,382 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 14:28:15,383 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 14:28:15,383 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 14:28:15,383 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 14:28:17,950 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 127 for LOIs [2022-11-23 14:28:17,970 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 27 for LOIs [2022-11-23 14:28:18,112 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 24 for LOIs [2022-11-23 14:28:18,149 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 24 for LOIs [2022-11-23 14:28:18,170 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 50 for LOIs [2022-11-23 14:28:18,177 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 14:28:23,433 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1573494616] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:28:23,434 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-23 14:28:23,434 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [30] imperfect sequences [14, 12, 11] total 56 [2022-11-23 14:28:23,434 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [825659410] [2022-11-23 14:28:23,434 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:28:23,435 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-23 14:28:23,435 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:28:23,435 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-23 14:28:23,436 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=471, Invalid=2609, Unknown=0, NotChecked=0, Total=3080 [2022-11-23 14:28:23,437 INFO L87 Difference]: Start difference. First operand 499 states and 573 transitions. Second operand has 31 states, 25 states have (on average 1.36) internal successors, (34), 25 states have internal predecessors, (34), 7 states have call successors, (7), 5 states have call predecessors, (7), 6 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-23 14:28:32,582 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:28:32,582 INFO L93 Difference]: Finished difference Result 816 states and 953 transitions. [2022-11-23 14:28:32,582 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 44 states. [2022-11-23 14:28:32,583 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 25 states have (on average 1.36) internal successors, (34), 25 states have internal predecessors, (34), 7 states have call successors, (7), 5 states have call predecessors, (7), 6 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) Word has length 64 [2022-11-23 14:28:32,583 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:28:32,586 INFO L225 Difference]: With dead ends: 816 [2022-11-23 14:28:32,586 INFO L226 Difference]: Without dead ends: 606 [2022-11-23 14:28:32,588 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 236 GetRequests, 147 SyntacticMatches, 7 SemanticMatches, 82 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2862 ImplicationChecksByTransitivity, 11.9s TimeCoverageRelationStatistics Valid=980, Invalid=5992, Unknown=0, NotChecked=0, Total=6972 [2022-11-23 14:28:32,589 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 240 mSDsluCounter, 719 mSDsCounter, 0 mSdLazyCounter, 2180 mSolverCounterSat, 149 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 244 SdHoareTripleChecker+Valid, 786 SdHoareTripleChecker+Invalid, 2329 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 149 IncrementalHoareTripleChecker+Valid, 2180 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.6s IncrementalHoareTripleChecker+Time [2022-11-23 14:28:32,590 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [244 Valid, 786 Invalid, 2329 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [149 Valid, 2180 Invalid, 0 Unknown, 0 Unchecked, 2.6s Time] [2022-11-23 14:28:32,591 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 606 states. [2022-11-23 14:28:32,706 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 606 to 577. [2022-11-23 14:28:32,708 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 577 states, 391 states have (on average 1.1790281329923273) internal successors, (461), 412 states have internal predecessors, (461), 90 states have call successors, (90), 80 states have call predecessors, (90), 95 states have return successors, (115), 93 states have call predecessors, (115), 90 states have call successors, (115) [2022-11-23 14:28:32,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 577 states to 577 states and 666 transitions. [2022-11-23 14:28:32,711 INFO L78 Accepts]: Start accepts. Automaton has 577 states and 666 transitions. Word has length 64 [2022-11-23 14:28:32,711 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:28:32,712 INFO L495 AbstractCegarLoop]: Abstraction has 577 states and 666 transitions. [2022-11-23 14:28:32,712 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 25 states have (on average 1.36) internal successors, (34), 25 states have internal predecessors, (34), 7 states have call successors, (7), 5 states have call predecessors, (7), 6 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-23 14:28:32,712 INFO L276 IsEmpty]: Start isEmpty. Operand 577 states and 666 transitions. [2022-11-23 14:28:32,713 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-11-23 14:28:32,713 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:28:32,714 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:28:32,724 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-23 14:28:32,920 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:28:32,920 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:28:32,921 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:28:32,921 INFO L85 PathProgramCache]: Analyzing trace with hash 36450267, now seen corresponding path program 1 times [2022-11-23 14:28:32,921 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:28:32,921 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1790681222] [2022-11-23 14:28:32,921 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:28:32,921 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:28:32,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:28:33,045 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 14 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-23 14:28:33,045 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:28:33,045 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1790681222] [2022-11-23 14:28:33,046 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1790681222] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 14:28:33,046 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [819277340] [2022-11-23 14:28:33,046 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:28:33,046 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:28:33,046 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 14:28:33,047 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 14:28:33,065 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-23 14:28:33,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:28:33,135 INFO L263 TraceCheckSpWp]: Trace formula consists of 294 conjuncts, 25 conjunts are in the unsatisfiable core [2022-11-23 14:28:33,138 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:28:33,190 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-23 14:28:33,191 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:28:33,191 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [819277340] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:28:33,191 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-23 14:28:33,191 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [8] total 11 [2022-11-23 14:28:33,191 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [617346971] [2022-11-23 14:28:33,192 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:28:33,192 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-23 14:28:33,192 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:28:33,193 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-23 14:28:33,193 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=89, Unknown=0, NotChecked=0, Total=110 [2022-11-23 14:28:33,193 INFO L87 Difference]: Start difference. First operand 577 states and 666 transitions. Second operand has 9 states, 7 states have (on average 5.857142857142857) internal successors, (41), 7 states have internal predecessors, (41), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-23 14:28:33,619 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:28:33,619 INFO L93 Difference]: Finished difference Result 1140 states and 1336 transitions. [2022-11-23 14:28:33,620 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-23 14:28:33,620 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 5.857142857142857) internal successors, (41), 7 states have internal predecessors, (41), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) Word has length 66 [2022-11-23 14:28:33,620 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:28:33,624 INFO L225 Difference]: With dead ends: 1140 [2022-11-23 14:28:33,624 INFO L226 Difference]: Without dead ends: 825 [2022-11-23 14:28:33,626 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 82 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 26 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=56, Invalid=250, Unknown=0, NotChecked=0, Total=306 [2022-11-23 14:28:33,626 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 61 mSDsluCounter, 423 mSDsCounter, 0 mSdLazyCounter, 304 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 513 SdHoareTripleChecker+Invalid, 310 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 304 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 14:28:33,627 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 513 Invalid, 310 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 304 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 14:28:33,628 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 825 states. [2022-11-23 14:28:33,776 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 825 to 779. [2022-11-23 14:28:33,778 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 779 states, 532 states have (on average 1.1597744360902256) internal successors, (617), 554 states have internal predecessors, (617), 117 states have call successors, (117), 108 states have call predecessors, (117), 129 states have return successors, (154), 127 states have call predecessors, (154), 117 states have call successors, (154) [2022-11-23 14:28:33,781 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 779 states to 779 states and 888 transitions. [2022-11-23 14:28:33,782 INFO L78 Accepts]: Start accepts. Automaton has 779 states and 888 transitions. Word has length 66 [2022-11-23 14:28:33,782 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:28:33,782 INFO L495 AbstractCegarLoop]: Abstraction has 779 states and 888 transitions. [2022-11-23 14:28:33,783 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 5.857142857142857) internal successors, (41), 7 states have internal predecessors, (41), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-23 14:28:33,783 INFO L276 IsEmpty]: Start isEmpty. Operand 779 states and 888 transitions. [2022-11-23 14:28:33,784 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2022-11-23 14:28:33,784 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:28:33,785 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:28:33,796 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-23 14:28:33,996 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-23 14:28:33,996 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:28:33,997 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:28:33,997 INFO L85 PathProgramCache]: Analyzing trace with hash 262552020, now seen corresponding path program 1 times [2022-11-23 14:28:33,997 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:28:33,998 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1452792167] [2022-11-23 14:28:33,998 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:28:33,998 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:28:34,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:28:34,207 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 9 proven. 6 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-23 14:28:34,207 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:28:34,208 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1452792167] [2022-11-23 14:28:34,208 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1452792167] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 14:28:34,208 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [760082171] [2022-11-23 14:28:34,208 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:28:34,208 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:28:34,209 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 14:28:34,210 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 14:28:34,237 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-23 14:28:34,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:28:34,328 INFO L263 TraceCheckSpWp]: Trace formula consists of 322 conjuncts, 30 conjunts are in the unsatisfiable core [2022-11-23 14:28:34,331 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:28:34,486 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 14 proven. 5 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-23 14:28:34,486 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 14:28:34,716 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 9 proven. 6 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-23 14:28:34,716 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [760082171] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 14:28:34,716 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1015883995] [2022-11-23 14:28:34,723 INFO L159 IcfgInterpreter]: Started Sifa with 50 locations of interest [2022-11-23 14:28:34,723 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 14:28:34,725 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 14:28:34,725 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 14:28:34,726 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 14:28:37,843 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 28 for LOIs [2022-11-23 14:28:37,846 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 27 for LOIs [2022-11-23 14:28:38,221 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 41 for LOIs [2022-11-23 14:28:38,471 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 40 for LOIs [2022-11-23 14:28:38,508 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 43 for LOIs [2022-11-23 14:28:38,517 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 41 for LOIs [2022-11-23 14:28:38,524 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 46 for LOIs [2022-11-23 14:28:38,531 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 14:28:45,058 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '19352#(and (= |timeShift___utac_acc__Specification3_spec__1_~tmp~1#1| 0) (<= 0 |old(~pumpRunning~0)|) (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~1#1|) (= |timeShift_getWaterLevel_~retValue_acc~1#1| ~waterLevel~0) (= ~head~0.offset 0) (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1|) (= 0 |timeShift___utac_acc__Specification3_spec__1_~tmp___1~0#1|) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~11#1|) (= 1 ~systemActive~0) (= |timeShift_getWaterLevel_~retValue_acc~1#1| |timeShift_getWaterLevel_#res#1|) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~11#1|) (= ~head~0.base 0) (= |#NULL.offset| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___1~0#1|) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0) (= 2 |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1|))' at error location [2022-11-23 14:28:45,058 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 14:28:45,058 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 14:28:45,059 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9, 10] total 20 [2022-11-23 14:28:45,059 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2134444766] [2022-11-23 14:28:45,059 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 14:28:45,060 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-23 14:28:45,060 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:28:45,060 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-23 14:28:45,061 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=260, Invalid=2932, Unknown=0, NotChecked=0, Total=3192 [2022-11-23 14:28:45,062 INFO L87 Difference]: Start difference. First operand 779 states and 888 transitions. Second operand has 20 states, 14 states have (on average 6.357142857142857) internal successors, (89), 16 states have internal predecessors, (89), 5 states have call successors, (23), 7 states have call predecessors, (23), 10 states have return successors, (23), 7 states have call predecessors, (23), 5 states have call successors, (23) [2022-11-23 14:28:46,235 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:28:46,235 INFO L93 Difference]: Finished difference Result 1764 states and 2043 transitions. [2022-11-23 14:28:46,236 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-23 14:28:46,236 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 14 states have (on average 6.357142857142857) internal successors, (89), 16 states have internal predecessors, (89), 5 states have call successors, (23), 7 states have call predecessors, (23), 10 states have return successors, (23), 7 states have call predecessors, (23), 5 states have call successors, (23) Word has length 72 [2022-11-23 14:28:46,237 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:28:46,243 INFO L225 Difference]: With dead ends: 1764 [2022-11-23 14:28:46,243 INFO L226 Difference]: Without dead ends: 1247 [2022-11-23 14:28:46,246 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 236 GetRequests, 162 SyntacticMatches, 10 SemanticMatches, 64 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1674 ImplicationChecksByTransitivity, 6.9s TimeCoverageRelationStatistics Valid=344, Invalid=3946, Unknown=0, NotChecked=0, Total=4290 [2022-11-23 14:28:46,247 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 250 mSDsluCounter, 120 mSDsCounter, 0 mSdLazyCounter, 1114 mSolverCounterSat, 135 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 255 SdHoareTripleChecker+Valid, 138 SdHoareTripleChecker+Invalid, 1249 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 135 IncrementalHoareTripleChecker+Valid, 1114 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-23 14:28:46,247 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [255 Valid, 138 Invalid, 1249 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [135 Valid, 1114 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-23 14:28:46,250 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1247 states. [2022-11-23 14:28:46,407 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1247 to 1132. [2022-11-23 14:28:46,409 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1132 states, 769 states have (on average 1.152145643693108) internal successors, (886), 804 states have internal predecessors, (886), 170 states have call successors, (170), 159 states have call predecessors, (170), 192 states have return successors, (225), 187 states have call predecessors, (225), 170 states have call successors, (225) [2022-11-23 14:28:46,413 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1132 states to 1132 states and 1281 transitions. [2022-11-23 14:28:46,415 INFO L78 Accepts]: Start accepts. Automaton has 1132 states and 1281 transitions. Word has length 72 [2022-11-23 14:28:46,416 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:28:46,416 INFO L495 AbstractCegarLoop]: Abstraction has 1132 states and 1281 transitions. [2022-11-23 14:28:46,416 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 14 states have (on average 6.357142857142857) internal successors, (89), 16 states have internal predecessors, (89), 5 states have call successors, (23), 7 states have call predecessors, (23), 10 states have return successors, (23), 7 states have call predecessors, (23), 5 states have call successors, (23) [2022-11-23 14:28:46,417 INFO L276 IsEmpty]: Start isEmpty. Operand 1132 states and 1281 transitions. [2022-11-23 14:28:46,418 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2022-11-23 14:28:46,419 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:28:46,419 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:28:46,425 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-23 14:28:46,625 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-23 14:28:46,625 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:28:46,625 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:28:46,625 INFO L85 PathProgramCache]: Analyzing trace with hash -1130312490, now seen corresponding path program 1 times [2022-11-23 14:28:46,626 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:28:46,626 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1996681832] [2022-11-23 14:28:46,626 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:28:46,626 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:28:46,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:28:47,396 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 0 proven. 22 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-23 14:28:47,397 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:28:47,397 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1996681832] [2022-11-23 14:28:47,397 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1996681832] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 14:28:47,397 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [218048453] [2022-11-23 14:28:47,397 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:28:47,397 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:28:47,398 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 14:28:47,399 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 14:28:47,407 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-23 14:28:47,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:28:47,506 INFO L263 TraceCheckSpWp]: Trace formula consists of 328 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-23 14:28:47,508 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:28:47,775 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 8 proven. 11 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 14:28:47,775 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 14:28:48,126 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-11-23 14:28:48,126 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [218048453] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 14:28:48,126 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [376110131] [2022-11-23 14:28:48,132 INFO L159 IcfgInterpreter]: Started Sifa with 50 locations of interest [2022-11-23 14:28:48,132 INFO L166 IcfgInterpreter]: Building call graph [2022-11-23 14:28:48,133 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-23 14:28:48,133 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-23 14:28:48,133 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-23 14:28:50,866 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 43 for LOIs [2022-11-23 14:28:50,873 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 43 for LOIs [2022-11-23 14:28:51,157 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 41 for LOIs [2022-11-23 14:28:51,403 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 25 for LOIs [2022-11-23 14:28:51,422 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 39 for LOIs [2022-11-23 14:28:51,427 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 41 for LOIs [2022-11-23 14:28:51,432 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 31 for LOIs [2022-11-23 14:28:51,434 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-23 14:28:58,113 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '24312#(and (= |timeShift___utac_acc__Specification3_spec__1_~tmp~1#1| 0) (<= 0 |old(~pumpRunning~0)|) (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~1#1|) (= |timeShift_getWaterLevel_~retValue_acc~1#1| ~waterLevel~0) (= ~head~0.offset 0) (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1|) (= 0 |timeShift___utac_acc__Specification3_spec__1_~tmp___1~0#1|) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~11#1|) (= 1 ~systemActive~0) (= |timeShift_getWaterLevel_~retValue_acc~1#1| |timeShift_getWaterLevel_#res#1|) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~11#1|) (= ~head~0.base 0) (= |#NULL.offset| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___1~0#1|) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0) (= 2 |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1|))' at error location [2022-11-23 14:28:58,113 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-23 14:28:58,114 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 14:28:58,114 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 9, 8] total 30 [2022-11-23 14:28:58,114 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [455292049] [2022-11-23 14:28:58,114 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 14:28:58,115 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-23 14:28:58,115 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:28:58,115 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-23 14:28:58,116 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=389, Invalid=4167, Unknown=0, NotChecked=0, Total=4556 [2022-11-23 14:28:58,117 INFO L87 Difference]: Start difference. First operand 1132 states and 1281 transitions. Second operand has 30 states, 26 states have (on average 4.269230769230769) internal successors, (111), 27 states have internal predecessors, (111), 12 states have call successors, (27), 9 states have call predecessors, (27), 11 states have return successors, (26), 13 states have call predecessors, (26), 12 states have call successors, (26) [2022-11-23 14:29:08,950 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:29:08,951 INFO L93 Difference]: Finished difference Result 4912 states and 6223 transitions. [2022-11-23 14:29:08,951 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 146 states. [2022-11-23 14:29:08,951 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 26 states have (on average 4.269230769230769) internal successors, (111), 27 states have internal predecessors, (111), 12 states have call successors, (27), 9 states have call predecessors, (27), 11 states have return successors, (26), 13 states have call predecessors, (26), 12 states have call successors, (26) Word has length 75 [2022-11-23 14:29:08,952 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:29:08,978 INFO L225 Difference]: With dead ends: 4912 [2022-11-23 14:29:08,979 INFO L226 Difference]: Without dead ends: 4215 [2022-11-23 14:29:08,994 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 404 GetRequests, 191 SyntacticMatches, 10 SemanticMatches, 203 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16984 ImplicationChecksByTransitivity, 12.1s TimeCoverageRelationStatistics Valid=3592, Invalid=38228, Unknown=0, NotChecked=0, Total=41820 [2022-11-23 14:29:08,995 INFO L413 NwaCegarLoop]: 121 mSDtfsCounter, 1679 mSDsluCounter, 1130 mSDsCounter, 0 mSdLazyCounter, 7864 mSolverCounterSat, 1598 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1681 SdHoareTripleChecker+Valid, 1251 SdHoareTripleChecker+Invalid, 9462 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1598 IncrementalHoareTripleChecker+Valid, 7864 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.9s IncrementalHoareTripleChecker+Time [2022-11-23 14:29:08,995 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1681 Valid, 1251 Invalid, 9462 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1598 Valid, 7864 Invalid, 0 Unknown, 0 Unchecked, 4.9s Time] [2022-11-23 14:29:09,001 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4215 states. [2022-11-23 14:29:09,407 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4215 to 2209. [2022-11-23 14:29:09,410 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2209 states, 1473 states have (on average 1.1520706042090971) internal successors, (1697), 1553 states have internal predecessors, (1697), 337 states have call successors, (337), 318 states have call predecessors, (337), 398 states have return successors, (451), 385 states have call predecessors, (451), 337 states have call successors, (451) [2022-11-23 14:29:09,414 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2209 states to 2209 states and 2485 transitions. [2022-11-23 14:29:09,415 INFO L78 Accepts]: Start accepts. Automaton has 2209 states and 2485 transitions. Word has length 75 [2022-11-23 14:29:09,415 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:29:09,415 INFO L495 AbstractCegarLoop]: Abstraction has 2209 states and 2485 transitions. [2022-11-23 14:29:09,415 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 26 states have (on average 4.269230769230769) internal successors, (111), 27 states have internal predecessors, (111), 12 states have call successors, (27), 9 states have call predecessors, (27), 11 states have return successors, (26), 13 states have call predecessors, (26), 12 states have call successors, (26) [2022-11-23 14:29:09,415 INFO L276 IsEmpty]: Start isEmpty. Operand 2209 states and 2485 transitions. [2022-11-23 14:29:09,418 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2022-11-23 14:29:09,418 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:29:09,418 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:29:09,437 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-23 14:29:09,624 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:29:09,625 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:29:09,625 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:29:09,625 INFO L85 PathProgramCache]: Analyzing trace with hash -924268008, now seen corresponding path program 1 times [2022-11-23 14:29:09,625 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:29:09,626 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [381532538] [2022-11-23 14:29:09,626 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:29:09,626 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:29:09,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:29:09,717 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 16 proven. 1 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-23 14:29:09,717 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:29:09,718 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [381532538] [2022-11-23 14:29:09,718 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [381532538] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 14:29:09,718 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1458964111] [2022-11-23 14:29:09,718 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:29:09,718 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 14:29:09,718 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 14:29:09,719 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 14:29:09,741 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-23 14:29:09,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:29:09,817 INFO L263 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 12 conjunts are in the unsatisfiable core [2022-11-23 14:29:09,819 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:29:09,928 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-23 14:29:09,929 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:29:09,929 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1458964111] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:29:09,929 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-23 14:29:09,929 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [7] total 10 [2022-11-23 14:29:09,930 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1177407217] [2022-11-23 14:29:09,930 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:29:09,931 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 14:29:09,931 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:29:09,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 14:29:09,931 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2022-11-23 14:29:09,932 INFO L87 Difference]: Start difference. First operand 2209 states and 2485 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-23 14:29:10,502 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:29:10,503 INFO L93 Difference]: Finished difference Result 5010 states and 5745 transitions. [2022-11-23 14:29:10,503 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-23 14:29:10,503 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 72 [2022-11-23 14:29:10,504 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:29:10,505 INFO L225 Difference]: With dead ends: 5010 [2022-11-23 14:29:10,505 INFO L226 Difference]: Without dead ends: 0 [2022-11-23 14:29:10,516 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 82 GetRequests, 72 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=107, Unknown=0, NotChecked=0, Total=132 [2022-11-23 14:29:10,517 INFO L413 NwaCegarLoop]: 82 mSDtfsCounter, 56 mSDsluCounter, 180 mSDsCounter, 0 mSdLazyCounter, 113 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 262 SdHoareTripleChecker+Invalid, 116 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 113 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 14:29:10,517 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 262 Invalid, 116 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 113 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 14:29:10,517 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-23 14:29:10,518 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-23 14:29:10,518 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 14:29:10,518 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-23 14:29:10,519 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 72 [2022-11-23 14:29:10,519 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:29:10,519 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-23 14:29:10,519 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-23 14:29:10,520 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-23 14:29:10,520 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-23 14:29:10,522 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-23 14:29:10,533 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-23 14:29:10,729 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-11-23 14:29:10,731 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-23 14:29:40,146 WARN L233 SmtUtils]: Spent 17.04s on a formula simplification. DAG size of input: 388 DAG size of output: 333 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2022-11-23 14:29:45,755 WARN L233 SmtUtils]: Spent 5.61s on a formula simplification. DAG size of input: 423 DAG size of output: 316 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2022-11-23 14:30:21,348 WARN L233 SmtUtils]: Spent 5.52s on a formula simplification. DAG size of input: 453 DAG size of output: 227 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-23 14:30:30,420 WARN L233 SmtUtils]: Spent 9.05s on a formula simplification. DAG size of input: 702 DAG size of output: 247 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-23 14:31:06,851 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 898 905) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= ~waterLevel~0 1))) (.cse3 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 1)) .cse2 .cse3) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2 .cse3))) [2022-11-23 14:31:06,851 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 898 905) no Hoare annotation was computed. [2022-11-23 14:31:06,851 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 805 811) no Hoare annotation was computed. [2022-11-23 14:31:06,851 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 805 811) the Hoare annotation is: true [2022-11-23 14:31:06,852 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 84 95) the Hoare annotation is: (let ((.cse2 (not (= 2 ~waterLevel~0))) (.cse3 (= ~methaneLevelCritical~0 1)) (.cse7 (not (= ~pumpRunning~0 1))) (.cse8 (not (<= ~waterLevel~0 2))) (.cse4 (not (= |old(~methaneLevelCritical~0)| 1))) (.cse5 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse1 .cse2 .cse6) (or .cse5 .cse1 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse3 .cse4 (not (<= ~waterLevel~0 1))) (or .cse1 .cse3 .cse7 .cse8 .cse4) (or .cse5 .cse0 .cse1 (not (< ~waterLevel~0 2)) .cse6))) [2022-11-23 14:31:06,852 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2022-11-23 14:31:06,852 INFO L895 garLoopResultBuilder]: At program point L911(line 911) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (and (let ((.cse7 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse7) (= |old(~waterLevel~0)| ~waterLevel~0)) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse7))) (= ~pumpRunning~0 1))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse1 .cse3) (or .cse0 .cse2 .cse6 .cse3 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse5 .cse0 .cse6) (or .cse5 .cse0 .cse6 (not (= |old(~waterLevel~0)| 2))))) [2022-11-23 14:31:06,853 INFO L895 garLoopResultBuilder]: At program point L911-1(line 911) the Hoare annotation is: (let ((.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (and (let ((.cse7 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse7) (= |old(~waterLevel~0)| ~waterLevel~0)) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse7))) (= |timeShift_isMethaneAlarm_#t~ret44#1| ~methaneLevelCritical~0) (= ~pumpRunning~0 1))) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse6 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse5 .cse0 .cse2) (or .cse5 .cse0 .cse2 (not (= |old(~waterLevel~0)| 2))) (or .cse0 .cse6 .cse1 .cse3 .cse4))) [2022-11-23 14:31:06,853 INFO L895 garLoopResultBuilder]: At program point L267(line 267) the Hoare annotation is: (let ((.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse4 .cse0 .cse2) (or .cse0 .cse5 .cse1 .cse3) (or .cse4 .cse0 .cse2 (not (= |old(~waterLevel~0)| 2))))) [2022-11-23 14:31:06,854 INFO L899 garLoopResultBuilder]: For program point L292(lines 292 298) no Hoare annotation was computed. [2022-11-23 14:31:06,855 INFO L895 garLoopResultBuilder]: At program point L288(lines 288 301) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse46 (= ~pumpRunning~0 0)) (.cse55 (= ~methaneLevelCritical~0 0)) (.cse47 (<= ~waterLevel~0 1)) (.cse56 (= 1 ~systemActive~0)) (.cse52 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1| 1)) (.cse53 (= |timeShift_processEnvironment_~tmp~8#1| ~methaneLevelCritical~0)) (.cse50 (not (= |old(~waterLevel~0)| 1))) (.cse57 (select |#memory_int| 1))) (let ((.cse3 (not (= ~methaneLevelCritical~0 1))) (.cse6 (not (= (select |#length| 12) 25))) (.cse7 (not (= (select .cse57 0) 48))) (.cse9 (not (= 9 (select |#length| 11)))) (.cse10 (not (= 9 (select |#length| 5)))) (.cse11 (not (= 30 (select |#length| 7)))) (.cse12 (not (= 31 (select |#length| 2)))) (.cse13 (not (= (select |#valid| 12) 1))) (.cse14 (not (= 2 (select |#length| 1)))) (.cse15 (not (= 9 (select |#length| 14)))) (.cse2 (and .cse50 (not (<= |old(~waterLevel~0)| 0)))) (.cse16 (not (= (select |#length| 15) 25))) (.cse17 (not (= (select |#valid| 6) 1))) (.cse18 (not (< 0 |#StackHeapBarrier|))) (.cse19 (not (= (select |#valid| 3) 1))) (.cse21 (not (= (select |#valid| 11) 1))) (.cse22 (not (= (select |#length| 9) 21))) (.cse23 (not (= 30 (select |#length| 10)))) (.cse24 (not (= (select |#valid| 15) 1))) (.cse25 (not (= (select |#length| 6) 21))) (.cse26 (not (= 1 (select |#valid| 5)))) (.cse27 (not (= (select |#length| 8) 9))) (.cse28 (not (= (select |#length| 3) 12))) (.cse29 (not (= (select |#valid| 0) 0))) (.cse31 (not (= (select .cse57 1) 0))) (.cse32 (not (= (select |#valid| 1) 1))) (.cse33 (not (= (select |#valid| 8) 1))) (.cse34 (not (= 30 (select |#length| 13)))) (.cse35 (not (= (select |#valid| 4) 1))) (.cse37 (not (= (select |#valid| 7) 1))) (.cse38 (not (= (select |#valid| 10) 1))) (.cse39 (not (= (select |#valid| 14) 1))) (.cse40 (not (= (select |#valid| 13) 1))) (.cse41 (not (= 30 (select |#length| 4)))) (.cse42 (not (= (select |#valid| 2) 1))) (.cse43 (not (= (select |#valid| 9) 1))) (.cse8 (not (= |#NULL.offset| 0))) (.cse20 (not (= ~head~0.offset 0))) (.cse36 (not (= |#NULL.base| 0))) (.cse44 (not (= ~head~0.base 0))) (.cse45 (not (= ~cleanupTimeShifts~0 4))) (.cse4 (not (= |old(~pumpRunning~0)| 1))) (.cse48 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse49 (= ~pumpRunning~0 1)) (.cse51 (and .cse0 .cse46 .cse55 .cse47 .cse56 .cse52 .cse53)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not .cse56)) (.cse30 (not .cse55))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse3 .cse5) (or (and (= |timeShift_getWaterLevel_~retValue_acc~1#1| ~waterLevel~0) (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1|) (= |timeShift_getWaterLevel_~retValue_acc~1#1| |timeShift_getWaterLevel_#res#1|)) .cse6 .cse0 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse1 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse5 .cse41 .cse42 .cse43 .cse44 .cse45 (not (<= 2 |old(~waterLevel~0)|))) (or (and .cse46 .cse47 .cse48) .cse0 .cse1 (and (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~1#1|) .cse48 .cse49) .cse30 .cse5) (or .cse0 .cse1 .cse3 (not (= |old(~waterLevel~0)| 2))) (or .cse6 .cse0 .cse7 .cse46 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse50 .cse1 .cse2 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45) (or .cse8 .cse1 (and (= |timeShift_isMethaneAlarm_~retValue_acc~10#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_isMethaneAlarm_~retValue_acc~10#1| ~methaneLevelCritical~0)) .cse20 .cse30 .cse4 .cse36 .cse51 (not (<= 0 |#StackHeapBarrier|)) .cse5 .cse44 .cse45) (or .cse1 (< |old(~waterLevel~0)| 2) .cse30 .cse4 (= ~waterLevel~0 1) .cse5) (or .cse1 .cse30 .cse4 (and .cse52 .cse53 (let ((.cse54 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse54) .cse48) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse54))) .cse49) .cse51 .cse5) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse30 .cse52)))) [2022-11-23 14:31:06,857 INFO L895 garLoopResultBuilder]: At program point L288-1(lines 273 305) the Hoare annotation is: (let ((.cse49 (not (= |old(~waterLevel~0)| 1))) (.cse45 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse43 (= ~pumpRunning~0 0)) (.cse58 (= ~methaneLevelCritical~0 0)) (.cse44 (<= ~waterLevel~0 1)) (.cse57 (= 1 ~systemActive~0)) (.cse54 (= |timeShift_processEnvironment_~tmp~8#1| ~methaneLevelCritical~0)) (.cse59 (select |#memory_int| 1))) (let ((.cse0 (not (= (select |#length| 12) 25))) (.cse2 (not (= (select .cse59 0) 48))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= 9 (select |#length| 5)))) (.cse6 (not (= 30 (select |#length| 7)))) (.cse7 (not (= 31 (select |#length| 2)))) (.cse8 (not (= (select |#valid| 12) 1))) (.cse9 (not (= 2 (select |#length| 1)))) (.cse10 (not (= 9 (select |#length| 14)))) (.cse12 (not (= (select |#length| 15) 25))) (.cse13 (not (= (select |#valid| 6) 1))) (.cse14 (not (< 0 |#StackHeapBarrier|))) (.cse15 (not (= (select |#valid| 3) 1))) (.cse16 (not (= ~head~0.offset 0))) (.cse17 (not (= (select |#valid| 11) 1))) (.cse18 (not (= (select |#length| 9) 21))) (.cse19 (not (= 30 (select |#length| 10)))) (.cse20 (not (= (select |#valid| 15) 1))) (.cse21 (not (= (select |#length| 6) 21))) (.cse22 (not (= 1 (select |#valid| 5)))) (.cse23 (not (= (select |#length| 8) 9))) (.cse24 (not (= (select |#length| 3) 12))) (.cse25 (not (= (select |#valid| 0) 0))) (.cse27 (not (= (select .cse59 1) 0))) (.cse28 (not (= (select |#valid| 1) 1))) (.cse29 (not (= (select |#valid| 8) 1))) (.cse30 (not (= 30 (select |#length| 13)))) (.cse31 (not (= (select |#valid| 4) 1))) (.cse32 (not (= |#NULL.base| 0))) (.cse33 (not (= (select |#valid| 7) 1))) (.cse34 (not (= (select |#valid| 10) 1))) (.cse35 (not (= (select |#valid| 14) 1))) (.cse36 (not (= (select |#valid| 13) 1))) (.cse38 (not (= 30 (select |#length| 4)))) (.cse39 (not (= (select |#valid| 2) 1))) (.cse40 (not (= (select |#valid| 9) 1))) (.cse41 (not (= ~head~0.base 0))) (.cse42 (not (= ~cleanupTimeShifts~0 4))) (.cse48 (and .cse1 .cse43 .cse58 .cse44 .cse57 .cse54)) (.cse46 (and (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~1#1|) .cse45 (= ~pumpRunning~0 1))) (.cse51 (< |old(~waterLevel~0)| 2)) (.cse56 (= ~waterLevel~0 1)) (.cse50 (and .cse49 (not (<= |old(~waterLevel~0)| 0)))) (.cse26 (not .cse58)) (.cse11 (not .cse57)) (.cse53 (not (= |timeShift___utac_acc__Specification3_spec__1_~tmp~1#1| 0))) (.cse47 (not (= |old(~pumpRunning~0)| 1))) (.cse52 (not (= ~methaneLevelCritical~0 1))) (.cse37 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 (and (= |timeShift_getWaterLevel_~retValue_acc~1#1| ~waterLevel~0) (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1|) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~11#1|) (= |timeShift_getWaterLevel_~retValue_acc~1#1| |timeShift_getWaterLevel_#res#1|) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~11#1|) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___1~0#1|)) .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 (not (<= 2 |old(~waterLevel~0)|))) (or (and .cse43 .cse44 .cse45) .cse1 .cse11 .cse46 .cse26 .cse37) (or .cse3 .cse11 (and (= |timeShift_isMethaneAlarm_~retValue_acc~10#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_isMethaneAlarm_~retValue_acc~10#1| ~methaneLevelCritical~0)) .cse16 .cse26 .cse47 .cse32 (not (<= 0 |#StackHeapBarrier|)) .cse37 .cse48 .cse41 .cse42) (or .cse0 .cse1 .cse2 .cse43 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse49 .cse11 .cse50 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse38 .cse39 .cse40 .cse41 .cse42) (or .cse1 .cse11 (not .cse51) .cse46 .cse52 (and .cse43 .cse53 .cse45)) (or .cse11 .cse26 .cse47 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse54 (let ((.cse55 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse55) .cse45) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse55)))) .cse37 .cse48) (or .cse11 .cse51 .cse47 .cse52 .cse56 .cse37) (or .cse1 .cse11 .cse46 .cse52 (not (= |old(~waterLevel~0)| 2))) (or .cse11 .cse51 .cse26 .cse47 .cse56 .cse37) (or .cse1 .cse43 .cse11 .cse50 .cse26 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1| 1)) (or .cse11 (and .cse43 .cse44 .cse53 (= |timeShift_processEnvironment_~tmp~8#1| 1)) .cse47 .cse52 .cse37)))) [2022-11-23 14:31:06,858 INFO L895 garLoopResultBuilder]: At program point L280(line 280) the Hoare annotation is: (let ((.cse13 (= ~pumpRunning~0 1)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 0)) (.cse24 (= ~methaneLevelCritical~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse25 (= 1 ~systemActive~0)) (.cse10 (= |timeShift_processEnvironment_~tmp~8#1| ~methaneLevelCritical~0))) (let ((.cse17 (not (= |#NULL.offset| 0))) (.cse18 (not (= ~head~0.offset 0))) (.cse19 (not (= |#NULL.base| 0))) (.cse15 (and .cse1 .cse6 .cse24 .cse7 .cse25 .cse10)) (.cse20 (not (= ~head~0.base 0))) (.cse21 (not (= ~cleanupTimeShifts~0 4))) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse8 (not (= |old(~pumpRunning~0)| 1))) (.cse23 (= ~waterLevel~0 1)) (.cse22 (< |old(~waterLevel~0)| 2)) (.cse9 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (and .cse6 .cse12)) (.cse3 (not .cse25)) (.cse14 (not .cse24)) (.cse5 (and .cse12 .cse13))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (and .cse6 .cse7 (= |timeShift_processEnvironment_~tmp~8#1| 1)) .cse3 .cse8 .cse4 .cse9) (or .cse3 (and .cse10 (let ((.cse11 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse11) .cse12) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse11))) .cse13) .cse14 .cse8 .cse9 .cse15) (let ((.cse16 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) .cse1 (not (= (select .cse16 0) 48)) .cse6 .cse17 (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) .cse3 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) .cse18 (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse14 (not (= (select .cse16 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) .cse19 (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (not (= (select |#valid| 9) 1)) .cse20 .cse21)) (or .cse17 .cse3 (and (= |timeShift_isMethaneAlarm_~retValue_acc~10#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_isMethaneAlarm_~retValue_acc~10#1| ~methaneLevelCritical~0)) .cse18 .cse14 .cse8 .cse19 (not (<= 0 |#StackHeapBarrier|)) .cse9 .cse15 .cse20 .cse21) (or .cse3 .cse22 .cse8 .cse4 .cse23 .cse9) (or .cse1 .cse3 .cse4 (not (= |old(~waterLevel~0)| 2)) .cse5) (or .cse3 .cse22 .cse14 .cse8 .cse23 .cse9) (or .cse1 .cse3 .cse22 .cse14 .cse9 .cse5) (or .cse0 .cse1 .cse2 .cse3 .cse14 .cse5)))) [2022-11-23 14:31:06,859 INFO L899 garLoopResultBuilder]: For program point L792-1(lines 792 798) no Hoare annotation was computed. [2022-11-23 14:31:06,859 INFO L899 garLoopResultBuilder]: For program point L280-1(line 280) no Hoare annotation was computed. [2022-11-23 14:31:06,859 INFO L895 garLoopResultBuilder]: At program point L879(line 879) the Hoare annotation is: (let ((.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (= |timeShift_processEnvironment_~tmp~8#1| ~methaneLevelCritical~0)) (.cse3 (= ~pumpRunning~0 1)) (.cse7 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (not (= |old(~waterLevel~0)| 1)) (not (<= |old(~waterLevel~0)| 0))) (and .cse1 (let ((.cse2 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse2) (= |old(~waterLevel~0)| ~waterLevel~0)) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse2))) .cse3) .cse4 .cse5) (or .cse0 .cse5 .cse6 .cse7) (or .cse8 .cse0 .cse4 .cse7) (or (not (= |#NULL.offset| 0)) .cse0 (and (= |timeShift_isMethaneAlarm_~retValue_acc~10#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_isMethaneAlarm_~retValue_acc~10#1| ~methaneLevelCritical~0)) (not (= ~head~0.offset 0)) .cse4 .cse5 (not (= |#NULL.base| 0)) (not (<= 0 |#StackHeapBarrier|)) .cse7 (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4))) (or (not (<= |old(~waterLevel~0)| 1)) .cse8 .cse0 .cse6) (or .cse8 .cse0 .cse6 (not (= |old(~waterLevel~0)| 2))) (or .cse0 (< |old(~waterLevel~0)| 2) .cse4 .cse5 (and .cse1 (= ~waterLevel~0 1) .cse3) .cse7))) [2022-11-23 14:31:06,860 INFO L895 garLoopResultBuilder]: At program point L875(line 875) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse4) (or .cse1 .cse2 .cse5 .cse3) (or .cse0 .cse1 .cse4 (not (= |old(~waterLevel~0)| 2))) (or (and (= |timeShift_processEnvironment_~tmp~8#1| 1) (let ((.cse6 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse6) (= |old(~waterLevel~0)| ~waterLevel~0)) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse6))) (= ~pumpRunning~0 1)) .cse1 .cse5 .cse4 .cse3))) [2022-11-23 14:31:06,860 INFO L895 garLoopResultBuilder]: At program point L884(line 884) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse0 .cse2 .cse3) (or .cse0 .cse6 .cse1 .cse3) (or .cse4 .cse5 .cse0 .cse6 .cse3))) [2022-11-23 14:31:06,861 INFO L895 garLoopResultBuilder]: At program point L884-1(lines 865 889) the Hoare annotation is: (let ((.cse13 (= ~pumpRunning~0 1)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 0)) (.cse24 (= ~methaneLevelCritical~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse25 (= 1 ~systemActive~0)) (.cse10 (= |timeShift_processEnvironment_~tmp~8#1| ~methaneLevelCritical~0))) (let ((.cse17 (not (= |#NULL.offset| 0))) (.cse18 (not (= ~head~0.offset 0))) (.cse19 (not (= |#NULL.base| 0))) (.cse15 (and .cse1 .cse6 .cse24 .cse7 .cse25 .cse10)) (.cse20 (not (= ~head~0.base 0))) (.cse21 (not (= ~cleanupTimeShifts~0 4))) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse8 (not (= |old(~pumpRunning~0)| 1))) (.cse23 (= ~waterLevel~0 1)) (.cse22 (< |old(~waterLevel~0)| 2)) (.cse9 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (and .cse6 .cse12)) (.cse3 (not .cse25)) (.cse14 (not .cse24)) (.cse5 (and .cse12 .cse13))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (and .cse6 .cse7 (= |timeShift_processEnvironment_~tmp~8#1| 1)) .cse3 .cse8 .cse4 .cse9) (or .cse3 (and .cse10 (let ((.cse11 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse11) .cse12) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse11))) .cse13) .cse14 .cse8 .cse9 .cse15) (let ((.cse16 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) .cse1 (not (= (select .cse16 0) 48)) .cse6 .cse17 (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) .cse3 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) .cse18 (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse14 (not (= (select .cse16 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) .cse19 (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (not (= (select |#valid| 9) 1)) .cse20 .cse21)) (or .cse17 .cse3 (and (= |timeShift_isMethaneAlarm_~retValue_acc~10#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_isMethaneAlarm_~retValue_acc~10#1| ~methaneLevelCritical~0)) .cse18 .cse14 .cse8 .cse19 (not (<= 0 |#StackHeapBarrier|)) .cse9 .cse15 .cse20 .cse21) (or .cse3 .cse22 .cse8 .cse4 .cse23 .cse9) (or .cse1 .cse3 .cse4 (not (= |old(~waterLevel~0)| 2)) .cse5) (or .cse3 .cse22 .cse14 .cse8 .cse23 .cse9) (or .cse1 .cse3 .cse22 .cse14 .cse9 .cse5) (or .cse0 .cse1 .cse2 .cse3 .cse14 .cse5)))) [2022-11-23 14:31:06,862 INFO L899 garLoopResultBuilder]: For program point L785-1(lines 784 803) no Hoare annotation was computed. [2022-11-23 14:31:06,863 INFO L895 garLoopResultBuilder]: At program point L282(lines 282 302) the Hoare annotation is: (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 1)) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (= ~pumpRunning~0 0)) (.cse25 (= ~methaneLevelCritical~0 0)) (.cse22 (<= ~waterLevel~0 1)) (.cse24 (= 1 ~systemActive~0)) (.cse1 (= |timeShift_processEnvironment_~tmp~8#1| ~methaneLevelCritical~0))) (let ((.cse12 (not (= |#NULL.offset| 0))) (.cse13 (not (= ~head~0.offset 0))) (.cse14 (not (= |#NULL.base| 0))) (.cse8 (and .cse9 .cse11 .cse25 .cse22 .cse24 .cse1)) (.cse15 (not (= ~head~0.base 0))) (.cse16 (not (= ~cleanupTimeShifts~0 4))) (.cse17 (< |old(~waterLevel~0)| 2)) (.cse19 (= ~waterLevel~0 1)) (.cse5 (not .cse25)) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse21 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not .cse24)) (.cse20 (and (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~1#1|) .cse3 .cse4)) (.cse18 (not (= ~methaneLevelCritical~0 1))) (.cse23 (not (= |timeShift___utac_acc__Specification3_spec__1_~tmp~1#1| 0)))) (and (or .cse0 (and .cse1 (let ((.cse2 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse2) .cse3) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse2))) .cse4) .cse5 .cse6 .cse7 .cse8) (let ((.cse10 (select |#memory_int| 1))) (or (not (= (select |#length| 12) 25)) .cse9 (not (= (select .cse10 0) 48)) .cse11 .cse12 (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) (not (= |old(~waterLevel~0)| 1)) .cse0 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) .cse13 (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse5 (not (= (select .cse10 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) .cse14 (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (not (= (select |#valid| 9) 1)) .cse15 .cse16)) (or .cse12 .cse0 (and (= |timeShift_isMethaneAlarm_~retValue_acc~10#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_isMethaneAlarm_~retValue_acc~10#1| ~methaneLevelCritical~0)) .cse13 .cse5 .cse6 .cse14 (not (<= 0 |#StackHeapBarrier|)) .cse7 .cse8 .cse15 .cse16) (or .cse0 .cse17 .cse6 .cse18 .cse19 .cse7) (or .cse9 .cse0 .cse20 .cse18 (not (= |old(~waterLevel~0)| 2))) (or .cse9 .cse0 .cse20 .cse17 .cse5 .cse7) (or .cse0 .cse17 .cse5 .cse6 .cse19 .cse7) (or .cse21 .cse9 (and .cse11 .cse3) .cse0 .cse20 .cse5) (or .cse0 (and .cse11 .cse22 .cse23 (= |timeShift_processEnvironment_~tmp~8#1| 1)) .cse6 .cse18 .cse7) (or .cse21 .cse9 .cse0 .cse20 .cse18 (and .cse11 .cse23 .cse3))))) [2022-11-23 14:31:06,863 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 781 804) the Hoare annotation is: (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (= |old(~pumpRunning~0)| 1))) (.cse6 (and .cse8 (= ~pumpRunning~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) .cse8)) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse5 .cse3 .cse4 .cse6) (or .cse2 .cse7 .cse5 .cse4 .cse6) (or .cse0 .cse1 .cse2 .cse7 .cse4)))) [2022-11-23 14:31:06,864 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 781 804) no Hoare annotation was computed. [2022-11-23 14:31:06,864 INFO L899 garLoopResultBuilder]: For program point L873(lines 873 881) no Hoare annotation was computed. [2022-11-23 14:31:06,864 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 267) no Hoare annotation was computed. [2022-11-23 14:31:06,864 INFO L899 garLoopResultBuilder]: For program point L869(lines 869 886) no Hoare annotation was computed. [2022-11-23 14:31:06,864 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 163 192) no Hoare annotation was computed. [2022-11-23 14:31:06,864 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 163 192) the Hoare annotation is: true [2022-11-23 14:31:06,865 INFO L902 garLoopResultBuilder]: At program point L188(lines 163 192) the Hoare annotation is: true [2022-11-23 14:31:06,865 INFO L899 garLoopResultBuilder]: For program point L184(line 184) no Hoare annotation was computed. [2022-11-23 14:31:06,865 INFO L899 garLoopResultBuilder]: For program point L177(lines 177 181) no Hoare annotation was computed. [2022-11-23 14:31:06,865 INFO L902 garLoopResultBuilder]: At program point L177-1(lines 177 181) the Hoare annotation is: true [2022-11-23 14:31:06,865 INFO L902 garLoopResultBuilder]: At program point L173-2(lines 173 187) the Hoare annotation is: true [2022-11-23 14:31:06,866 INFO L902 garLoopResultBuilder]: At program point L169(line 169) the Hoare annotation is: true [2022-11-23 14:31:06,866 INFO L899 garLoopResultBuilder]: For program point L169-1(line 169) no Hoare annotation was computed. [2022-11-23 14:31:06,866 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 96 104) the Hoare annotation is: true [2022-11-23 14:31:06,866 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 96 104) no Hoare annotation was computed. [2022-11-23 14:31:06,866 INFO L899 garLoopResultBuilder]: For program point L729(lines 729 735) no Hoare annotation was computed. [2022-11-23 14:31:06,866 INFO L899 garLoopResultBuilder]: For program point L729-1(lines 729 735) no Hoare annotation was computed. [2022-11-23 14:31:06,867 INFO L895 garLoopResultBuilder]: At program point L767(lines 718 768) the Hoare annotation is: false [2022-11-23 14:31:06,867 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-23 14:31:06,867 INFO L899 garLoopResultBuilder]: For program point L739(lines 739 745) no Hoare annotation was computed. [2022-11-23 14:31:06,867 INFO L895 garLoopResultBuilder]: At program point L739-1(lines 739 745) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse4 (= ~pumpRunning~0 1)) (.cse7 (= 2 ~waterLevel~0)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= ~methaneLevelCritical~0 0)) (.cse8 (<= ~waterLevel~0 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse5 .cse2 .cse3 .cse4) (and .cse6 .cse7 .cse1 .cse5 .cse2) (and .cse6 .cse7 .cse0 .cse1 .cse2) (and .cse6 .cse8 .cse1 .cse5 .cse2) (and .cse6 .cse0 .cse8 .cse1 .cse2))) [2022-11-23 14:31:06,867 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-23 14:31:06,868 INFO L895 garLoopResultBuilder]: At program point L764(lines 719 766) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse4 (= ~pumpRunning~0 1)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= ~methaneLevelCritical~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse5 .cse2 .cse3 .cse4) (and .cse6 .cse7 .cse1 .cse5 .cse2) (and .cse6 .cse0 .cse7 .cse1 .cse2))) [2022-11-23 14:31:06,868 INFO L895 garLoopResultBuilder]: At program point L731(line 731) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 1)) (.cse0 (= ~methaneLevelCritical~0 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse6 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse5 .cse2 .cse3 .cse4) (and .cse6 .cse0 .cse1 .cse2 .cse3) (and .cse6 (= 2 ~waterLevel~0) .cse1 .cse5 .cse2) (and .cse6 (<= ~waterLevel~0 1) .cse1 .cse5 .cse2))) [2022-11-23 14:31:06,869 INFO L895 garLoopResultBuilder]: At program point L249(lines 249 256) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (and (= (select |#length| 15) 25) (= 9 (select |#length| 5)) (= (select |#length| 9) 21) (= 30 (select |#length| 7)) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_main_~tmp~0#1|) (= (select |#valid| 9) 1) (= (select |#length| 12) 25) (= (select |#valid| 11) 1) (= ~methaneLevelCritical~0 0) (= 30 (select |#length| 4)) (= |ULTIMATE.start_valid_product_~retValue_acc~6#1| |ULTIMATE.start_valid_product_#res#1|) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= 2 (select |#length| 1)) (= (select |#length| 8) 9) (= (select |#valid| 3) 1) (= (select |#valid| 7) 1) (= 30 (select |#length| 13)) (= 1 ~systemActive~0) (= 30 (select |#length| 10)) (= (select |#valid| 12) 1) (= (select |#valid| 4) 1) (= (select |#valid| 1) 1) (= (select |#length| 6) 21) (= (select |#valid| 14) 1) (= 9 (select |#length| 14)) (= (select |#valid| 0) 0) (= ~head~0.base 0) (= (select |#valid| 2) 1) (= |#NULL.offset| 0) (= 9 (select |#length| 11)) (= ~waterLevel~0 1) (= (select .cse0 0) 48) (= (select |#valid| 6) 1) (= (select .cse0 1) 0) (= (select |#valid| 10) 1) (= (select |#valid| 8) 1) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))) [2022-11-23 14:31:06,869 INFO L902 garLoopResultBuilder]: At program point L249-2(lines 249 256) the Hoare annotation is: true [2022-11-23 14:31:06,869 INFO L895 garLoopResultBuilder]: At program point L757-2(lines 749 762) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse4 (= ~pumpRunning~0 1)) (.cse7 (= 2 ~waterLevel~0)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= ~methaneLevelCritical~0 0)) (.cse8 (<= ~waterLevel~0 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse5 .cse2 .cse3 .cse4) (and .cse6 .cse7 .cse1 .cse5 .cse2) (and .cse6 .cse7 .cse0 .cse1 .cse2) (and .cse6 .cse8 .cse1 .cse5 .cse2) (and .cse6 .cse0 .cse8 .cse1 .cse2))) [2022-11-23 14:31:06,869 INFO L899 garLoopResultBuilder]: For program point L720(lines 719 766) no Hoare annotation was computed. [2022-11-23 14:31:06,870 INFO L895 garLoopResultBuilder]: At program point L741(line 741) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 1)) (.cse0 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse5 .cse2 .cse3 .cse4) (and .cse6 .cse0 .cse1 .cse2 .cse3) (and .cse6 .cse1 .cse5 .cse2 .cse3))) [2022-11-23 14:31:06,870 INFO L902 garLoopResultBuilder]: At program point L770(lines 709 774) the Hoare annotation is: true [2022-11-23 14:31:06,870 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 813 837) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not (<= ~waterLevel~0 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse4 (not (= ~methaneLevelCritical~0 1))) (or .cse2 .cse3 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 1)))) [2022-11-23 14:31:06,870 INFO L895 garLoopResultBuilder]: At program point L832(line 832) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) (or .cse0 .cse1 .cse3 (not (<= ~waterLevel~0 2))) (or .cse0 .cse1 .cse2 .cse4) (or .cse1 .cse3 (not (= |old(~pumpRunning~0)| 1)) .cse4 (= ~pumpRunning~0 1)))) [2022-11-23 14:31:06,871 INFO L899 garLoopResultBuilder]: For program point L832-1(lines 813 837) no Hoare annotation was computed. [2022-11-23 14:31:06,871 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 813 837) no Hoare annotation was computed. [2022-11-23 14:31:06,872 INFO L895 garLoopResultBuilder]: At program point L827(line 827) the Hoare annotation is: (let ((.cse6 (<= ~waterLevel~0 1))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= ~waterLevel~0 2))) (.cse5 (and (= ~pumpRunning~0 0) (<= 0 |processEnvironment__wrappee__highWaterSensor_~tmp~6#1|) .cse6)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (let ((.cse1 (select |#memory_int| 1))) (or (not (= ~waterLevel~0 1)) (not (= (select |#length| 12) 25)) .cse0 (not (= (select .cse1 0) 48)) (not (= |#NULL.offset| 0)) (not (= 9 (select |#length| 11))) (not (= 9 (select |#length| 5))) (not (= 30 (select |#length| 7))) (not (= 31 (select |#length| 2))) (not (= (select |#valid| 12) 1)) (not (= 2 (select |#length| 1))) (not (= 9 (select |#length| 14))) .cse2 (not (= (select |#length| 15) 25)) (not (= (select |#valid| 6) 1)) (not (< 0 |#StackHeapBarrier|)) (not (= (select |#valid| 3) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 11) 1)) (not (= (select |#length| 9) 21)) (not (= 30 (select |#length| 10))) (not (= (select |#valid| 15) 1)) (not (= (select |#length| 6) 21)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~2#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~12#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~2#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~12#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 8) 9)) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) .cse3 (not (= (select .cse1 1) 0)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 8) 1)) (not (= 30 (select |#length| 13))) (not (= (select |#valid| 4) 1)) (not (= |#NULL.base| 0)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select |#valid| 14) 1)) (not (= (select |#valid| 13) 1)) (not (= 30 (select |#length| 4))) (not (= (select |#valid| 2) 1)) (not (= (select |#valid| 9) 1)) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)))) (or .cse0 .cse2 .cse4 (not (= ~methaneLevelCritical~0 1)) .cse5) (or .cse0 .cse2 .cse3 .cse4 .cse5) (or .cse2 .cse3 (not (= |old(~pumpRunning~0)| 1)) (not .cse6))))) [2022-11-23 14:31:06,873 INFO L895 garLoopResultBuilder]: At program point L821(lines 821 829) the Hoare annotation is: (let ((.cse52 (<= ~waterLevel~0 1))) (let ((.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse53 (not .cse52)) (.cse54 (select |#memory_int| 1))) (let ((.cse5 (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 1)) (.cse6 (not (= (select |#length| 12) 25))) (.cse8 (not (= (select .cse54 0) 48))) (.cse9 (not (= |#NULL.offset| 0))) (.cse10 (not (= 9 (select |#length| 11)))) (.cse11 (not (= 9 (select |#length| 5)))) (.cse12 (not (= 30 (select |#length| 7)))) (.cse13 (not (= 31 (select |#length| 2)))) (.cse14 (not (= (select |#valid| 12) 1))) (.cse15 (not (= 2 (select |#length| 1)))) (.cse16 (not (= 9 (select |#length| 14)))) (.cse17 (not (= (select |#length| 15) 25))) (.cse41 (let ((.cse57 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 0))) (or (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 1) .cse57) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (not .cse57))))) (.cse42 (let ((.cse56 (< ~waterLevel~0 2)) (.cse55 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~2#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|))) (or (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~2#1| 1) .cse55 .cse56) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~2#1| 0) (not .cse56) .cse55)))) (.cse43 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~12#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (.cse44 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1|)) (.cse45 (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (.cse18 (not (= (select |#valid| 6) 1))) (.cse1 (not (= 2 ~waterLevel~0))) (.cse19 (not (< 0 |#StackHeapBarrier|))) (.cse20 (not (= (select |#valid| 3) 1))) (.cse21 (not (= ~head~0.offset 0))) (.cse22 (not (= (select |#valid| 11) 1))) (.cse2 (and .cse7 .cse53)) (.cse23 (not (= (select |#length| 9) 21))) (.cse24 (not (= 30 (select |#length| 10)))) (.cse25 (not (= (select |#valid| 15) 1))) (.cse26 (not (= (select |#length| 6) 21))) (.cse27 (not (= 1 (select |#valid| 5)))) (.cse28 (not (= (select |#length| 8) 9))) (.cse29 (not (= (select |#length| 3) 12))) (.cse30 (not (= (select |#valid| 0) 0))) (.cse31 (not (= (select .cse54 1) 0))) (.cse32 (not (= (select |#valid| 1) 1))) (.cse33 (not (= (select |#valid| 8) 1))) (.cse34 (not (= 30 (select |#length| 13)))) (.cse35 (not (= (select |#valid| 4) 1))) (.cse36 (not (= |#NULL.base| 0))) (.cse37 (not (= (select |#valid| 7) 1))) (.cse38 (not (= (select |#valid| 10) 1))) (.cse39 (not (= (select |#valid| 14) 1))) (.cse40 (not (= (select |#valid| 13) 1))) (.cse46 (not (= 30 (select |#length| 4)))) (.cse47 (not (= (select |#valid| 2) 1))) (.cse48 (not (= (select |#valid| 9) 1))) (.cse49 (not (= ~head~0.base 0))) (.cse50 (not (= ~cleanupTimeShifts~0 4))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (= ~pumpRunning~0 0)) (.cse51 (<= 0 |processEnvironment__wrappee__highWaterSensor_~tmp~6#1|)) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5)) (or (not (= ~waterLevel~0 1)) .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse0 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse3 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~12#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|) .cse41 .cse42 .cse43 .cse44 .cse45) .cse46 .cse47 .cse48 .cse49 .cse50) (or .cse7 .cse0 (not (<= ~waterLevel~0 2)) (not (= ~methaneLevelCritical~0 1)) (and .cse4 .cse51 (or .cse52 .cse5))) (or .cse6 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse0 .cse17 (and .cse41 .cse42 .cse43 .cse44 .cse45) .cse18 .cse1 .cse19 .cse20 .cse21 .cse22 .cse2 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse3 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse46 .cse47 .cse48 .cse49 .cse50) (or .cse0 .cse3 (not (= |old(~pumpRunning~0)| 1)) .cse53) (or .cse7 .cse0 (and .cse4 .cse51) .cse3 .cse53))))) [2022-11-23 14:31:06,873 INFO L895 garLoopResultBuilder]: At program point L817(lines 817 834) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not (<= ~waterLevel~0 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse4 (not (= ~methaneLevelCritical~0 1))) (or .cse2 .cse3 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 1)))) [2022-11-23 14:31:06,874 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2022-11-23 14:31:06,874 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 72 83) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= ~pumpRunning~0 1))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse2 .cse3 .cse4) (or .cse0 .cse6 .cse1 .cse3 .cse4) (or .cse5 .cse0 .cse6 .cse3 .cse4))) [2022-11-23 14:31:06,874 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 839 863) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not (<= ~waterLevel~0 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse4 (not (= ~methaneLevelCritical~0 1))) (or .cse2 .cse3 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 1)))) [2022-11-23 14:31:06,875 INFO L895 garLoopResultBuilder]: At program point L853(line 853) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) (or .cse0 .cse1 .cse3 (not (<= ~waterLevel~0 2))) (or .cse0 .cse1 .cse2 .cse4) (or .cse1 .cse3 (not (= |old(~pumpRunning~0)| 1)) .cse4 (= ~pumpRunning~0 1)))) [2022-11-23 14:31:06,875 INFO L895 garLoopResultBuilder]: At program point L849(line 849) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) (or .cse0 .cse1 .cse3 (not (<= ~waterLevel~0 2))) (or .cse0 .cse1 .cse2 .cse4) (or .cse1 .cse3 (not (= |old(~pumpRunning~0)| 1)) .cse4 (= ~pumpRunning~0 1)))) [2022-11-23 14:31:06,875 INFO L899 garLoopResultBuilder]: For program point L847(lines 847 855) no Hoare annotation was computed. [2022-11-23 14:31:06,875 INFO L895 garLoopResultBuilder]: At program point L843(lines 843 860) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not (<= ~waterLevel~0 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse4 (not (= ~methaneLevelCritical~0 1))) (or .cse2 .cse3 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 1)))) [2022-11-23 14:31:06,876 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 839 863) no Hoare annotation was computed. [2022-11-23 14:31:06,876 INFO L895 garLoopResultBuilder]: At program point L858(line 858) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not (<= ~waterLevel~0 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse4 (not (= ~methaneLevelCritical~0 1))) (or .cse2 .cse3 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1))))) [2022-11-23 14:31:06,876 INFO L899 garLoopResultBuilder]: For program point L858-1(lines 839 863) no Hoare annotation was computed. [2022-11-23 14:31:06,880 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:31:06,883 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-23 14:31:06,962 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 02:31:06 BoogieIcfgContainer [2022-11-23 14:31:06,962 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-23 14:31:06,963 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-23 14:31:06,963 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-23 14:31:06,963 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-23 14:31:06,964 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:27:41" (3/4) ... [2022-11-23 14:31:06,967 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-23 14:31:06,974 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-23 14:31:06,974 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-23 14:31:06,974 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-23 14:31:06,975 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-23 14:31:06,975 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-23 14:31:06,975 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-23 14:31:06,975 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 14:31:06,976 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-23 14:31:06,976 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-11-23 14:31:06,984 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2022-11-23 14:31:06,984 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 13 nodes and edges [2022-11-23 14:31:06,985 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-23 14:31:06,986 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-23 14:31:06,986 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-23 14:31:07,017 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && pumpRunning == 0) && \result == tmp) && \valid[9] == 1) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && retValue_acc == \result) && 31 == unknown-#length-unknown[2]) && head == 0) && tmp == 1) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && 30 == unknown-#length-unknown[13]) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[1][0] == 48) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 [2022-11-23 14:31:07,018 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) [2022-11-23 14:31:07,019 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) && ((((((pumpRunning == 0 && waterLevel <= 1) && tmp == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || ((tmp == methaneLevelCritical && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp == methaneLevelCritical))) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || pumpRunning == 0) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((((((((!(#NULL == 0) || !(1 == systemActive)) || (retValue_acc == \result && retValue_acc == methaneLevelCritical)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp == methaneLevelCritical)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((!(1 == systemActive) || \old(waterLevel) < 2) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((((!(1 == systemActive) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) [2022-11-23 14:31:07,020 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) || pumpRunning == 1) [2022-11-23 14:31:07,020 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || ((((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))) && aux-isMethaneLevelCritical()-aux == methaneLevelCritical) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))) && aux-isMethaneLevelCritical()-aux == methaneLevelCritical) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) [2022-11-23 14:31:07,021 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) || pumpRunning == 1) [2022-11-23 14:31:07,021 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(1 == systemActive) || ((tmp == methaneLevelCritical && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp == methaneLevelCritical)) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || pumpRunning == 0) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((((((((!(#NULL == 0) || !(1 == systemActive)) || (retValue_acc == \result && retValue_acc == methaneLevelCritical)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp == methaneLevelCritical)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((!(1 == systemActive) || \old(waterLevel) < 2) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 0))) && ((((!(1 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0)) && tmp == 1)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || ((pumpRunning == 0 && !(tmp == 0)) && \old(waterLevel) == waterLevel)) [2022-11-23 14:31:07,021 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || (((((retValue_acc == waterLevel && \result == tmp___0) && \result == retValue_acc) && retValue_acc == \result) && pumpRunning == retValue_acc) && \result == tmp___1)) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(\old(waterLevel) <= 2)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel))) && (((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((((((((!(#NULL == 0) || !(1 == systemActive)) || (retValue_acc == \result && retValue_acc == methaneLevelCritical)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp == methaneLevelCritical)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || pumpRunning == 0) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (!(\old(waterLevel) == 1) && !(\old(waterLevel) <= 0))) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) < 2)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || ((pumpRunning == 0 && !(tmp == 0)) && \old(waterLevel) == waterLevel))) && (((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))))) || !(\old(waterLevel) <= 2)) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp == methaneLevelCritical))) && (((((!(1 == systemActive) || \old(waterLevel) < 2) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2))) && (((((!(1 == systemActive) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || (!(\old(waterLevel) == 1) && !(\old(waterLevel) <= 0))) || !(methaneLevelCritical == 0)) || tmp___0 <= 1)) && ((((!(1 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0)) && tmp == 1)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) [2022-11-23 14:31:07,023 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (!(\old(waterLevel) == 1) && !(\old(waterLevel) <= 0))) || !(methaneLevelCritical == 1)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && ((((((((((((((((((((((((((((((((((((((((((((((retValue_acc == waterLevel && \result == tmp___0) && retValue_acc == \result) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(\old(waterLevel) <= 2)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && (((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || pumpRunning == 0) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (!(\old(waterLevel) == 1) && !(\old(waterLevel) <= 0))) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((((((((!(#NULL == 0) || !(1 == systemActive)) || (retValue_acc == \result && retValue_acc == methaneLevelCritical)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == methaneLevelCritical)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((!(1 == systemActive) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (((tmp___0 <= 1 && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == 1)) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || tmp___0 <= 1) [2022-11-23 14:31:07,024 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2)) [2022-11-23 14:31:07,024 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(2 == waterLevel)) || (!(\old(pumpRunning) == 0) && !(waterLevel <= 1))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && tmp == 1)) && (((((((((((((((((((((((((((((((((((((((((((!(waterLevel == 1) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || (((((retValue_acc == tmp___0 && ((tmp___0 == 1 && tmp == 0) || (tmp___0 == 0 && !(tmp == 0)))) && (((retValue_acc == 1 && retValue_acc == \result) && waterLevel < 2) || ((retValue_acc == 0 && !(waterLevel < 2)) && retValue_acc == \result))) && retValue_acc == \result) && \result == tmp) && tmp == \result)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || ((pumpRunning == 0 && 0 <= tmp) && (waterLevel <= 1 || tmp == 1)))) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || ((((((tmp___0 == 1 && tmp == 0) || (tmp___0 == 0 && !(tmp == 0))) && (((retValue_acc == 1 && retValue_acc == \result) && waterLevel < 2) || ((retValue_acc == 0 && !(waterLevel < 2)) && retValue_acc == \result))) && retValue_acc == \result) && \result == tmp) && tmp == \result)) || !(\valid[6] == 1)) || !(2 == waterLevel)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || (!(\old(pumpRunning) == 0) && !(waterLevel <= 1))) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && 0 <= tmp)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) [2022-11-23 14:31:07,053 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/witness.graphml [2022-11-23 14:31:07,054 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-23 14:31:07,054 INFO L158 Benchmark]: Toolchain (without parser) took 206828.60ms. Allocated memory was 146.8MB in the beginning and 1.1GB in the end (delta: 916.5MB). Free memory was 113.6MB in the beginning and 760.5MB in the end (delta: -646.9MB). Peak memory consumption was 272.5MB. Max. memory is 16.1GB. [2022-11-23 14:31:07,055 INFO L158 Benchmark]: CDTParser took 0.83ms. Allocated memory is still 146.8MB. Free memory is still 88.6MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-23 14:31:07,055 INFO L158 Benchmark]: CACSL2BoogieTranslator took 553.76ms. Allocated memory is still 146.8MB. Free memory was 113.6MB in the beginning and 94.6MB in the end (delta: 19.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-23 14:31:07,055 INFO L158 Benchmark]: Boogie Procedure Inliner took 79.85ms. Allocated memory is still 146.8MB. Free memory was 94.6MB in the beginning and 92.1MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-23 14:31:07,056 INFO L158 Benchmark]: Boogie Preprocessor took 60.86ms. Allocated memory is still 146.8MB. Free memory was 92.1MB in the beginning and 90.4MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-23 14:31:07,056 INFO L158 Benchmark]: RCFGBuilder took 821.70ms. Allocated memory was 146.8MB in the beginning and 188.7MB in the end (delta: 41.9MB). Free memory was 90.4MB in the beginning and 150.4MB in the end (delta: -60.0MB). Peak memory consumption was 29.1MB. Max. memory is 16.1GB. [2022-11-23 14:31:07,057 INFO L158 Benchmark]: TraceAbstraction took 205214.27ms. Allocated memory was 188.7MB in the beginning and 1.1GB in the end (delta: 874.5MB). Free memory was 149.3MB in the beginning and 766.8MB in the end (delta: -617.5MB). Peak memory consumption was 648.3MB. Max. memory is 16.1GB. [2022-11-23 14:31:07,057 INFO L158 Benchmark]: Witness Printer took 91.03ms. Allocated memory is still 1.1GB. Free memory was 766.8MB in the beginning and 760.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-23 14:31:07,059 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.83ms. Allocated memory is still 146.8MB. Free memory is still 88.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 553.76ms. Allocated memory is still 146.8MB. Free memory was 113.6MB in the beginning and 94.6MB in the end (delta: 19.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 79.85ms. Allocated memory is still 146.8MB. Free memory was 94.6MB in the beginning and 92.1MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 60.86ms. Allocated memory is still 146.8MB. Free memory was 92.1MB in the beginning and 90.4MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 821.70ms. Allocated memory was 146.8MB in the beginning and 188.7MB in the end (delta: 41.9MB). Free memory was 90.4MB in the beginning and 150.4MB in the end (delta: -60.0MB). Peak memory consumption was 29.1MB. Max. memory is 16.1GB. * TraceAbstraction took 205214.27ms. Allocated memory was 188.7MB in the beginning and 1.1GB in the end (delta: 874.5MB). Free memory was 149.3MB in the beginning and 766.8MB in the end (delta: -617.5MB). Peak memory consumption was 648.3MB. Max. memory is 16.1GB. * Witness Printer took 91.03ms. Allocated memory is still 1.1GB. Free memory was 766.8MB in the beginning and 760.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 267]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 69 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 205.1s, OverallIterations: 14, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 32.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 116.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3341 SdHoareTripleChecker+Valid, 12.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3295 mSDsluCounter, 4991 SdHoareTripleChecker+Invalid, 10.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3950 mSDsCounter, 2354 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 14326 IncrementalHoareTripleChecker+Invalid, 16680 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 2354 mSolverCounterUnsat, 1041 mSDtfsCounter, 14326 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1324 GetRequests, 814 SyntacticMatches, 38 SemanticMatches, 472 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 22406 ImplicationChecksByTransitivity, 47.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2209occurred in iteration=13, InterpolantAutomatonStates: 314, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.5s AutomataMinimizationTime, 14 MinimizatonAttempts, 2382 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 42 LocationsWithAnnotation, 5443 PreInvPairs, 6406 NumberOfFragments, 6608 HoareAnnotationTreeSize, 5443 FomulaSimplifications, 445090 FormulaSimplificationTreeSizeReduction, 43.8s HoareSimplificationTime, 42 FomulaSimplificationsInter, 901733 FormulaSimplificationTreeSizeReductionInter, 71.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 6.1s InterpolantComputationTime, 1075 NumberOfCodeBlocks, 1075 NumberOfCodeBlocksAsserted, 20 NumberOfCheckSat, 1325 ConstructedInterpolants, 0 QuantifiedInterpolants, 3747 SizeOfPredicates, 52 NumberOfNonLiveVariables, 1836 ConjunctsInSsa, 145 ConjunctsInUnsatCore, 24 InterpolantComputations, 10 PerfectInterpolantSequences, 308/415 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 10.2s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 12, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 115, DAG_INTERPRETER_EARLY_EXITS: 8, TOOLS_POST_APPLICATIONS: 131, TOOLS_POST_TIME: 2.7s, TOOLS_POST_CALL_APPLICATIONS: 67, TOOLS_POST_CALL_TIME: 4.5s, TOOLS_POST_RETURN_APPLICATIONS: 56, TOOLS_POST_RETURN_TIME: 1.8s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 252, TOOLS_QUANTIFIERELIM_TIME: 8.8s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.7s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 319, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 63, DOMAIN_JOIN_TIME: 0.9s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 1, DOMAIN_WIDEN_TIME: 0.0s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 3, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 115, DOMAIN_ISBOTTOM_TIME: 0.2s, LOOP_SUMMARIZER_APPLICATIONS: 2, LOOP_SUMMARIZER_CACHE_MISSES: 2, LOOP_SUMMARIZER_OVERALL_TIME: 3.1s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 3.1s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 3, CALL_SUMMARIZER_APPLICATIONS: 56, CALL_SUMMARIZER_CACHE_MISSES: 12, CALL_SUMMARIZER_OVERALL_TIME: 0.2s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.2s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 1633, DAG_COMPRESSION_RETAINED_NODES: 300, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 249]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && pumpRunning == 0) && \result == tmp) && \valid[9] == 1) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && retValue_acc == \result) && 31 == unknown-#length-unknown[2]) && head == 0) && tmp == 1) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && 30 == unknown-#length-unknown[13]) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[1][0] == 48) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 - InvariantResult [Line: 781]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 173]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 718]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 267]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2)) - InvariantResult [Line: 821]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(2 == waterLevel)) || (!(\old(pumpRunning) == 0) && !(waterLevel <= 1))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && tmp == 1)) && (((((((((((((((((((((((((((((((((((((((((((!(waterLevel == 1) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || (((((retValue_acc == tmp___0 && ((tmp___0 == 1 && tmp == 0) || (tmp___0 == 0 && !(tmp == 0)))) && (((retValue_acc == 1 && retValue_acc == \result) && waterLevel < 2) || ((retValue_acc == 0 && !(waterLevel < 2)) && retValue_acc == \result))) && retValue_acc == \result) && \result == tmp) && tmp == \result)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || ((pumpRunning == 0 && 0 <= tmp) && (waterLevel <= 1 || tmp == 1)))) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || ((((((tmp___0 == 1 && tmp == 0) || (tmp___0 == 0 && !(tmp == 0))) && (((retValue_acc == 1 && retValue_acc == \result) && waterLevel < 2) || ((retValue_acc == 0 && !(waterLevel < 2)) && retValue_acc == \result))) && retValue_acc == \result) && \result == tmp) && tmp == \result)) || !(\valid[6] == 1)) || !(2 == waterLevel)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || (!(\old(pumpRunning) == 0) && !(waterLevel <= 1))) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && 0 <= tmp)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) - InvariantResult [Line: 249]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 719]: Loop Invariant Derived loop invariant: ((((((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && pumpRunning == 1) || ((((1 == systemActive && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel <= 2) && pumpRunning == 1)) || ((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 843]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) || pumpRunning == 1) - InvariantResult [Line: 817]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) || pumpRunning == 1) - InvariantResult [Line: 865]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) && ((((((pumpRunning == 0 && waterLevel <= 1) && tmp == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || ((tmp == methaneLevelCritical && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp == methaneLevelCritical))) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || pumpRunning == 0) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((((((((!(#NULL == 0) || !(1 == systemActive)) || (retValue_acc == \result && retValue_acc == methaneLevelCritical)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp == methaneLevelCritical)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((!(1 == systemActive) || \old(waterLevel) < 2) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((((!(1 == systemActive) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) - InvariantResult [Line: 739]: Loop Invariant Derived loop invariant: ((((((((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && pumpRunning == 1) || ((((1 == systemActive && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel <= 2) && pumpRunning == 1)) || ((((pumpRunning == 0 && 2 == waterLevel) && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0)) || ((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 288]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (!(\old(waterLevel) == 1) && !(\old(waterLevel) <= 0))) || !(methaneLevelCritical == 1)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && ((((((((((((((((((((((((((((((((((((((((((((((retValue_acc == waterLevel && \result == tmp___0) && retValue_acc == \result) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(\old(waterLevel) <= 2)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel)))) && (((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || pumpRunning == 0) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (!(\old(waterLevel) == 1) && !(\old(waterLevel) <= 0))) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((((((((!(#NULL == 0) || !(1 == systemActive)) || (retValue_acc == \result && retValue_acc == methaneLevelCritical)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == methaneLevelCritical)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((!(1 == systemActive) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (((tmp___0 <= 1 && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == 1)) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || tmp___0 <= 1) - InvariantResult [Line: 273]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || (((((retValue_acc == waterLevel && \result == tmp___0) && \result == retValue_acc) && retValue_acc == \result) && pumpRunning == retValue_acc) && \result == tmp___1)) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(\old(waterLevel) <= 2)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(2 <= \old(waterLevel))) && (((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((((((((!(#NULL == 0) || !(1 == systemActive)) || (retValue_acc == \result && retValue_acc == methaneLevelCritical)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp == methaneLevelCritical)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || pumpRunning == 0) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (!(\old(waterLevel) == 1) && !(\old(waterLevel) <= 0))) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) < 2)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || ((pumpRunning == 0 && !(tmp == 0)) && \old(waterLevel) == waterLevel))) && (((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))))) || !(\old(waterLevel) <= 2)) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp == methaneLevelCritical))) && (((((!(1 == systemActive) || \old(waterLevel) < 2) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2))) && (((((!(1 == systemActive) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || (!(\old(waterLevel) == 1) && !(\old(waterLevel) <= 0))) || !(methaneLevelCritical == 0)) || tmp___0 <= 1)) && ((((!(1 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0)) && tmp == 1)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 282]: Loop Invariant Derived loop invariant: (((((((((((((!(1 == systemActive) || ((tmp == methaneLevelCritical && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp == methaneLevelCritical)) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || pumpRunning == 0) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((((((((!(#NULL == 0) || !(1 == systemActive)) || (retValue_acc == \result && retValue_acc == methaneLevelCritical)) || !(head == 0)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(#NULL == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(\old(waterLevel) <= 2)) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp == methaneLevelCritical)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((!(1 == systemActive) || \old(waterLevel) < 2) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || \old(waterLevel) < 2) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 0))) && ((((!(1 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0)) && tmp == 1)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || ((pumpRunning == 0 && !(tmp == 0)) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 709]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 911]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || ((((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))) && aux-isMethaneLevelCritical()-aux == methaneLevelCritical) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) == 2))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel))) && aux-isMethaneLevelCritical()-aux == methaneLevelCritical) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) RESULT: Ultimate proved your program to be correct! [2022-11-23 14:31:07,117 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_905aa498-8a17-4f58-9b1d-a9eea2972e32/bin/utaipan-Q6hlc19bkW/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE