./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9a8ef44eebf77bb9089ba7256f54c924b643d97224560b14ff4a2b7df3dcc9e0 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 11:36:48,344 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 11:36:48,346 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 11:36:48,364 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 11:36:48,365 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 11:36:48,366 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 11:36:48,367 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 11:36:48,368 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 11:36:48,370 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 11:36:48,371 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 11:36:48,371 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 11:36:48,372 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 11:36:48,373 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 11:36:48,374 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 11:36:48,375 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 11:36:48,376 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 11:36:48,376 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 11:36:48,377 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 11:36:48,379 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 11:36:48,380 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 11:36:48,381 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 11:36:48,383 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 11:36:48,384 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 11:36:48,384 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 11:36:48,388 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 11:36:48,388 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 11:36:48,388 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 11:36:48,389 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 11:36:48,389 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 11:36:48,390 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 11:36:48,391 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 11:36:48,391 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 11:36:48,392 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 11:36:48,392 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 11:36:48,393 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 11:36:48,393 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 11:36:48,394 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 11:36:48,394 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 11:36:48,394 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 11:36:48,395 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 11:36:48,396 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 11:36:48,396 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-12-14 11:36:48,415 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 11:36:48,415 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 11:36:48,415 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 11:36:48,415 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 11:36:48,416 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 11:36:48,416 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 11:36:48,416 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 11:36:48,417 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 11:36:48,417 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 11:36:48,417 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-12-14 11:36:48,417 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 11:36:48,417 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 11:36:48,417 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-12-14 11:36:48,418 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-12-14 11:36:48,418 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 11:36:48,418 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-12-14 11:36:48,418 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-12-14 11:36:48,418 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-12-14 11:36:48,419 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 11:36:48,419 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 11:36:48,419 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 11:36:48,419 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 11:36:48,419 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 11:36:48,419 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-12-14 11:36:48,419 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 11:36:48,420 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-12-14 11:36:48,420 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 11:36:48,420 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-14 11:36:48,420 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 11:36:48,420 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-12-14 11:36:48,420 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 11:36:48,421 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 11:36:48,421 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 11:36:48,421 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 11:36:48,421 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-12-14 11:36:48,421 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 11:36:48,421 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-12-14 11:36:48,422 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-12-14 11:36:48,422 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-14 11:36:48,422 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-12-14 11:36:48,422 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 11:36:48,422 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9a8ef44eebf77bb9089ba7256f54c924b643d97224560b14ff4a2b7df3dcc9e0 [2022-12-14 11:36:48,606 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 11:36:48,625 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 11:36:48,627 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 11:36:48,628 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 11:36:48,628 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 11:36:48,629 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c [2022-12-14 11:36:51,217 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 11:36:51,416 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 11:36:51,416 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c [2022-12-14 11:36:51,426 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/data/bc5862d6d/4cc74e51bc8e4ee9846d332fec8b0fd3/FLAG15118764a [2022-12-14 11:36:51,779 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/data/bc5862d6d/4cc74e51bc8e4ee9846d332fec8b0fd3 [2022-12-14 11:36:51,782 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 11:36:51,784 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 11:36:51,785 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 11:36:51,785 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 11:36:51,790 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 11:36:51,791 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 11:36:51" (1/1) ... [2022-12-14 11:36:51,792 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@680c50d0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 11:36:51, skipping insertion in model container [2022-12-14 11:36:51,792 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 11:36:51" (1/1) ... [2022-12-14 11:36:51,800 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 11:36:51,825 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 11:36:51,936 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c[3064,3077] [2022-12-14 11:36:52,011 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 11:36:52,021 INFO L203 MainTranslator]: Completed pre-run [2022-12-14 11:36:52,035 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c[3064,3077] [2022-12-14 11:36:52,063 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 11:36:52,074 INFO L208 MainTranslator]: Completed translation [2022-12-14 11:36:52,074 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 11:36:52 WrapperNode [2022-12-14 11:36:52,075 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 11:36:52,075 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-14 11:36:52,075 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-14 11:36:52,075 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-14 11:36:52,080 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 11:36:52" (1/1) ... [2022-12-14 11:36:52,088 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 11:36:52" (1/1) ... [2022-12-14 11:36:52,103 INFO L138 Inliner]: procedures = 54, calls = 99, calls flagged for inlining = 21, calls inlined = 18, statements flattened = 182 [2022-12-14 11:36:52,103 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-14 11:36:52,104 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-14 11:36:52,104 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-14 11:36:52,104 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-14 11:36:52,110 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 11:36:52" (1/1) ... [2022-12-14 11:36:52,110 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 11:36:52" (1/1) ... [2022-12-14 11:36:52,111 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 11:36:52" (1/1) ... [2022-12-14 11:36:52,112 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 11:36:52" (1/1) ... [2022-12-14 11:36:52,114 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 11:36:52" (1/1) ... [2022-12-14 11:36:52,117 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 11:36:52" (1/1) ... [2022-12-14 11:36:52,118 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 11:36:52" (1/1) ... [2022-12-14 11:36:52,118 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 11:36:52" (1/1) ... [2022-12-14 11:36:52,120 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-14 11:36:52,120 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-14 11:36:52,120 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-14 11:36:52,120 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-14 11:36:52,121 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 11:36:52" (1/1) ... [2022-12-14 11:36:52,125 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 11:36:52,134 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 11:36:52,144 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-14 11:36:52,146 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-14 11:36:52,178 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-14 11:36:52,179 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-12-14 11:36:52,179 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-12-14 11:36:52,179 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-12-14 11:36:52,179 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-12-14 11:36:52,179 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-12-14 11:36:52,179 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-12-14 11:36:52,179 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-12-14 11:36:52,179 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-12-14 11:36:52,179 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-12-14 11:36:52,179 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-12-14 11:36:52,179 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-12-14 11:36:52,180 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-12-14 11:36:52,180 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-12-14 11:36:52,180 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-12-14 11:36:52,180 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-14 11:36:52,180 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-12-14 11:36:52,180 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-12-14 11:36:52,180 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-14 11:36:52,180 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-14 11:36:52,242 INFO L235 CfgBuilder]: Building ICFG [2022-12-14 11:36:52,243 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-14 11:36:52,447 INFO L276 CfgBuilder]: Performing block encoding [2022-12-14 11:36:52,543 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-14 11:36:52,543 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-12-14 11:36:52,546 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 11:36:52 BoogieIcfgContainer [2022-12-14 11:36:52,546 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-14 11:36:52,548 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-14 11:36:52,549 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-14 11:36:52,552 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-14 11:36:52,552 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 11:36:51" (1/3) ... [2022-12-14 11:36:52,552 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@384ac6fb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 11:36:52, skipping insertion in model container [2022-12-14 11:36:52,553 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 11:36:52" (2/3) ... [2022-12-14 11:36:52,553 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@384ac6fb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 11:36:52, skipping insertion in model container [2022-12-14 11:36:52,553 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 11:36:52" (3/3) ... [2022-12-14 11:36:52,554 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product45.cil.c [2022-12-14 11:36:52,572 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-14 11:36:52,573 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-12-14 11:36:52,611 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-14 11:36:52,615 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@202ae0ee, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-12-14 11:36:52,615 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-12-14 11:36:52,619 INFO L276 IsEmpty]: Start isEmpty. Operand has 63 states, 39 states have (on average 1.3846153846153846) internal successors, (54), 47 states have internal predecessors, (54), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2022-12-14 11:36:52,625 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-12-14 11:36:52,625 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 11:36:52,626 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 11:36:52,626 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 11:36:52,630 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 11:36:52,630 INFO L85 PathProgramCache]: Analyzing trace with hash -276395788, now seen corresponding path program 1 times [2022-12-14 11:36:52,637 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 11:36:52,638 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1747479114] [2022-12-14 11:36:52,638 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 11:36:52,638 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 11:36:52,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 11:36:52,753 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 11:36:52,753 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 11:36:52,753 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1747479114] [2022-12-14 11:36:52,754 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1747479114] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 11:36:52,754 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 11:36:52,754 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 11:36:52,755 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [99741165] [2022-12-14 11:36:52,756 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 11:36:52,759 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-12-14 11:36:52,759 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 11:36:52,780 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-12-14 11:36:52,781 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 11:36:52,782 INFO L87 Difference]: Start difference. First operand has 63 states, 39 states have (on average 1.3846153846153846) internal successors, (54), 47 states have internal predecessors, (54), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 11:36:52,839 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 11:36:52,839 INFO L93 Difference]: Finished difference Result 124 states and 165 transitions. [2022-12-14 11:36:52,840 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-12-14 11:36:52,841 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 16 [2022-12-14 11:36:52,841 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 11:36:52,849 INFO L225 Difference]: With dead ends: 124 [2022-12-14 11:36:52,849 INFO L226 Difference]: Without dead ends: 58 [2022-12-14 11:36:52,853 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 11:36:52,856 INFO L413 NwaCegarLoop]: 62 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 62 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 11:36:52,857 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 62 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 11:36:52,869 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2022-12-14 11:36:52,882 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 58. [2022-12-14 11:36:52,883 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58 states, 36 states have (on average 1.2777777777777777) internal successors, (46), 43 states have internal predecessors, (46), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2022-12-14 11:36:52,885 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58 states to 58 states and 73 transitions. [2022-12-14 11:36:52,885 INFO L78 Accepts]: Start accepts. Automaton has 58 states and 73 transitions. Word has length 16 [2022-12-14 11:36:52,886 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 11:36:52,886 INFO L495 AbstractCegarLoop]: Abstraction has 58 states and 73 transitions. [2022-12-14 11:36:52,886 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 11:36:52,886 INFO L276 IsEmpty]: Start isEmpty. Operand 58 states and 73 transitions. [2022-12-14 11:36:52,887 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-12-14 11:36:52,887 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 11:36:52,887 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 11:36:52,887 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-14 11:36:52,888 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 11:36:52,888 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 11:36:52,888 INFO L85 PathProgramCache]: Analyzing trace with hash -1455347482, now seen corresponding path program 1 times [2022-12-14 11:36:52,888 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 11:36:52,888 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1642835507] [2022-12-14 11:36:52,888 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 11:36:52,889 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 11:36:52,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 11:36:52,951 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 11:36:52,951 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 11:36:52,952 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1642835507] [2022-12-14 11:36:52,952 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1642835507] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 11:36:52,952 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 11:36:52,952 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 11:36:52,952 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2091686694] [2022-12-14 11:36:52,952 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 11:36:52,953 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 11:36:52,954 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 11:36:52,954 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 11:36:52,954 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 11:36:52,955 INFO L87 Difference]: Start difference. First operand 58 states and 73 transitions. Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 11:36:52,993 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 11:36:52,993 INFO L93 Difference]: Finished difference Result 93 states and 117 transitions. [2022-12-14 11:36:52,993 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 11:36:52,993 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-12-14 11:36:52,993 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 11:36:52,995 INFO L225 Difference]: With dead ends: 93 [2022-12-14 11:36:52,995 INFO L226 Difference]: Without dead ends: 50 [2022-12-14 11:36:52,996 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 11:36:52,997 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 7 mSDsluCounter, 39 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 11:36:52,998 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 87 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 11:36:52,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-12-14 11:36:53,005 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 50. [2022-12-14 11:36:53,005 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50 states, 31 states have (on average 1.2903225806451613) internal successors, (40), 38 states have internal predecessors, (40), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-12-14 11:36:53,006 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50 states to 50 states and 62 transitions. [2022-12-14 11:36:53,007 INFO L78 Accepts]: Start accepts. Automaton has 50 states and 62 transitions. Word has length 17 [2022-12-14 11:36:53,007 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 11:36:53,007 INFO L495 AbstractCegarLoop]: Abstraction has 50 states and 62 transitions. [2022-12-14 11:36:53,007 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 11:36:53,007 INFO L276 IsEmpty]: Start isEmpty. Operand 50 states and 62 transitions. [2022-12-14 11:36:53,008 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-12-14 11:36:53,008 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 11:36:53,008 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 11:36:53,008 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-14 11:36:53,009 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 11:36:53,009 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 11:36:53,009 INFO L85 PathProgramCache]: Analyzing trace with hash -1204662713, now seen corresponding path program 1 times [2022-12-14 11:36:53,009 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 11:36:53,009 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [461579632] [2022-12-14 11:36:53,010 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 11:36:53,010 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 11:36:53,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 11:36:53,072 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 11:36:53,072 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 11:36:53,072 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [461579632] [2022-12-14 11:36:53,072 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [461579632] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 11:36:53,072 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 11:36:53,072 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 11:36:53,073 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2143376342] [2022-12-14 11:36:53,073 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 11:36:53,073 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 11:36:53,073 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 11:36:53,074 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 11:36:53,074 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 11:36:53,074 INFO L87 Difference]: Start difference. First operand 50 states and 62 transitions. Second operand has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 11:36:53,107 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 11:36:53,107 INFO L93 Difference]: Finished difference Result 98 states and 123 transitions. [2022-12-14 11:36:53,107 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 11:36:53,108 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 19 [2022-12-14 11:36:53,108 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 11:36:53,109 INFO L225 Difference]: With dead ends: 98 [2022-12-14 11:36:53,109 INFO L226 Difference]: Without dead ends: 50 [2022-12-14 11:36:53,110 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 11:36:53,111 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 51 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 46 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 11:36:53,112 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 46 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 11:36:53,113 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-12-14 11:36:53,119 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 50. [2022-12-14 11:36:53,120 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50 states, 31 states have (on average 1.2580645161290323) internal successors, (39), 38 states have internal predecessors, (39), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-12-14 11:36:53,121 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50 states to 50 states and 61 transitions. [2022-12-14 11:36:53,121 INFO L78 Accepts]: Start accepts. Automaton has 50 states and 61 transitions. Word has length 19 [2022-12-14 11:36:53,121 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 11:36:53,121 INFO L495 AbstractCegarLoop]: Abstraction has 50 states and 61 transitions. [2022-12-14 11:36:53,121 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 11:36:53,122 INFO L276 IsEmpty]: Start isEmpty. Operand 50 states and 61 transitions. [2022-12-14 11:36:53,123 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-12-14 11:36:53,123 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 11:36:53,123 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 11:36:53,123 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-14 11:36:53,123 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 11:36:53,124 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 11:36:53,124 INFO L85 PathProgramCache]: Analyzing trace with hash 1054937600, now seen corresponding path program 1 times [2022-12-14 11:36:53,124 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 11:36:53,124 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [731655162] [2022-12-14 11:36:53,124 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 11:36:53,124 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 11:36:53,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 11:36:53,216 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 11:36:53,217 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 11:36:53,217 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [731655162] [2022-12-14 11:36:53,217 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [731655162] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 11:36:53,217 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 11:36:53,217 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-14 11:36:53,218 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [29590056] [2022-12-14 11:36:53,218 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 11:36:53,218 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 11:36:53,218 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 11:36:53,219 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 11:36:53,219 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 11:36:53,219 INFO L87 Difference]: Start difference. First operand 50 states and 61 transitions. Second operand has 5 states, 5 states have (on average 4.4) internal successors, (22), 5 states have internal predecessors, (22), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-12-14 11:36:53,418 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 11:36:53,418 INFO L93 Difference]: Finished difference Result 160 states and 194 transitions. [2022-12-14 11:36:53,419 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-14 11:36:53,419 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.4) internal successors, (22), 5 states have internal predecessors, (22), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 29 [2022-12-14 11:36:53,419 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 11:36:53,420 INFO L225 Difference]: With dead ends: 160 [2022-12-14 11:36:53,420 INFO L226 Difference]: Without dead ends: 112 [2022-12-14 11:36:53,421 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-12-14 11:36:53,422 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 104 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 135 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 106 SdHoareTripleChecker+Valid, 141 SdHoareTripleChecker+Invalid, 191 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 135 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 11:36:53,423 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [106 Valid, 141 Invalid, 191 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 135 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 11:36:53,424 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 112 states. [2022-12-14 11:36:53,442 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 112 to 106. [2022-12-14 11:36:53,442 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 106 states, 69 states have (on average 1.2173913043478262) internal successors, (84), 76 states have internal predecessors, (84), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-12-14 11:36:53,444 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106 states to 106 states and 125 transitions. [2022-12-14 11:36:53,444 INFO L78 Accepts]: Start accepts. Automaton has 106 states and 125 transitions. Word has length 29 [2022-12-14 11:36:53,444 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 11:36:53,445 INFO L495 AbstractCegarLoop]: Abstraction has 106 states and 125 transitions. [2022-12-14 11:36:53,445 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.4) internal successors, (22), 5 states have internal predecessors, (22), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-12-14 11:36:53,445 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 125 transitions. [2022-12-14 11:36:53,446 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-12-14 11:36:53,446 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 11:36:53,446 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 11:36:53,446 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-14 11:36:53,446 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 11:36:53,447 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 11:36:53,447 INFO L85 PathProgramCache]: Analyzing trace with hash 907657863, now seen corresponding path program 1 times [2022-12-14 11:36:53,447 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 11:36:53,447 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [60271618] [2022-12-14 11:36:53,447 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 11:36:53,448 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 11:36:53,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 11:36:53,529 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 11:36:53,529 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 11:36:53,529 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [60271618] [2022-12-14 11:36:53,529 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [60271618] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 11:36:53,529 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 11:36:53,530 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-14 11:36:53,530 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2041807449] [2022-12-14 11:36:53,530 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 11:36:53,530 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 11:36:53,530 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 11:36:53,531 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 11:36:53,531 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-14 11:36:53,531 INFO L87 Difference]: Start difference. First operand 106 states and 125 transitions. Second operand has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-14 11:36:53,638 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 11:36:53,638 INFO L93 Difference]: Finished difference Result 314 states and 378 transitions. [2022-12-14 11:36:53,639 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-12-14 11:36:53,639 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 30 [2022-12-14 11:36:53,639 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 11:36:53,642 INFO L225 Difference]: With dead ends: 314 [2022-12-14 11:36:53,642 INFO L226 Difference]: Without dead ends: 210 [2022-12-14 11:36:53,643 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-12-14 11:36:53,643 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 40 mSDsluCounter, 187 mSDsCounter, 0 mSdLazyCounter, 102 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 43 SdHoareTripleChecker+Valid, 243 SdHoareTripleChecker+Invalid, 103 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 102 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 11:36:53,643 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [43 Valid, 243 Invalid, 103 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 102 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 11:36:53,644 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 210 states. [2022-12-14 11:36:53,665 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 198. [2022-12-14 11:36:53,665 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 198 states, 129 states have (on average 1.1705426356589148) internal successors, (151), 140 states have internal predecessors, (151), 34 states have call successors, (34), 28 states have call predecessors, (34), 34 states have return successors, (44), 36 states have call predecessors, (44), 34 states have call successors, (44) [2022-12-14 11:36:53,666 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 229 transitions. [2022-12-14 11:36:53,666 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 229 transitions. Word has length 30 [2022-12-14 11:36:53,666 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 11:36:53,667 INFO L495 AbstractCegarLoop]: Abstraction has 198 states and 229 transitions. [2022-12-14 11:36:53,667 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-14 11:36:53,667 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 229 transitions. [2022-12-14 11:36:53,667 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-12-14 11:36:53,667 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 11:36:53,668 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 11:36:53,668 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-14 11:36:53,668 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 11:36:53,668 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 11:36:53,668 INFO L85 PathProgramCache]: Analyzing trace with hash 1696942292, now seen corresponding path program 1 times [2022-12-14 11:36:53,668 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 11:36:53,668 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [282480345] [2022-12-14 11:36:53,668 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 11:36:53,669 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 11:36:53,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 11:36:53,740 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 11:36:53,741 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 11:36:53,741 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [282480345] [2022-12-14 11:36:53,741 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [282480345] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 11:36:53,741 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 11:36:53,741 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-14 11:36:53,741 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [599455888] [2022-12-14 11:36:53,741 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 11:36:53,742 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 11:36:53,742 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 11:36:53,742 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 11:36:53,743 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 11:36:53,743 INFO L87 Difference]: Start difference. First operand 198 states and 229 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-14 11:36:53,886 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 11:36:53,886 INFO L93 Difference]: Finished difference Result 210 states and 241 transitions. [2022-12-14 11:36:53,886 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-14 11:36:53,886 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 33 [2022-12-14 11:36:53,887 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 11:36:53,889 INFO L225 Difference]: With dead ends: 210 [2022-12-14 11:36:53,889 INFO L226 Difference]: Without dead ends: 208 [2022-12-14 11:36:53,889 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-12-14 11:36:53,890 INFO L413 NwaCegarLoop]: 45 mSDtfsCounter, 64 mSDsluCounter, 91 mSDsCounter, 0 mSdLazyCounter, 147 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 136 SdHoareTripleChecker+Invalid, 178 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 147 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 11:36:53,890 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 136 Invalid, 178 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 147 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 11:36:53,891 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 208 states. [2022-12-14 11:36:53,907 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 208 to 198. [2022-12-14 11:36:53,907 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 198 states, 129 states have (on average 1.1550387596899225) internal successors, (149), 140 states have internal predecessors, (149), 34 states have call successors, (34), 28 states have call predecessors, (34), 34 states have return successors, (44), 36 states have call predecessors, (44), 34 states have call successors, (44) [2022-12-14 11:36:53,909 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 227 transitions. [2022-12-14 11:36:53,909 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 227 transitions. Word has length 33 [2022-12-14 11:36:53,909 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 11:36:53,910 INFO L495 AbstractCegarLoop]: Abstraction has 198 states and 227 transitions. [2022-12-14 11:36:53,910 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-14 11:36:53,910 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 227 transitions. [2022-12-14 11:36:53,912 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-12-14 11:36:53,912 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 11:36:53,912 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 11:36:53,912 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-12-14 11:36:53,912 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 11:36:53,912 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 11:36:53,913 INFO L85 PathProgramCache]: Analyzing trace with hash -1703783820, now seen corresponding path program 1 times [2022-12-14 11:36:53,913 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 11:36:53,913 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1544873027] [2022-12-14 11:36:53,913 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 11:36:53,913 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 11:36:53,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 11:36:54,134 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 11:36:54,134 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 11:36:54,134 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1544873027] [2022-12-14 11:36:54,134 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1544873027] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 11:36:54,134 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [345809114] [2022-12-14 11:36:54,134 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 11:36:54,135 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 11:36:54,135 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 11:36:54,136 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 11:36:54,136 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-14 11:36:54,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 11:36:54,198 INFO L263 TraceCheckSpWp]: Trace formula consists of 213 conjuncts, 33 conjunts are in the unsatisfiable core [2022-12-14 11:36:54,202 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 11:36:54,498 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 11:36:54,498 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 11:36:54,809 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 11:36:54,810 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [345809114] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 11:36:54,810 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1843027132] [2022-12-14 11:36:54,825 INFO L159 IcfgInterpreter]: Started Sifa with 37 locations of interest [2022-12-14 11:36:54,825 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 11:36:54,827 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 11:36:54,832 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 11:36:54,832 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 11:36:55,463 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 139 for LOIs [2022-12-14 11:36:55,879 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 135 for LOIs [2022-12-14 11:36:55,955 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 114 for LOIs [2022-12-14 11:36:55,962 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 11:37:01,023 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1843027132] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 11:37:01,024 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 11:37:01,024 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [15, 12, 12] total 44 [2022-12-14 11:37:01,024 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1502711762] [2022-12-14 11:37:01,024 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 11:37:01,024 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-12-14 11:37:01,024 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 11:37:01,025 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-12-14 11:37:01,025 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=290, Invalid=1602, Unknown=0, NotChecked=0, Total=1892 [2022-12-14 11:37:01,025 INFO L87 Difference]: Start difference. First operand 198 states and 227 transitions. Second operand has 15 states, 12 states have (on average 2.1666666666666665) internal successors, (26), 12 states have internal predecessors, (26), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2022-12-14 11:37:03,392 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 11:37:03,392 INFO L93 Difference]: Finished difference Result 455 states and 523 transitions. [2022-12-14 11:37:03,392 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-12-14 11:37:03,393 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 12 states have (on average 2.1666666666666665) internal successors, (26), 12 states have internal predecessors, (26), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) Word has length 38 [2022-12-14 11:37:03,393 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 11:37:03,394 INFO L225 Difference]: With dead ends: 455 [2022-12-14 11:37:03,394 INFO L226 Difference]: Without dead ends: 259 [2022-12-14 11:37:03,395 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 132 GetRequests, 83 SyntacticMatches, 3 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 698 ImplicationChecksByTransitivity, 6.9s TimeCoverageRelationStatistics Valid=357, Invalid=1899, Unknown=0, NotChecked=0, Total=2256 [2022-12-14 11:37:03,396 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 67 mSDsluCounter, 178 mSDsCounter, 0 mSdLazyCounter, 507 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 212 SdHoareTripleChecker+Invalid, 549 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 507 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 11:37:03,396 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 212 Invalid, 549 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 507 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-12-14 11:37:03,397 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2022-12-14 11:37:03,436 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 253. [2022-12-14 11:37:03,437 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 253 states, 166 states have (on average 1.1385542168674698) internal successors, (189), 178 states have internal predecessors, (189), 43 states have call successors, (43), 37 states have call predecessors, (43), 43 states have return successors, (53), 44 states have call predecessors, (53), 43 states have call successors, (53) [2022-12-14 11:37:03,441 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 253 states to 253 states and 285 transitions. [2022-12-14 11:37:03,441 INFO L78 Accepts]: Start accepts. Automaton has 253 states and 285 transitions. Word has length 38 [2022-12-14 11:37:03,441 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 11:37:03,441 INFO L495 AbstractCegarLoop]: Abstraction has 253 states and 285 transitions. [2022-12-14 11:37:03,442 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 12 states have (on average 2.1666666666666665) internal successors, (26), 12 states have internal predecessors, (26), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2022-12-14 11:37:03,442 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 285 transitions. [2022-12-14 11:37:03,443 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-12-14 11:37:03,443 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 11:37:03,443 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 11:37:03,449 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-14 11:37:03,644 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2022-12-14 11:37:03,645 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 11:37:03,647 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 11:37:03,647 INFO L85 PathProgramCache]: Analyzing trace with hash -645594316, now seen corresponding path program 1 times [2022-12-14 11:37:03,647 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 11:37:03,648 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1647348757] [2022-12-14 11:37:03,648 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 11:37:03,648 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 11:37:03,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 11:37:03,893 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 11:37:03,893 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 11:37:03,893 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1647348757] [2022-12-14 11:37:03,893 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1647348757] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 11:37:03,893 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [851475664] [2022-12-14 11:37:03,893 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 11:37:03,894 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 11:37:03,894 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 11:37:03,895 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 11:37:03,895 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-14 11:37:03,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 11:37:03,954 INFO L263 TraceCheckSpWp]: Trace formula consists of 219 conjuncts, 33 conjunts are in the unsatisfiable core [2022-12-14 11:37:03,956 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 11:37:04,115 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 11:37:04,116 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 11:37:04,345 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 11:37:04,345 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [851475664] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 11:37:04,345 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [608196829] [2022-12-14 11:37:04,348 INFO L159 IcfgInterpreter]: Started Sifa with 40 locations of interest [2022-12-14 11:37:04,348 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 11:37:04,348 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 11:37:04,349 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 11:37:04,349 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 11:37:04,977 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 114 for LOIs [2022-12-14 11:37:04,984 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 136 for LOIs [2022-12-14 11:37:05,384 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__methaneQuery with input of size 131 for LOIs [2022-12-14 11:37:05,731 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 132 for LOIs [2022-12-14 11:37:05,896 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 44 for LOIs [2022-12-14 11:37:05,899 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 112 for LOIs [2022-12-14 11:37:05,906 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 11:37:14,190 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4257#(and (<= 0 |#NULL.base|) (<= 0 |old(~pumpRunning~0)|) (<= ~pumpRunning~0 1) (= ~head~0.offset 0) (<= 1 ~systemActive~0) (<= 2 ~waterLevel~0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~10#1|) (<= |#NULL.offset| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification1_spec__1_~tmp___0~0#1|) (= ~methaneLevelCritical~0 1) (<= |old(~pumpRunning~0)| 0) (<= 2 |old(~waterLevel~0)|) (<= 0 ~head~0.base) (<= |#NULL.base| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~10#1|) (<= 0 ~pumpRunning~0) (<= ~head~0.base 0) (not (= |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1| 0)) (not (= |timeShift___utac_acc__Specification1_spec__1_~tmp___0~0#1| 0)) (<= 0 |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1|) (<= 0 |#NULL.offset|) (<= 0 |#StackHeapBarrier|) (<= |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1| 1) (<= ~systemActive~0 1) (= ~cleanupTimeShifts~0 4))' at error location [2022-12-14 11:37:14,190 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 11:37:14,190 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 11:37:14,190 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 12, 12] total 31 [2022-12-14 11:37:14,190 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1398616408] [2022-12-14 11:37:14,191 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 11:37:14,191 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-12-14 11:37:14,191 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 11:37:14,192 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-12-14 11:37:14,193 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=421, Invalid=3119, Unknown=0, NotChecked=0, Total=3540 [2022-12-14 11:37:14,193 INFO L87 Difference]: Start difference. First operand 253 states and 285 transitions. Second operand has 31 states, 22 states have (on average 2.8181818181818183) internal successors, (62), 22 states have internal predecessors, (62), 8 states have call successors, (16), 6 states have call predecessors, (16), 13 states have return successors, (16), 14 states have call predecessors, (16), 7 states have call successors, (16) [2022-12-14 11:37:17,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 11:37:17,200 INFO L93 Difference]: Finished difference Result 786 states and 985 transitions. [2022-12-14 11:37:17,200 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 77 states. [2022-12-14 11:37:17,200 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 22 states have (on average 2.8181818181818183) internal successors, (62), 22 states have internal predecessors, (62), 8 states have call successors, (16), 6 states have call predecessors, (16), 13 states have return successors, (16), 14 states have call predecessors, (16), 7 states have call successors, (16) Word has length 41 [2022-12-14 11:37:17,201 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 11:37:17,203 INFO L225 Difference]: With dead ends: 786 [2022-12-14 11:37:17,203 INFO L226 Difference]: Without dead ends: 557 [2022-12-14 11:37:17,206 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 220 GetRequests, 89 SyntacticMatches, 3 SemanticMatches, 128 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5919 ImplicationChecksByTransitivity, 10.3s TimeCoverageRelationStatistics Valid=1694, Invalid=15076, Unknown=0, NotChecked=0, Total=16770 [2022-12-14 11:37:17,206 INFO L413 NwaCegarLoop]: 43 mSDtfsCounter, 980 mSDsluCounter, 396 mSDsCounter, 0 mSdLazyCounter, 3099 mSolverCounterSat, 773 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 985 SdHoareTripleChecker+Valid, 439 SdHoareTripleChecker+Invalid, 3872 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 773 IncrementalHoareTripleChecker+Valid, 3099 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-12-14 11:37:17,206 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [985 Valid, 439 Invalid, 3872 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [773 Valid, 3099 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-12-14 11:37:17,207 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 557 states. [2022-12-14 11:37:17,251 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 557 to 437. [2022-12-14 11:37:17,251 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 437 states, 285 states have (on average 1.1228070175438596) internal successors, (320), 307 states have internal predecessors, (320), 75 states have call successors, (75), 64 states have call predecessors, (75), 76 states have return successors, (94), 77 states have call predecessors, (94), 75 states have call successors, (94) [2022-12-14 11:37:17,253 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 437 states to 437 states and 489 transitions. [2022-12-14 11:37:17,253 INFO L78 Accepts]: Start accepts. Automaton has 437 states and 489 transitions. Word has length 41 [2022-12-14 11:37:17,253 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 11:37:17,253 INFO L495 AbstractCegarLoop]: Abstraction has 437 states and 489 transitions. [2022-12-14 11:37:17,253 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 22 states have (on average 2.8181818181818183) internal successors, (62), 22 states have internal predecessors, (62), 8 states have call successors, (16), 6 states have call predecessors, (16), 13 states have return successors, (16), 14 states have call predecessors, (16), 7 states have call successors, (16) [2022-12-14 11:37:17,253 INFO L276 IsEmpty]: Start isEmpty. Operand 437 states and 489 transitions. [2022-12-14 11:37:17,254 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2022-12-14 11:37:17,254 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 11:37:17,255 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 11:37:17,259 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-14 11:37:17,455 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 11:37:17,457 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 11:37:17,458 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 11:37:17,458 INFO L85 PathProgramCache]: Analyzing trace with hash -179724117, now seen corresponding path program 1 times [2022-12-14 11:37:17,458 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 11:37:17,459 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [905506450] [2022-12-14 11:37:17,459 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 11:37:17,459 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 11:37:17,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 11:37:17,723 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 11 proven. 9 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-12-14 11:37:17,724 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 11:37:17,724 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [905506450] [2022-12-14 11:37:17,724 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [905506450] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 11:37:17,724 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1856867843] [2022-12-14 11:37:17,724 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 11:37:17,724 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 11:37:17,724 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 11:37:17,725 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 11:37:17,726 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-14 11:37:17,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 11:37:17,791 INFO L263 TraceCheckSpWp]: Trace formula consists of 310 conjuncts, 25 conjunts are in the unsatisfiable core [2022-12-14 11:37:17,793 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 11:37:17,845 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 11:37:17,845 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 11:37:17,845 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1856867843] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 11:37:17,845 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 11:37:17,845 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [13] total 18 [2022-12-14 11:37:17,846 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1210829398] [2022-12-14 11:37:17,846 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 11:37:17,846 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-12-14 11:37:17,846 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 11:37:17,846 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-12-14 11:37:17,847 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=269, Unknown=0, NotChecked=0, Total=306 [2022-12-14 11:37:17,847 INFO L87 Difference]: Start difference. First operand 437 states and 489 transitions. Second operand has 11 states, 8 states have (on average 5.5) internal successors, (44), 8 states have internal predecessors, (44), 2 states have call successors, (11), 2 states have call predecessors, (11), 5 states have return successors, (12), 5 states have call predecessors, (12), 2 states have call successors, (12) [2022-12-14 11:37:18,097 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 11:37:18,097 INFO L93 Difference]: Finished difference Result 803 states and 924 transitions. [2022-12-14 11:37:18,098 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-12-14 11:37:18,098 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 8 states have (on average 5.5) internal successors, (44), 8 states have internal predecessors, (44), 2 states have call successors, (11), 2 states have call predecessors, (11), 5 states have return successors, (12), 5 states have call predecessors, (12), 2 states have call successors, (12) Word has length 77 [2022-12-14 11:37:18,098 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 11:37:18,099 INFO L225 Difference]: With dead ends: 803 [2022-12-14 11:37:18,099 INFO L226 Difference]: Without dead ends: 0 [2022-12-14 11:37:18,101 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 99 GetRequests, 74 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 69 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=80, Invalid=622, Unknown=0, NotChecked=0, Total=702 [2022-12-14 11:37:18,102 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 52 mSDsluCounter, 330 mSDsCounter, 0 mSdLazyCounter, 406 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 389 SdHoareTripleChecker+Invalid, 413 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 406 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 11:37:18,102 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 389 Invalid, 413 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 406 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 11:37:18,102 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-12-14 11:37:18,102 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-12-14 11:37:18,102 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 11:37:18,102 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-12-14 11:37:18,103 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 77 [2022-12-14 11:37:18,103 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 11:37:18,103 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-12-14 11:37:18,103 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 8 states have (on average 5.5) internal successors, (44), 8 states have internal predecessors, (44), 2 states have call successors, (11), 2 states have call predecessors, (11), 5 states have return successors, (12), 5 states have call predecessors, (12), 2 states have call successors, (12) [2022-12-14 11:37:18,103 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-12-14 11:37:18,103 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-12-14 11:37:18,105 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-12-14 11:37:18,110 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-14 11:37:18,306 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 11:37:18,310 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-12-14 11:37:30,320 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 784 790) no Hoare annotation was computed. [2022-12-14 11:37:30,320 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 784 790) the Hoare annotation is: true [2022-12-14 11:37:30,321 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 83 94) the Hoare annotation is: (or (not (= 1 ~systemActive~0)) (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) [2022-12-14 11:37:30,321 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2022-12-14 11:37:30,321 INFO L895 garLoopResultBuilder]: At program point L832(line 832) the Hoare annotation is: (or (not (= 1 ~systemActive~0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0)) (= ~methaneLevelCritical~0 0) (= |timeShift_processEnvironment_~tmp~7#1| ~methaneLevelCritical~0))) [2022-12-14 11:37:30,321 INFO L895 garLoopResultBuilder]: At program point L155(line 155) the Hoare annotation is: (not (= 1 ~systemActive~0)) [2022-12-14 11:37:30,321 INFO L895 garLoopResultBuilder]: At program point L824(line 824) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (or (not (= |old(~pumpRunning~0)| 0)) .cse0))) [2022-12-14 11:37:30,321 INFO L899 garLoopResultBuilder]: For program point L824-1(line 824) no Hoare annotation was computed. [2022-12-14 11:37:30,322 INFO L895 garLoopResultBuilder]: At program point L837(line 837) the Hoare annotation is: (let ((.cse40 (select |#memory_int| 1))) (let ((.cse0 (not (= (select |#length| 12) 25))) (.cse1 (not (= (select .cse40 0) 48))) (.cse2 (not (= |#NULL.offset| 0))) (.cse3 (not (= 9 (select |#length| 11)))) (.cse4 (not (= 9 (select |#length| 5)))) (.cse5 (not (= 30 (select |#length| 7)))) (.cse6 (not (= 31 (select |#length| 2)))) (.cse7 (not (= (select |#valid| 12) 1))) (.cse8 (not (= 2 (select |#length| 1)))) (.cse9 (not (= 9 (select |#length| 14)))) (.cse11 (not (= (select |#length| 15) 25))) (.cse12 (not (= (select |#valid| 6) 1))) (.cse13 (not (< 0 |#StackHeapBarrier|))) (.cse14 (not (= (select |#valid| 3) 1))) (.cse15 (not (= ~head~0.offset 0))) (.cse16 (not (= (select |#valid| 11) 1))) (.cse17 (not (= (select |#length| 9) 21))) (.cse18 (not (= 30 (select |#length| 10)))) (.cse19 (not (= (select |#valid| 15) 1))) (.cse20 (not (= (select |#length| 6) 21))) (.cse21 (not (= 1 (select |#valid| 5)))) (.cse22 (not (= (select |#length| 8) 9))) (.cse23 (not (= (select |#length| 3) 12))) (.cse24 (not (= (select |#valid| 0) 0))) (.cse25 (not (= (select .cse40 1) 0))) (.cse26 (not (= (select |#valid| 1) 1))) (.cse27 (not (= (select |#valid| 8) 1))) (.cse28 (not (= 30 (select |#length| 13)))) (.cse29 (not (= (select |#valid| 4) 1))) (.cse30 (not (= |#NULL.base| 0))) (.cse31 (not (= (select |#valid| 7) 1))) (.cse32 (not (= (select |#valid| 10) 1))) (.cse33 (not (= (select |#valid| 14) 1))) (.cse34 (not (= (select |#valid| 13) 1))) (.cse35 (not (= 30 (select |#length| 4)))) (.cse36 (not (= (select |#valid| 2) 1))) (.cse37 (not (= (select |#valid| 9) 1))) (.cse38 (not (= ~head~0.base 0))) (.cse39 (not (= ~cleanupTimeShifts~0 4))) (.cse10 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (= |old(~waterLevel~0)| 1)) .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 (not (= ~methaneLevelCritical~0 0)) .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 (= ~waterLevel~0 1) .cse35 .cse36 .cse37 .cse38 .cse39) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse11 .cse12 .cse13 .cse14 (not (<= 1 |old(~waterLevel~0)|)) .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse27 .cse28 .cse29 .cse30 (not (= ~methaneLevelCritical~0 1)) .cse31 .cse32 (= |old(~waterLevel~0)| ~waterLevel~0) .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39) (or .cse10 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0)))))) [2022-12-14 11:37:30,322 INFO L895 garLoopResultBuilder]: At program point L837-1(lines 818 842) the Hoare annotation is: (let ((.cse47 (= ~methaneLevelCritical~0 0))) (let ((.cse46 (= ~pumpRunning~0 0)) (.cse45 (not .cse47)) (.cse48 (select |#memory_int| 1))) (let ((.cse0 (not (= (select |#length| 12) 25))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= (select .cse48 0) 48))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= 9 (select |#length| 5)))) (.cse6 (not (= 30 (select |#length| 7)))) (.cse7 (not (= 31 (select |#length| 2)))) (.cse8 (not (= (select |#valid| 12) 1))) (.cse9 (not (= 2 (select |#length| 1)))) (.cse10 (not (= 9 (select |#length| 14)))) (.cse11 (not (= (select |#length| 15) 25))) (.cse12 (not (= (select |#valid| 6) 1))) (.cse13 (not (< 0 |#StackHeapBarrier|))) (.cse14 (not (= (select |#valid| 3) 1))) (.cse15 (not (= ~head~0.offset 0))) (.cse16 (not (= (select |#valid| 11) 1))) (.cse17 (not (= (select |#length| 9) 21))) (.cse18 (not (= 30 (select |#length| 10)))) (.cse19 (not (= (select |#valid| 15) 1))) (.cse20 (not (= (select |#length| 6) 21))) (.cse21 (not (= 1 (select |#valid| 5)))) (.cse22 (not (= (select |#length| 8) 9))) (.cse23 (not (= (select |#length| 3) 12))) (.cse24 (not (= (select |#valid| 0) 0))) (.cse25 (not (= (select .cse48 1) 0))) (.cse26 (not (= (select |#valid| 1) 1))) (.cse27 (not (= (select |#valid| 8) 1))) (.cse28 (not (= 30 (select |#length| 13)))) (.cse29 (not (= (select |#valid| 4) 1))) (.cse30 (not (= |#NULL.base| 0))) (.cse31 (not (= (select |#valid| 7) 1))) (.cse32 (not (= (select |#valid| 10) 1))) (.cse33 (not (= (select |#valid| 14) 1))) (.cse34 (not (= (select |#valid| 13) 1))) (.cse35 (not (= 30 (select |#length| 4)))) (.cse36 (not (= (select |#valid| 2) 1))) (.cse37 (not (= (select |#valid| 9) 1))) (.cse38 (not (= ~head~0.base 0))) (.cse39 (not (= ~cleanupTimeShifts~0 4))) (.cse41 (not (= 1 ~systemActive~0))) (.cse44 (= |timeShift_processEnvironment_~tmp~7#1| ~methaneLevelCritical~0)) (.cse40 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse42 (and .cse46 .cse45)) (.cse43 (and .cse47 (= ~pumpRunning~0 1)))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 (not (<= 1 |old(~waterLevel~0)|)) .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse27 .cse28 .cse29 .cse30 (not (= ~methaneLevelCritical~0 1)) .cse31 .cse32 (= |old(~waterLevel~0)| ~waterLevel~0) .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39) (or .cse40 .cse41 .cse42 .cse43) (or .cse41 (not (= |old(~pumpRunning~0)| 1)) .cse44) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (= |old(~waterLevel~0)| 1)) .cse41 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse45 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 (and .cse46 (= ~waterLevel~0 1)) .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39) (or .cse41 (and .cse46 .cse44) (and .cse47 .cse44) (and .cse40 .cse46) (and .cse47 (or .cse42 .cse43))))))) [2022-12-14 11:37:30,322 INFO L899 garLoopResultBuilder]: For program point L771-1(lines 771 777) no Hoare annotation was computed. [2022-12-14 11:37:30,323 INFO L899 garLoopResultBuilder]: For program point L173(lines 173 179) no Hoare annotation was computed. [2022-12-14 11:37:30,323 INFO L895 garLoopResultBuilder]: At program point L169(lines 169 182) the Hoare annotation is: (let ((.cse41 (= ~methaneLevelCritical~0 0)) (.cse48 (select |#memory_int| 1))) (let ((.cse0 (not (= (select |#length| 12) 25))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= (select .cse48 0) 48))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= 9 (select |#length| 5)))) (.cse6 (not (= 30 (select |#length| 7)))) (.cse7 (not (= 31 (select |#length| 2)))) (.cse8 (not (= (select |#valid| 12) 1))) (.cse9 (not (= 2 (select |#length| 1)))) (.cse10 (not (= 9 (select |#length| 14)))) (.cse11 (not (= (select |#length| 15) 25))) (.cse12 (not (= (select |#valid| 6) 1))) (.cse13 (not (< 0 |#StackHeapBarrier|))) (.cse14 (not (= (select |#valid| 3) 1))) (.cse15 (not (= ~head~0.offset 0))) (.cse16 (not (= (select |#valid| 11) 1))) (.cse17 (not (= (select |#length| 9) 21))) (.cse18 (not (= 30 (select |#length| 10)))) (.cse19 (not (= (select |#valid| 15) 1))) (.cse20 (not (= (select |#length| 6) 21))) (.cse21 (not (= 1 (select |#valid| 5)))) (.cse22 (not (= (select |#length| 8) 9))) (.cse23 (not (= (select |#length| 3) 12))) (.cse24 (not (= (select |#valid| 0) 0))) (.cse25 (not (= (select .cse48 1) 0))) (.cse26 (not (= (select |#valid| 1) 1))) (.cse27 (not (= (select |#valid| 8) 1))) (.cse28 (not (= 30 (select |#length| 13)))) (.cse29 (not (= (select |#valid| 4) 1))) (.cse30 (not (= |#NULL.base| 0))) (.cse31 (not (= (select |#valid| 7) 1))) (.cse32 (not (= (select |#valid| 10) 1))) (.cse33 (not (= (select |#valid| 14) 1))) (.cse34 (not (= (select |#valid| 13) 1))) (.cse35 (not (= 30 (select |#length| 4)))) (.cse36 (not (= (select |#valid| 2) 1))) (.cse37 (not (= (select |#valid| 9) 1))) (.cse38 (not (= ~head~0.base 0))) (.cse39 (not (= ~cleanupTimeShifts~0 4))) (.cse40 (not (= 1 ~systemActive~0))) (.cse44 (= ~pumpRunning~0 1)) (.cse42 (not .cse41)) (.cse46 (= ~pumpRunning~0 0)) (.cse47 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse45 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1| 0)) (.cse43 (= |timeShift_processEnvironment_~tmp~7#1| ~methaneLevelCritical~0))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 (not (<= 1 |old(~waterLevel~0)|)) .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse27 .cse28 .cse29 .cse30 (not (= ~methaneLevelCritical~0 1)) .cse31 .cse32 (= |old(~waterLevel~0)| ~waterLevel~0) .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39) (or .cse40 (and (or .cse1 .cse41) (or .cse42 (not (= |old(~pumpRunning~0)| 1)))) (and .cse43 .cse44) (not .cse45)) (or .cse41 .cse40 (and .cse46 .cse43) (and .cse47 .cse46)) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (= |old(~waterLevel~0)| 1)) .cse40 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse42 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 (and .cse46 (= ~waterLevel~0 1)) .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39) (or .cse40 (and .cse45 .cse44) .cse42 (and .cse47 .cse46 .cse45) (and .cse47 .cse45 .cse43))))) [2022-12-14 11:37:30,323 INFO L895 garLoopResultBuilder]: At program point L169-1(lines 161 185) the Hoare annotation is: (let ((.cse0 (= ~methaneLevelCritical~0 0)) (.cse48 (select |#memory_int| 1)) (.cse47 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~pumpRunning~0 0)) (.cse49 (= 1 ~systemActive~0))) (let ((.cse5 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1| 0)) (.cse3 (= |timeShift_processEnvironment_~tmp~7#1| ~methaneLevelCritical~0)) (.cse4 (and .cse47 .cse2 .cse49)) (.cse7 (not (= (select |#length| 12) 25))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (= (select .cse48 0) 48))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (= 9 (select |#length| 11)))) (.cse12 (not (= 9 (select |#length| 5)))) (.cse13 (not (= 30 (select |#length| 7)))) (.cse14 (not (= 31 (select |#length| 2)))) (.cse15 (not (= (select |#valid| 12) 1))) (.cse16 (not (= 2 (select |#length| 1)))) (.cse17 (not (= 9 (select |#length| 14)))) (.cse1 (not .cse49)) (.cse18 (not (= (select |#length| 15) 25))) (.cse19 (not (= (select |#valid| 6) 1))) (.cse20 (not (< 0 |#StackHeapBarrier|))) (.cse21 (not (= (select |#valid| 3) 1))) (.cse22 (not (= ~head~0.offset 0))) (.cse23 (not (= (select |#valid| 11) 1))) (.cse24 (not (= (select |#length| 9) 21))) (.cse25 (not (= 30 (select |#length| 10)))) (.cse26 (not (= (select |#valid| 15) 1))) (.cse27 (not (= (select |#length| 6) 21))) (.cse28 (not (= 1 (select |#valid| 5)))) (.cse29 (not (= (select |#length| 8) 9))) (.cse30 (not (= (select |#length| 3) 12))) (.cse31 (not (= (select |#valid| 0) 0))) (.cse6 (not .cse0)) (.cse32 (not (= (select .cse48 1) 0))) (.cse33 (not (= (select |#valid| 1) 1))) (.cse34 (not (= (select |#valid| 8) 1))) (.cse35 (not (= 30 (select |#length| 13)))) (.cse36 (not (= (select |#valid| 4) 1))) (.cse37 (not (= |#NULL.base| 0))) (.cse38 (not (= (select |#valid| 7) 1))) (.cse39 (not (= (select |#valid| 10) 1))) (.cse40 (not (= (select |#valid| 14) 1))) (.cse41 (not (= (select |#valid| 13) 1))) (.cse42 (not (= 30 (select |#length| 4)))) (.cse43 (not (= (select |#valid| 2) 1))) (.cse44 (not (= (select |#valid| 9) 1))) (.cse45 (not (= ~head~0.base 0))) (.cse46 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 (and .cse2 .cse3) .cse4) (or .cse5 .cse1 .cse6) (or (not (<= |old(~waterLevel~0)| 1)) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 (not (<= 1 |old(~waterLevel~0)|)) .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse34 .cse35 .cse36 .cse37 (not (= ~methaneLevelCritical~0 1)) .cse38 .cse39 (= |old(~waterLevel~0)| ~waterLevel~0) .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46) (or .cse8 .cse0 .cse1 (and (= |timeShift___utac_acc__Specification1_spec__1_~tmp___0~0#1| 0) (not .cse5))) (or .cse1 (not (= |old(~pumpRunning~0)| 1)) .cse3) (or (and .cse47 .cse3) .cse1 .cse6 .cse4 (= ~pumpRunning~0 1)) (or .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse6 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 (and .cse2 (= ~waterLevel~0 1)) .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46)))) [2022-12-14 11:37:30,324 INFO L899 garLoopResultBuilder]: For program point L764-1(lines 763 782) no Hoare annotation was computed. [2022-12-14 11:37:30,324 INFO L895 garLoopResultBuilder]: At program point L826(lines 826 834) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_processEnvironment_~tmp~7#1| ~methaneLevelCritical~0)) .cse0) (or (not (= |old(~pumpRunning~0)| 0)) .cse0))) [2022-12-14 11:37:30,324 INFO L899 garLoopResultBuilder]: For program point L822(lines 822 839) no Hoare annotation was computed. [2022-12-14 11:37:30,324 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 760 783) the Hoare annotation is: (let ((.cse41 (select |#memory_int| 1))) (let ((.cse0 (not (= (select |#length| 12) 25))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= (select .cse41 0) 48))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= 9 (select |#length| 5)))) (.cse6 (not (= 30 (select |#length| 7)))) (.cse7 (not (= 31 (select |#length| 2)))) (.cse8 (not (= (select |#valid| 12) 1))) (.cse9 (not (= 2 (select |#length| 1)))) (.cse10 (not (= 9 (select |#length| 14)))) (.cse11 (not (= (select |#length| 15) 25))) (.cse12 (not (= (select |#valid| 6) 1))) (.cse13 (not (< 0 |#StackHeapBarrier|))) (.cse14 (not (= (select |#valid| 3) 1))) (.cse15 (not (= ~head~0.offset 0))) (.cse16 (not (= (select |#valid| 11) 1))) (.cse17 (not (= (select |#length| 9) 21))) (.cse18 (not (= 30 (select |#length| 10)))) (.cse19 (not (= (select |#valid| 15) 1))) (.cse20 (not (= (select |#length| 6) 21))) (.cse21 (not (= 1 (select |#valid| 5)))) (.cse22 (not (= (select |#length| 8) 9))) (.cse23 (not (= (select |#length| 3) 12))) (.cse24 (not (= (select |#valid| 0) 0))) (.cse25 (not (= (select .cse41 1) 0))) (.cse26 (not (= (select |#valid| 1) 1))) (.cse27 (not (= (select |#valid| 8) 1))) (.cse28 (not (= 30 (select |#length| 13)))) (.cse29 (not (= (select |#valid| 4) 1))) (.cse30 (not (= |#NULL.base| 0))) (.cse31 (not (= (select |#valid| 7) 1))) (.cse32 (not (= (select |#valid| 10) 1))) (.cse33 (not (= (select |#valid| 14) 1))) (.cse34 (not (= (select |#valid| 13) 1))) (.cse35 (not (= 30 (select |#length| 4)))) (.cse36 (not (= (select |#valid| 2) 1))) (.cse37 (not (= (select |#valid| 9) 1))) (.cse38 (not (= ~head~0.base 0))) (.cse39 (not (= ~cleanupTimeShifts~0 4))) (.cse40 (not (= 1 ~systemActive~0)))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 (not (<= 1 |old(~waterLevel~0)|)) .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse27 .cse28 .cse29 .cse30 (not (= ~methaneLevelCritical~0 1)) .cse31 .cse32 (= |old(~waterLevel~0)| ~waterLevel~0) .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (= |old(~waterLevel~0)| 1)) .cse40 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 (not (= ~methaneLevelCritical~0 0)) .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 (= ~waterLevel~0 1) .cse35 .cse36 .cse37 .cse38 .cse39) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse40)))) [2022-12-14 11:37:30,324 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 760 783) no Hoare annotation was computed. [2022-12-14 11:37:30,324 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 155) no Hoare annotation was computed. [2022-12-14 11:37:30,325 INFO L895 garLoopResultBuilder]: At program point L167(line 167) the Hoare annotation is: (let ((.cse47 (= ~methaneLevelCritical~0 0))) (let ((.cse46 (= ~pumpRunning~0 0)) (.cse45 (not .cse47)) (.cse48 (select |#memory_int| 1))) (let ((.cse0 (not (= (select |#length| 12) 25))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= (select .cse48 0) 48))) (.cse3 (not (= |#NULL.offset| 0))) (.cse4 (not (= 9 (select |#length| 11)))) (.cse5 (not (= 9 (select |#length| 5)))) (.cse6 (not (= 30 (select |#length| 7)))) (.cse7 (not (= 31 (select |#length| 2)))) (.cse8 (not (= (select |#valid| 12) 1))) (.cse9 (not (= 2 (select |#length| 1)))) (.cse10 (not (= 9 (select |#length| 14)))) (.cse11 (not (= (select |#length| 15) 25))) (.cse12 (not (= (select |#valid| 6) 1))) (.cse13 (not (< 0 |#StackHeapBarrier|))) (.cse14 (not (= (select |#valid| 3) 1))) (.cse15 (not (= ~head~0.offset 0))) (.cse16 (not (= (select |#valid| 11) 1))) (.cse17 (not (= (select |#length| 9) 21))) (.cse18 (not (= 30 (select |#length| 10)))) (.cse19 (not (= (select |#valid| 15) 1))) (.cse20 (not (= (select |#length| 6) 21))) (.cse21 (not (= 1 (select |#valid| 5)))) (.cse22 (not (= (select |#length| 8) 9))) (.cse23 (not (= (select |#length| 3) 12))) (.cse24 (not (= (select |#valid| 0) 0))) (.cse25 (not (= (select .cse48 1) 0))) (.cse26 (not (= (select |#valid| 1) 1))) (.cse27 (not (= (select |#valid| 8) 1))) (.cse28 (not (= 30 (select |#length| 13)))) (.cse29 (not (= (select |#valid| 4) 1))) (.cse30 (not (= |#NULL.base| 0))) (.cse31 (not (= (select |#valid| 7) 1))) (.cse32 (not (= (select |#valid| 10) 1))) (.cse33 (not (= (select |#valid| 14) 1))) (.cse34 (not (= (select |#valid| 13) 1))) (.cse35 (not (= 30 (select |#length| 4)))) (.cse36 (not (= (select |#valid| 2) 1))) (.cse37 (not (= (select |#valid| 9) 1))) (.cse38 (not (= ~head~0.base 0))) (.cse39 (not (= ~cleanupTimeShifts~0 4))) (.cse41 (not (= 1 ~systemActive~0))) (.cse44 (= |timeShift_processEnvironment_~tmp~7#1| ~methaneLevelCritical~0)) (.cse40 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse42 (and .cse46 .cse45)) (.cse43 (and .cse47 (= ~pumpRunning~0 1)))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 (not (<= 1 |old(~waterLevel~0)|)) .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse27 .cse28 .cse29 .cse30 (not (= ~methaneLevelCritical~0 1)) .cse31 .cse32 (= |old(~waterLevel~0)| ~waterLevel~0) .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39) (or .cse40 .cse41 .cse42 .cse43) (or .cse41 (not (= |old(~pumpRunning~0)| 1)) .cse44) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (= |old(~waterLevel~0)| 1)) .cse41 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse45 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 (and .cse46 (= ~waterLevel~0 1)) .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39) (or .cse41 (and .cse46 .cse44) (and .cse47 .cse44) (and .cse40 .cse46) (and .cse47 (or .cse42 .cse43))))))) [2022-12-14 11:37:30,325 INFO L899 garLoopResultBuilder]: For program point L167-1(line 167) no Hoare annotation was computed. [2022-12-14 11:37:30,325 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 189 218) no Hoare annotation was computed. [2022-12-14 11:37:30,325 INFO L902 garLoopResultBuilder]: At program point L214(lines 189 218) the Hoare annotation is: true [2022-12-14 11:37:30,325 INFO L899 garLoopResultBuilder]: For program point L210(line 210) no Hoare annotation was computed. [2022-12-14 11:37:30,325 INFO L899 garLoopResultBuilder]: For program point L203(lines 203 207) no Hoare annotation was computed. [2022-12-14 11:37:30,325 INFO L902 garLoopResultBuilder]: At program point L203-1(lines 203 207) the Hoare annotation is: true [2022-12-14 11:37:30,325 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 189 218) the Hoare annotation is: true [2022-12-14 11:37:30,325 INFO L902 garLoopResultBuilder]: At program point L199-2(lines 199 213) the Hoare annotation is: true [2022-12-14 11:37:30,325 INFO L902 garLoopResultBuilder]: At program point L195(line 195) the Hoare annotation is: true [2022-12-14 11:37:30,325 INFO L899 garLoopResultBuilder]: For program point L195-1(line 195) no Hoare annotation was computed. [2022-12-14 11:37:30,325 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 95 103) the Hoare annotation is: true [2022-12-14 11:37:30,325 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 95 103) no Hoare annotation was computed. [2022-12-14 11:37:30,326 INFO L895 garLoopResultBuilder]: At program point L275(lines 275 282) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (and (= (select |#length| 15) 25) (= 9 (select |#length| 5)) (= (select |#length| 9) 21) (= 30 (select |#length| 7)) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (= ~pumpRunning~0 0) (= (select |#valid| 9) 1) (= (select |#length| 12) 25) (= (select |#valid| 11) 1) (= ~methaneLevelCritical~0 0) (= 30 (select |#length| 4)) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= 2 (select |#length| 1)) (= (select |#length| 8) 9) (= (select |#valid| 3) 1) (= (select |#valid| 7) 1) (= 30 (select |#length| 13)) (= 1 ~systemActive~0) (= 30 (select |#length| 10)) (= (select |#valid| 12) 1) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_main_~tmp~1#1|) (= (select |#valid| 4) 1) (= (select |#valid| 1) 1) (= (select |#length| 6) 21) (= (select |#valid| 14) 1) (= 9 (select |#length| 14)) (= (select |#valid| 0) 0) (= ~head~0.base 0) (= (select |#valid| 2) 1) (= |#NULL.offset| 0) (= 9 (select |#length| 11)) (= ~waterLevel~0 1) (= (select .cse0 0) 48) (= (select |#valid| 6) 1) (= (select .cse0 1) 0) (= |ULTIMATE.start_valid_product_~retValue_acc~5#1| |ULTIMATE.start_valid_product_#res#1|) (= (select |#valid| 10) 1) (= (select |#valid| 8) 1) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= |ULTIMATE.start_valid_product_~retValue_acc~5#1| 1) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))) [2022-12-14 11:37:30,326 INFO L902 garLoopResultBuilder]: At program point L275-2(lines 275 282) the Hoare annotation is: true [2022-12-14 11:37:30,326 INFO L895 garLoopResultBuilder]: At program point L746(lines 699 747) the Hoare annotation is: false [2022-12-14 11:37:30,326 INFO L899 garLoopResultBuilder]: For program point L701(lines 700 745) no Hoare annotation was computed. [2022-12-14 11:37:30,326 INFO L895 garLoopResultBuilder]: At program point L722(line 722) the Hoare annotation is: (and (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-12-14 11:37:30,326 INFO L895 garLoopResultBuilder]: At program point L743(lines 700 745) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1))) [2022-12-14 11:37:30,326 INFO L899 garLoopResultBuilder]: For program point L710(lines 710 716) no Hoare annotation was computed. [2022-12-14 11:37:30,326 INFO L899 garLoopResultBuilder]: For program point L710-1(lines 710 716) no Hoare annotation was computed. [2022-12-14 11:37:30,326 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-12-14 11:37:30,326 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(line -1) the Hoare annotation is: true [2022-12-14 11:37:30,326 INFO L895 garLoopResultBuilder]: At program point L736-2(lines 730 741) the Hoare annotation is: (and (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-12-14 11:37:30,326 INFO L899 garLoopResultBuilder]: For program point L720(lines 720 726) no Hoare annotation was computed. [2022-12-14 11:37:30,326 INFO L899 garLoopResultBuilder]: For program point L720-1(lines 720 726) no Hoare annotation was computed. [2022-12-14 11:37:30,326 INFO L902 garLoopResultBuilder]: At program point L749(lines 690 753) the Hoare annotation is: true [2022-12-14 11:37:30,326 INFO L895 garLoopResultBuilder]: At program point L712(line 712) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1))) [2022-12-14 11:37:30,326 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2022-12-14 11:37:30,327 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 71 82) the Hoare annotation is: true [2022-12-14 11:37:30,327 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 792 816) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0))) [2022-12-14 11:37:30,327 INFO L895 garLoopResultBuilder]: At program point L806(line 806) the Hoare annotation is: (let ((.cse45 (= |old(~pumpRunning~0)| 0)) (.cse46 (select |#memory_int| 1))) (let ((.cse0 (not (= (select |#length| 12) 25))) (.cse1 (not (= (select .cse46 0) 48))) (.cse2 (not (= |#NULL.offset| 0))) (.cse3 (not (= 9 (select |#length| 11)))) (.cse4 (not (= 9 (select |#length| 5)))) (.cse5 (not (= 30 (select |#length| 7)))) (.cse6 (not (= 31 (select |#length| 2)))) (.cse7 (not (= (select |#valid| 12) 1))) (.cse8 (not (= 2 (select |#length| 1)))) (.cse9 (not (= 9 (select |#length| 14)))) (.cse11 (not (= (select |#length| 15) 25))) (.cse12 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~9#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| |processEnvironment__wrappee__methaneQuery_~tmp~6#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_~retValue_acc~2#1| 1) (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_~retValue_acc~2#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~retValue_acc~11#1| |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~retValue_acc~11#1| |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~2#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~2#1| 0))) (.cse13 (not (= (select |#valid| 6) 1))) (.cse14 (not (< 0 |#StackHeapBarrier|))) (.cse15 (not (<= 1 ~waterLevel~0))) (.cse16 (not (= (select |#valid| 3) 1))) (.cse17 (not (= ~head~0.offset 0))) (.cse18 (not (= (select |#valid| 11) 1))) (.cse19 (not (= (select |#length| 9) 21))) (.cse20 (not (= 30 (select |#length| 10)))) (.cse21 (not (= (select |#valid| 15) 1))) (.cse22 (not (= (select |#length| 6) 21))) (.cse23 (not (= 1 (select |#valid| 5)))) (.cse24 (not (= (select |#length| 8) 9))) (.cse25 (not (= (select |#length| 3) 12))) (.cse26 (not (= (select |#valid| 0) 0))) (.cse28 (not (= (select .cse46 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (not (= (select |#valid| 14) 1))) (.cse37 (not (<= ~waterLevel~0 1))) (.cse38 (not (= (select |#valid| 13) 1))) (.cse39 (not (= 30 (select |#length| 4)))) (.cse40 (not (= (select |#valid| 2) 1))) (.cse41 (not (= (select |#valid| 9) 1))) (.cse42 (not (= ~head~0.base 0))) (.cse43 (not (= ~cleanupTimeShifts~0 4))) (.cse27 (not (= ~methaneLevelCritical~0 0))) (.cse44 (not .cse45)) (.cse10 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse0 .cse44 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse28 .cse29 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse30 .cse31 .cse32 .cse33 (not (= ~methaneLevelCritical~0 1)) .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse10 .cse45 .cse27) (or .cse44 (= ~pumpRunning~0 0) .cse10)))) [2022-12-14 11:37:30,327 INFO L899 garLoopResultBuilder]: For program point L800(lines 800 808) no Hoare annotation was computed. [2022-12-14 11:37:30,327 INFO L895 garLoopResultBuilder]: At program point L796(lines 796 813) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0))) [2022-12-14 11:37:30,327 INFO L895 garLoopResultBuilder]: At program point L856(line 856) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse45 (select |#memory_int| 1))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= (select |#length| 12) 25))) (.cse4 (not (= (select .cse45 0) 48))) (.cse5 (not (= |#NULL.offset| 0))) (.cse6 (not (= 9 (select |#length| 11)))) (.cse7 (not (= 9 (select |#length| 5)))) (.cse8 (not (= 30 (select |#length| 7)))) (.cse9 (not (= 31 (select |#length| 2)))) (.cse10 (not (= (select |#valid| 12) 1))) (.cse11 (not (= 2 (select |#length| 1)))) (.cse12 (not (= 9 (select |#length| 14)))) (.cse13 (not (= (select |#length| 15) 25))) (.cse14 (not (= (select |#valid| 6) 1))) (.cse15 (not (< 0 |#StackHeapBarrier|))) (.cse16 (not (<= 1 ~waterLevel~0))) (.cse17 (not (= (select |#valid| 3) 1))) (.cse18 (not (= ~head~0.offset 0))) (.cse19 (not (= (select |#valid| 11) 1))) (.cse20 (not (= (select |#length| 9) 21))) (.cse21 (not (= 30 (select |#length| 10)))) (.cse22 (not (= (select |#valid| 15) 1))) (.cse23 (not (= (select |#length| 6) 21))) (.cse24 (not (= 1 (select |#valid| 5)))) (.cse25 (not (= (select |#length| 8) 9))) (.cse26 (not (= (select |#length| 3) 12))) (.cse27 (not (= (select |#valid| 0) 0))) (.cse28 (not (= (select .cse45 1) 0))) (.cse29 (not (= (select |#valid| 1) 1))) (.cse30 (not (= (select |#valid| 8) 1))) (.cse31 (not (= 30 (select |#length| 13)))) (.cse32 (not (= (select |#valid| 4) 1))) (.cse33 (not (= |#NULL.base| 0))) (.cse34 (not (= (select |#valid| 7) 1))) (.cse35 (not (= (select |#valid| 10) 1))) (.cse36 (not (= (select |#valid| 14) 1))) (.cse37 (not (<= ~waterLevel~0 1))) (.cse38 (not (= (select |#valid| 13) 1))) (.cse39 (not (= 30 (select |#length| 4)))) (.cse40 (not (= (select |#valid| 2) 1))) (.cse41 (not (= (select |#valid| 9) 1))) (.cse42 (not (= ~head~0.base 0))) (.cse43 (not (= ~cleanupTimeShifts~0 4))) (.cse44 (not .cse1)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse0 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse2 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse3 .cse44 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse30 .cse31 .cse32 .cse33 (not (= ~methaneLevelCritical~0 1)) .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43) (or .cse44 (= ~pumpRunning~0 0) .cse0)))) [2022-12-14 11:37:30,328 INFO L895 garLoopResultBuilder]: At program point L856-1(line 856) the Hoare annotation is: (let ((.cse45 (select |#memory_int| 1)) (.cse1 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= (select |#length| 12) 25))) (.cse3 (not .cse1)) (.cse5 (not (= (select .cse45 0) 48))) (.cse6 (not (= |#NULL.offset| 0))) (.cse7 (not (= 9 (select |#length| 11)))) (.cse8 (not (= 9 (select |#length| 5)))) (.cse9 (not (= 30 (select |#length| 7)))) (.cse10 (not (= 31 (select |#length| 2)))) (.cse11 (not (= (select |#valid| 12) 1))) (.cse12 (not (= 2 (select |#length| 1)))) (.cse13 (not (= 9 (select |#length| 14)))) (.cse14 (not (= (select |#length| 15) 25))) (.cse15 (not (= (select |#valid| 6) 1))) (.cse16 (not (< 0 |#StackHeapBarrier|))) (.cse17 (not (<= 1 ~waterLevel~0))) (.cse18 (not (= (select |#valid| 3) 1))) (.cse19 (not (= ~head~0.offset 0))) (.cse20 (not (= (select |#valid| 11) 1))) (.cse21 (not (= (select |#length| 9) 21))) (.cse22 (not (= 30 (select |#length| 10)))) (.cse23 (not (= (select |#valid| 15) 1))) (.cse24 (not (= (select |#length| 6) 21))) (.cse25 (not (= 1 (select |#valid| 5)))) (.cse26 (not (= (select |#length| 8) 9))) (.cse27 (not (= (select |#length| 3) 12))) (.cse28 (not (= (select |#valid| 0) 0))) (.cse29 (not (= (select .cse45 1) 0))) (.cse30 (not (= (select |#valid| 1) 1))) (.cse31 (not (= (select |#valid| 8) 1))) (.cse32 (not (= 30 (select |#length| 13)))) (.cse33 (not (= (select |#valid| 4) 1))) (.cse34 (not (= |#NULL.base| 0))) (.cse35 (not (= (select |#valid| 7) 1))) (.cse36 (not (= (select |#valid| 10) 1))) (.cse37 (not (= (select |#valid| 14) 1))) (.cse38 (not (<= ~waterLevel~0 1))) (.cse39 (not (= (select |#valid| 13) 1))) (.cse40 (not (= 30 (select |#length| 4)))) (.cse41 (not (= (select |#valid| 2) 1))) (.cse42 (not (= (select |#valid| 9) 1))) (.cse43 (not (= ~head~0.base 0))) (.cse44 (not (= ~cleanupTimeShifts~0 4)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__methaneQuery_activatePump_#t~ret42#1| ~methaneLevelCritical~0))) (or .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse0 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse2 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44) (or .cse4 .cse3 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse31 .cse32 .cse33 .cse34 (not (= ~methaneLevelCritical~0 1)) .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44)))) [2022-12-14 11:37:30,328 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 792 816) no Hoare annotation was computed. [2022-12-14 11:37:30,328 INFO L895 garLoopResultBuilder]: At program point L811(line 811) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0))) [2022-12-14 11:37:30,328 INFO L899 garLoopResultBuilder]: For program point L811-1(lines 792 816) no Hoare annotation was computed. [2022-12-14 11:37:30,328 INFO L902 garLoopResultBuilder]: At program point L881(line 881) the Hoare annotation is: true [2022-12-14 11:37:30,328 INFO L899 garLoopResultBuilder]: For program point L881-1(line 881) no Hoare annotation was computed. [2022-12-14 11:37:30,328 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 876 886) no Hoare annotation was computed. [2022-12-14 11:37:30,328 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 876 886) the Hoare annotation is: true [2022-12-14 11:37:30,330 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 11:37:30,332 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-14 11:37:30,357 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 14.12 11:37:30 BoogieIcfgContainer [2022-12-14 11:37:30,357 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-14 11:37:30,358 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-14 11:37:30,358 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-14 11:37:30,358 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-14 11:37:30,358 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 11:36:52" (3/4) ... [2022-12-14 11:37:30,360 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-12-14 11:37:30,364 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-12-14 11:37:30,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-12-14 11:37:30,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-12-14 11:37:30,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-12-14 11:37:30,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-12-14 11:37:30,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-12-14 11:37:30,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-12-14 11:37:30,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-12-14 11:37:30,369 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 46 nodes and edges [2022-12-14 11:37:30,370 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2022-12-14 11:37:30,370 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-12-14 11:37:30,371 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-14 11:37:30,371 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-14 11:37:30,391 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && pumpRunning == 0) && \valid[9] == 1) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && 31 == unknown-#length-unknown[2]) && head == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && 30 == unknown-#length-unknown[13]) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && \result == tmp) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[1][0] == 48) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && retValue_acc == \result) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && retValue_acc == 1) && cleanupTimeShifts == 4) && #NULL == 0 [2022-12-14 11:37:30,392 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((!(\old(waterLevel) <= 1) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(1 <= \old(waterLevel))) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(methaneLevelCritical == systemActive)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(methaneLevelCritical == 1)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || waterLevel == 1) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (pumpRunning == \old(pumpRunning) || !(1 == systemActive)) [2022-12-14 11:37:30,392 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((!(\old(waterLevel) <= 1) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(1 <= \old(waterLevel))) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(methaneLevelCritical == systemActive)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(methaneLevelCritical == 1)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || (pumpRunning == 0 && !(methaneLevelCritical == 0))) || (methaneLevelCritical == 0 && pumpRunning == 1))) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || tmp == methaneLevelCritical)) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || (pumpRunning == 0 && waterLevel == 1)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((!(1 == systemActive) || (pumpRunning == 0 && tmp == methaneLevelCritical)) || (methaneLevelCritical == 0 && tmp == methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || (methaneLevelCritical == 0 && ((pumpRunning == 0 && !(methaneLevelCritical == 0)) || (methaneLevelCritical == 0 && pumpRunning == 1)))) [2022-12-14 11:37:30,392 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) [2022-12-14 11:37:30,393 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) || !(1 == systemActive)) && (!(\old(pumpRunning) == 0) || !(1 == systemActive)) [2022-12-14 11:37:30,393 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((!(\old(waterLevel) <= 1) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(1 <= \old(waterLevel))) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(methaneLevelCritical == systemActive)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(methaneLevelCritical == 1)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && (((!(1 == systemActive) || ((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) && (!(methaneLevelCritical == 0) || !(\old(pumpRunning) == 1)))) || (tmp == methaneLevelCritical && pumpRunning == 1)) || !(tmp == 0))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || (pumpRunning == 0 && tmp == methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0))) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || (pumpRunning == 0 && waterLevel == 1)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((!(1 == systemActive) || (tmp == 0 && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 0)) || ((pumpRunning == \old(pumpRunning) && tmp == 0) && tmp == methaneLevelCritical)) [2022-12-14 11:37:30,393 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || (pumpRunning == 0 && tmp == methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive)) && ((tmp == 0 || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((((((((((((((((((((((((((((((((((((((((((!(\old(waterLevel) <= 1) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(1 <= \old(waterLevel))) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(methaneLevelCritical == systemActive)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(methaneLevelCritical == 1)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || (tmp___0 == 0 && !(tmp == 0)))) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || tmp == methaneLevelCritical)) && (((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive)) || pumpRunning == 1)) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || (pumpRunning == 0 && waterLevel == 1)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) [2022-12-14 11:37:30,393 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && aux-isMethaneAlarm()-aux == methaneLevelCritical))) && ((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(1 <= waterLevel)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(waterLevel <= 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(1 <= waterLevel)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(methaneLevelCritical == systemActive)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(methaneLevelCritical == 1)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(waterLevel <= 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) [2022-12-14 11:37:30,408 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/witness.graphml [2022-12-14 11:37:30,408 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-14 11:37:30,409 INFO L158 Benchmark]: Toolchain (without parser) took 38625.16ms. Allocated memory was 138.4MB in the beginning and 167.8MB in the end (delta: 29.4MB). Free memory was 103.9MB in the beginning and 126.0MB in the end (delta: -22.1MB). Peak memory consumption was 104.1MB. Max. memory is 16.1GB. [2022-12-14 11:37:30,409 INFO L158 Benchmark]: CDTParser took 0.11ms. Allocated memory is still 100.7MB. Free memory is still 50.0MB. There was no memory consumed. Max. memory is 16.1GB. [2022-12-14 11:37:30,409 INFO L158 Benchmark]: CACSL2BoogieTranslator took 289.57ms. Allocated memory is still 138.4MB. Free memory was 103.5MB in the beginning and 85.0MB in the end (delta: 18.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-12-14 11:37:30,409 INFO L158 Benchmark]: Boogie Procedure Inliner took 28.02ms. Allocated memory is still 138.4MB. Free memory was 85.0MB in the beginning and 82.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-14 11:37:30,409 INFO L158 Benchmark]: Boogie Preprocessor took 16.10ms. Allocated memory is still 138.4MB. Free memory was 82.9MB in the beginning and 81.6MB in the end (delta: 1.3MB). There was no memory consumed. Max. memory is 16.1GB. [2022-12-14 11:37:30,410 INFO L158 Benchmark]: RCFGBuilder took 426.01ms. Allocated memory is still 138.4MB. Free memory was 81.3MB in the beginning and 107.0MB in the end (delta: -25.7MB). Peak memory consumption was 27.9MB. Max. memory is 16.1GB. [2022-12-14 11:37:30,410 INFO L158 Benchmark]: TraceAbstraction took 37808.95ms. Allocated memory was 138.4MB in the beginning and 167.8MB in the end (delta: 29.4MB). Free memory was 106.9MB in the beginning and 34.0MB in the end (delta: 72.9MB). Peak memory consumption was 109.6MB. Max. memory is 16.1GB. [2022-12-14 11:37:30,410 INFO L158 Benchmark]: Witness Printer took 50.61ms. Allocated memory is still 167.8MB. Free memory was 34.0MB in the beginning and 126.0MB in the end (delta: -92.0MB). Peak memory consumption was 4.4MB. Max. memory is 16.1GB. [2022-12-14 11:37:30,411 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11ms. Allocated memory is still 100.7MB. Free memory is still 50.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 289.57ms. Allocated memory is still 138.4MB. Free memory was 103.5MB in the beginning and 85.0MB in the end (delta: 18.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 28.02ms. Allocated memory is still 138.4MB. Free memory was 85.0MB in the beginning and 82.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 16.10ms. Allocated memory is still 138.4MB. Free memory was 82.9MB in the beginning and 81.6MB in the end (delta: 1.3MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 426.01ms. Allocated memory is still 138.4MB. Free memory was 81.3MB in the beginning and 107.0MB in the end (delta: -25.7MB). Peak memory consumption was 27.9MB. Max. memory is 16.1GB. * TraceAbstraction took 37808.95ms. Allocated memory was 138.4MB in the beginning and 167.8MB in the end (delta: 29.4MB). Free memory was 106.9MB in the beginning and 34.0MB in the end (delta: 72.9MB). Peak memory consumption was 109.6MB. Max. memory is 16.1GB. * Witness Printer took 50.61ms. Allocated memory is still 167.8MB. Free memory was 34.0MB in the beginning and 126.0MB in the end (delta: -92.0MB). Peak memory consumption was 4.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 155]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 63 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 37.7s, OverallIterations: 9, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 6.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 12.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1390 SdHoareTripleChecker+Valid, 2.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1365 mSDsluCounter, 1755 SdHoareTripleChecker+Invalid, 2.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1302 mSDsCounter, 911 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4453 IncrementalHoareTripleChecker+Invalid, 5364 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 911 mSolverCounterUnsat, 453 mSDtfsCounter, 4453 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 491 GetRequests, 264 SyntacticMatches, 6 SemanticMatches, 221 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6696 ImplicationChecksByTransitivity, 17.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=437occurred in iteration=8, InterpolantAutomatonStates: 143, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 9 MinimizatonAttempts, 154 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 36 LocationsWithAnnotation, 827 PreInvPairs, 963 NumberOfFragments, 5377 HoareAnnotationTreeSize, 827 FomulaSimplifications, 1731 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 36 FomulaSimplificationsInter, 32967 FormulaSimplificationTreeSizeReductionInter, 11.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.0s InterpolantComputationTime, 456 NumberOfCodeBlocks, 456 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 521 ConstructedInterpolants, 0 QuantifiedInterpolants, 1715 SizeOfPredicates, 25 NumberOfNonLiveVariables, 742 ConjunctsInSsa, 91 ConjunctsInUnsatCore, 14 InterpolantComputations, 7 PerfectInterpolantSequences, 65/82 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 1.1s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 4, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 24, DAG_INTERPRETER_EARLY_EXITS: 3, TOOLS_POST_APPLICATIONS: 24, TOOLS_POST_TIME: 0.3s, TOOLS_POST_CALL_APPLICATIONS: 11, TOOLS_POST_CALL_TIME: 0.5s, TOOLS_POST_RETURN_APPLICATIONS: 8, TOOLS_POST_RETURN_TIME: 0.2s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 43, TOOLS_QUANTIFIERELIM_TIME: 1.0s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.3s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 66, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 4, DOMAIN_JOIN_TIME: 0.1s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 0, DOMAIN_WIDEN_TIME: 0.0s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 0, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 24, DOMAIN_ISBOTTOM_TIME: 0.0s, LOOP_SUMMARIZER_APPLICATIONS: 0, LOOP_SUMMARIZER_CACHE_MISSES: 0, LOOP_SUMMARIZER_OVERALL_TIME: 0.0s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 0.0s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 0, CALL_SUMMARIZER_APPLICATIONS: 8, CALL_SUMMARIZER_CACHE_MISSES: 4, CALL_SUMMARIZER_OVERALL_TIME: 0.1s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.1s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 297, DAG_COMPRESSION_RETAINED_NODES: 105, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 699]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 690]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 826]: Loop Invariant Derived loop invariant: ((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) || !(1 == systemActive)) && (!(\old(pumpRunning) == 0) || !(1 == systemActive)) - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 275]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && pumpRunning == 0) && \valid[9] == 1) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && 31 == unknown-#length-unknown[2]) && head == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && 30 == unknown-#length-unknown[13]) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && \result == tmp) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[1][0] == 48) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && retValue_acc == \result) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && retValue_acc == 1) && cleanupTimeShifts == 4) && #NULL == 0 - InvariantResult [Line: 155]: Loop Invariant Derived loop invariant: !(1 == systemActive) - InvariantResult [Line: 700]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) || ((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 818]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((!(\old(waterLevel) <= 1) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(1 <= \old(waterLevel))) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(methaneLevelCritical == systemActive)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(methaneLevelCritical == 1)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || (pumpRunning == 0 && !(methaneLevelCritical == 0))) || (methaneLevelCritical == 0 && pumpRunning == 1))) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || tmp == methaneLevelCritical)) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || (pumpRunning == 0 && waterLevel == 1)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((!(1 == systemActive) || (pumpRunning == 0 && tmp == methaneLevelCritical)) || (methaneLevelCritical == 0 && tmp == methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || (methaneLevelCritical == 0 && ((pumpRunning == 0 && !(methaneLevelCritical == 0)) || (methaneLevelCritical == 0 && pumpRunning == 1)))) - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((!(\old(waterLevel) <= 1) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(1 <= \old(waterLevel))) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(methaneLevelCritical == systemActive)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(methaneLevelCritical == 1)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && (((!(1 == systemActive) || ((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) && (!(methaneLevelCritical == 0) || !(\old(pumpRunning) == 1)))) || (tmp == methaneLevelCritical && pumpRunning == 1)) || !(tmp == 0))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || (pumpRunning == 0 && tmp == methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0))) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || (pumpRunning == 0 && waterLevel == 1)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && ((((!(1 == systemActive) || (tmp == 0 && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 0)) || ((pumpRunning == \old(pumpRunning) && tmp == 0) && tmp == methaneLevelCritical)) - InvariantResult [Line: 856]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && aux-isMethaneAlarm()-aux == methaneLevelCritical))) && ((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(1 <= waterLevel)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(waterLevel <= 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(1 <= waterLevel)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(methaneLevelCritical == systemActive)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(methaneLevelCritical == 1)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(waterLevel <= 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 275]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 199]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 760]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((!(\old(waterLevel) <= 1) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(1 <= \old(waterLevel))) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(methaneLevelCritical == systemActive)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(methaneLevelCritical == 1)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || waterLevel == 1) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (pumpRunning == \old(pumpRunning) || !(1 == systemActive)) - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: ((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || (pumpRunning == 0 && tmp == methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive)) && ((tmp == 0 || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((((((((((((((((((((((((((((((((((((((((((!(\old(waterLevel) <= 1) || !(unknown-#length-unknown[12] == 25)) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(1 <= \old(waterLevel))) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(methaneLevelCritical == systemActive)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || !(methaneLevelCritical == 1)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || \old(waterLevel) == waterLevel) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4))) && (((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || (tmp___0 == 0 && !(tmp == 0)))) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || tmp == methaneLevelCritical)) && (((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive)) || pumpRunning == 1)) && (((((((((((((((((((((((((((((((((((((((((((!(unknown-#length-unknown[12] == 25) || !(\old(pumpRunning) == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(#NULL == 0)) || !(9 == unknown-#length-unknown[11])) || !(9 == unknown-#length-unknown[5])) || !(30 == unknown-#length-unknown[7])) || !(31 == unknown-#length-unknown[2])) || !(\valid[12] == 1)) || !(2 == unknown-#length-unknown[1])) || !(9 == unknown-#length-unknown[14])) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(unknown-#length-unknown[15] == 25)) || !(\valid[6] == 1)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(\valid[3] == 1)) || !(head == 0)) || !(\valid[11] == 1)) || !(unknown-#length-unknown[9] == 21)) || !(30 == unknown-#length-unknown[10])) || !(\valid[15] == 1)) || !(unknown-#length-unknown[6] == 21)) || !(1 == \valid[5])) || !(unknown-#length-unknown[8] == 9)) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(methaneLevelCritical == 0)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(\valid[1] == 1)) || !(\valid[8] == 1)) || !(30 == unknown-#length-unknown[13])) || !(\valid[4] == 1)) || !(#NULL == 0)) || (pumpRunning == 0 && waterLevel == 1)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(\valid[14] == 1)) || !(\valid[13] == 1)) || !(30 == unknown-#length-unknown[4])) || !(\valid[2] == 1)) || !(\valid[9] == 1)) || !(head == 0)) || !(cleanupTimeShifts == 4)) - InvariantResult [Line: 796]: Loop Invariant Derived loop invariant: ((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) RESULT: Ultimate proved your program to be correct! [2022-12-14 11:37:30,433 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8ad4e46b-8714-4623-8e41-a936945e877d/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE