./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0cfed743c16ce3c8683c42b92f2e032d4ce7b489a9d3a5e140ec6101c472b3cb --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 02:11:22,861 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 02:11:22,864 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 02:11:22,922 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 02:11:22,923 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 02:11:22,928 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 02:11:22,931 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 02:11:22,936 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 02:11:22,939 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 02:11:22,946 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 02:11:22,947 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 02:11:22,951 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 02:11:22,951 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 02:11:22,955 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 02:11:22,957 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 02:11:22,960 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 02:11:22,962 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 02:11:22,963 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 02:11:22,965 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 02:11:22,977 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 02:11:22,979 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 02:11:22,981 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 02:11:22,985 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 02:11:22,986 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 02:11:22,996 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 02:11:22,997 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 02:11:22,997 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 02:11:23,000 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 02:11:23,000 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 02:11:23,002 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 02:11:23,003 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 02:11:23,006 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 02:11:23,008 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 02:11:23,010 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 02:11:23,011 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 02:11:23,011 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 02:11:23,012 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 02:11:23,013 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 02:11:23,013 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 02:11:23,014 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 02:11:23,015 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 02:11:23,016 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-03 02:11:23,065 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 02:11:23,068 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 02:11:23,069 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 02:11:23,069 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 02:11:23,070 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 02:11:23,071 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 02:11:23,071 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 02:11:23,071 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 02:11:23,071 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 02:11:23,072 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-03 02:11:23,073 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 02:11:23,073 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 02:11:23,074 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-03 02:11:23,074 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-03 02:11:23,074 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 02:11:23,074 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-03 02:11:23,075 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-03 02:11:23,075 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-03 02:11:23,076 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 02:11:23,076 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-03 02:11:23,076 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-03 02:11:23,077 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-03 02:11:23,077 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 02:11:23,079 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-03 02:11:23,079 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 02:11:23,079 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-03 02:11:23,080 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-03 02:11:23,080 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-03 02:11:23,080 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 02:11:23,081 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-03 02:11:23,081 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 02:11:23,081 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 02:11:23,082 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:11:23,082 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 02:11:23,082 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-03 02:11:23,083 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 02:11:23,083 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-03 02:11:23,083 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-03 02:11:23,083 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-03 02:11:23,084 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-03 02:11:23,084 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 02:11:23,084 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0cfed743c16ce3c8683c42b92f2e032d4ce7b489a9d3a5e140ec6101c472b3cb [2022-11-03 02:11:23,497 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 02:11:23,524 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 02:11:23,528 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 02:11:23,529 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 02:11:23,531 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 02:11:23,533 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c [2022-11-03 02:11:23,627 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/data/e6dc1dfc9/f6ecf7e7af0f4bcbb54d232dc9fa6b33/FLAGc70362426 [2022-11-03 02:11:24,372 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 02:11:24,373 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c [2022-11-03 02:11:24,390 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/data/e6dc1dfc9/f6ecf7e7af0f4bcbb54d232dc9fa6b33/FLAGc70362426 [2022-11-03 02:11:24,609 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/data/e6dc1dfc9/f6ecf7e7af0f4bcbb54d232dc9fa6b33 [2022-11-03 02:11:24,612 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 02:11:24,614 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 02:11:24,620 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 02:11:24,620 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 02:11:24,624 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 02:11:24,625 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:11:24" (1/1) ... [2022-11-03 02:11:24,627 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6b37bf1e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:24, skipping insertion in model container [2022-11-03 02:11:24,627 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:11:24" (1/1) ... [2022-11-03 02:11:24,635 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 02:11:24,676 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 02:11:25,140 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c[17978,17991] [2022-11-03 02:11:25,143 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:11:25,155 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 02:11:25,235 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c[17978,17991] [2022-11-03 02:11:25,236 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:11:25,257 INFO L208 MainTranslator]: Completed translation [2022-11-03 02:11:25,257 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:25 WrapperNode [2022-11-03 02:11:25,257 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 02:11:25,259 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 02:11:25,259 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 02:11:25,259 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 02:11:25,268 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:25" (1/1) ... [2022-11-03 02:11:25,304 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:25" (1/1) ... [2022-11-03 02:11:25,356 INFO L138 Inliner]: procedures = 53, calls = 152, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 246 [2022-11-03 02:11:25,357 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 02:11:25,358 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 02:11:25,358 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 02:11:25,358 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 02:11:25,371 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:25" (1/1) ... [2022-11-03 02:11:25,371 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:25" (1/1) ... [2022-11-03 02:11:25,386 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:25" (1/1) ... [2022-11-03 02:11:25,386 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:25" (1/1) ... [2022-11-03 02:11:25,392 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:25" (1/1) ... [2022-11-03 02:11:25,397 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:25" (1/1) ... [2022-11-03 02:11:25,399 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:25" (1/1) ... [2022-11-03 02:11:25,416 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:25" (1/1) ... [2022-11-03 02:11:25,419 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 02:11:25,420 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 02:11:25,420 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 02:11:25,420 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 02:11:25,439 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:25" (1/1) ... [2022-11-03 02:11:25,446 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:11:25,459 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:11:25,473 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 02:11:25,475 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 02:11:25,534 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-03 02:11:25,534 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-03 02:11:25,534 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-03 02:11:25,534 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-03 02:11:25,535 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-03 02:11:25,535 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-03 02:11:25,535 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-03 02:11:25,535 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-03 02:11:25,535 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-03 02:11:25,535 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-03 02:11:25,536 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-03 02:11:25,536 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-03 02:11:25,536 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-03 02:11:25,536 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-03 02:11:25,536 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 02:11:25,536 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 02:11:25,669 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 02:11:25,671 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 02:11:26,231 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 02:11:26,353 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 02:11:26,353 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-03 02:11:26,356 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:11:26 BoogieIcfgContainer [2022-11-03 02:11:26,357 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 02:11:26,359 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 02:11:26,359 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 02:11:26,364 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 02:11:26,364 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 02:11:24" (1/3) ... [2022-11-03 02:11:26,365 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2955f0e8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:11:26, skipping insertion in model container [2022-11-03 02:11:26,365 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:11:25" (2/3) ... [2022-11-03 02:11:26,366 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2955f0e8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:11:26, skipping insertion in model container [2022-11-03 02:11:26,366 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:11:26" (3/3) ... [2022-11-03 02:11:26,368 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product41.cil.c [2022-11-03 02:11:26,392 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 02:11:26,392 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-03 02:11:26,453 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 02:11:26,462 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@27c49825, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 02:11:26,462 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-03 02:11:26,467 INFO L276 IsEmpty]: Start isEmpty. Operand has 51 states, 33 states have (on average 1.4242424242424243) internal successors, (47), 39 states have internal predecessors, (47), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2022-11-03 02:11:26,480 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-03 02:11:26,480 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:26,481 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:26,482 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:26,488 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:26,489 INFO L85 PathProgramCache]: Analyzing trace with hash 165038279, now seen corresponding path program 1 times [2022-11-03 02:11:26,502 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:11:26,502 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1883306271] [2022-11-03 02:11:26,503 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:26,504 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:11:26,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:26,872 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:11:26,872 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:11:26,874 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1883306271] [2022-11-03 02:11:26,875 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1883306271] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:26,875 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:26,876 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:11:26,877 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [26976760] [2022-11-03 02:11:26,878 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:26,885 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-03 02:11:26,886 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:11:26,928 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-03 02:11:26,930 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 02:11:26,932 INFO L87 Difference]: Start difference. First operand has 51 states, 33 states have (on average 1.4242424242424243) internal successors, (47), 39 states have internal predecessors, (47), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:11:27,046 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:27,046 INFO L93 Difference]: Finished difference Result 100 states and 135 transitions. [2022-11-03 02:11:27,048 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-03 02:11:27,050 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-11-03 02:11:27,050 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:27,066 INFO L225 Difference]: With dead ends: 100 [2022-11-03 02:11:27,067 INFO L226 Difference]: Without dead ends: 46 [2022-11-03 02:11:27,072 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 02:11:27,078 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 48 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:27,080 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 48 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:11:27,102 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2022-11-03 02:11:27,139 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 46. [2022-11-03 02:11:27,141 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 30 states have (on average 1.3) internal successors, (39), 35 states have internal predecessors, (39), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-03 02:11:27,146 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 58 transitions. [2022-11-03 02:11:27,148 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 58 transitions. Word has length 17 [2022-11-03 02:11:27,148 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:27,149 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 58 transitions. [2022-11-03 02:11:27,150 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:11:27,150 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 58 transitions. [2022-11-03 02:11:27,153 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-03 02:11:27,153 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:27,169 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:27,169 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-03 02:11:27,171 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:27,172 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:27,172 INFO L85 PathProgramCache]: Analyzing trace with hash -485669593, now seen corresponding path program 1 times [2022-11-03 02:11:27,172 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:11:27,172 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [718355686] [2022-11-03 02:11:27,173 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:27,173 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:11:27,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:27,396 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:11:27,397 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:11:27,398 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [718355686] [2022-11-03 02:11:27,398 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [718355686] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:27,398 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:27,398 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:11:27,399 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [811013065] [2022-11-03 02:11:27,399 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:27,401 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:11:27,401 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:11:27,402 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:11:27,402 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:11:27,403 INFO L87 Difference]: Start difference. First operand 46 states and 58 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:11:27,480 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:27,481 INFO L93 Difference]: Finished difference Result 69 states and 87 transitions. [2022-11-03 02:11:27,485 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:11:27,485 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-11-03 02:11:27,486 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:27,488 INFO L225 Difference]: With dead ends: 69 [2022-11-03 02:11:27,489 INFO L226 Difference]: Without dead ends: 38 [2022-11-03 02:11:27,496 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:11:27,498 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 7 mSDsluCounter, 35 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 59 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:27,499 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 59 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:11:27,503 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-11-03 02:11:27,511 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 38. [2022-11-03 02:11:27,512 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 25 states have (on average 1.32) internal successors, (33), 30 states have internal predecessors, (33), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-03 02:11:27,516 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 47 transitions. [2022-11-03 02:11:27,516 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 47 transitions. Word has length 18 [2022-11-03 02:11:27,516 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:27,517 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 47 transitions. [2022-11-03 02:11:27,518 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:11:27,518 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 47 transitions. [2022-11-03 02:11:27,520 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-03 02:11:27,521 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:27,521 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:27,522 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-03 02:11:27,522 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:27,522 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:27,523 INFO L85 PathProgramCache]: Analyzing trace with hash 735117968, now seen corresponding path program 1 times [2022-11-03 02:11:27,523 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:11:27,523 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [731968812] [2022-11-03 02:11:27,523 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:27,524 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:11:27,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:27,620 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:11:27,620 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:11:27,620 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [731968812] [2022-11-03 02:11:27,621 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [731968812] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:27,621 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:27,621 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:11:27,621 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [714167501] [2022-11-03 02:11:27,621 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:27,622 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:11:27,622 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:11:27,623 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:11:27,623 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:11:27,623 INFO L87 Difference]: Start difference. First operand 38 states and 47 transitions. Second operand has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:11:27,667 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:27,667 INFO L93 Difference]: Finished difference Result 74 states and 93 transitions. [2022-11-03 02:11:27,668 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:11:27,668 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2022-11-03 02:11:27,669 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:27,669 INFO L225 Difference]: With dead ends: 74 [2022-11-03 02:11:27,670 INFO L226 Difference]: Without dead ends: 38 [2022-11-03 02:11:27,670 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:11:27,672 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 36 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 32 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:27,672 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 32 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:11:27,673 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-11-03 02:11:27,679 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 38. [2022-11-03 02:11:27,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 25 states have (on average 1.28) internal successors, (32), 30 states have internal predecessors, (32), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-03 02:11:27,680 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 46 transitions. [2022-11-03 02:11:27,680 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 46 transitions. Word has length 20 [2022-11-03 02:11:27,681 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:27,681 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 46 transitions. [2022-11-03 02:11:27,681 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 02:11:27,681 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 46 transitions. [2022-11-03 02:11:27,682 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-03 02:11:27,682 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:27,683 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:27,683 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-03 02:11:27,683 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:27,684 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:27,684 INFO L85 PathProgramCache]: Analyzing trace with hash -1216734981, now seen corresponding path program 1 times [2022-11-03 02:11:27,684 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:11:27,684 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [651518332] [2022-11-03 02:11:27,685 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:27,685 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:11:27,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:27,790 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:11:27,791 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:11:27,791 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [651518332] [2022-11-03 02:11:27,791 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [651518332] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:27,791 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:27,791 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:11:27,792 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2032246682] [2022-11-03 02:11:27,792 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:27,792 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:11:27,793 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:11:27,793 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:11:27,793 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:11:27,794 INFO L87 Difference]: Start difference. First operand 38 states and 46 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 02:11:27,904 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:27,905 INFO L93 Difference]: Finished difference Result 105 states and 128 transitions. [2022-11-03 02:11:27,906 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:11:27,906 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 25 [2022-11-03 02:11:27,906 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:27,910 INFO L225 Difference]: With dead ends: 105 [2022-11-03 02:11:27,911 INFO L226 Difference]: Without dead ends: 69 [2022-11-03 02:11:27,915 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:11:27,917 INFO L413 NwaCegarLoop]: 45 mSDtfsCounter, 32 mSDsluCounter, 34 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 32 SdHoareTripleChecker+Valid, 72 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:27,920 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [32 Valid, 72 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:11:27,923 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2022-11-03 02:11:27,944 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 67. [2022-11-03 02:11:27,945 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 45 states have (on average 1.2666666666666666) internal successors, (57), 51 states have internal predecessors, (57), 11 states have call successors, (11), 10 states have call predecessors, (11), 10 states have return successors, (13), 11 states have call predecessors, (13), 11 states have call successors, (13) [2022-11-03 02:11:27,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 81 transitions. [2022-11-03 02:11:27,949 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 81 transitions. Word has length 25 [2022-11-03 02:11:27,949 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:27,950 INFO L495 AbstractCegarLoop]: Abstraction has 67 states and 81 transitions. [2022-11-03 02:11:27,950 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 02:11:27,950 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 81 transitions. [2022-11-03 02:11:27,958 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-03 02:11:27,959 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:27,959 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:27,959 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-03 02:11:27,960 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:27,960 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:27,960 INFO L85 PathProgramCache]: Analyzing trace with hash -1587296366, now seen corresponding path program 1 times [2022-11-03 02:11:27,961 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:11:27,961 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1107416300] [2022-11-03 02:11:27,961 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:27,962 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:11:28,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:28,433 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:11:28,434 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:11:28,434 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1107416300] [2022-11-03 02:11:28,435 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1107416300] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:28,435 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:28,435 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 02:11:28,435 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [706326792] [2022-11-03 02:11:28,436 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:28,436 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:11:28,437 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:11:28,437 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:11:28,438 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:11:28,438 INFO L87 Difference]: Start difference. First operand 67 states and 81 transitions. Second operand has 5 states, 5 states have (on average 4.2) internal successors, (21), 5 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 02:11:28,612 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:28,613 INFO L93 Difference]: Finished difference Result 228 states and 288 transitions. [2022-11-03 02:11:28,613 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:11:28,614 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.2) internal successors, (21), 5 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 26 [2022-11-03 02:11:28,614 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:28,617 INFO L225 Difference]: With dead ends: 228 [2022-11-03 02:11:28,617 INFO L226 Difference]: Without dead ends: 163 [2022-11-03 02:11:28,618 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-11-03 02:11:28,619 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 65 mSDsluCounter, 145 mSDsCounter, 0 mSdLazyCounter, 82 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 172 SdHoareTripleChecker+Invalid, 87 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 82 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:28,620 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 172 Invalid, 87 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 82 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:11:28,621 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163 states. [2022-11-03 02:11:28,652 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163 to 150. [2022-11-03 02:11:28,653 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 150 states, 102 states have (on average 1.2352941176470589) internal successors, (126), 113 states have internal predecessors, (126), 25 states have call successors, (25), 22 states have call predecessors, (25), 22 states have return successors, (30), 24 states have call predecessors, (30), 25 states have call successors, (30) [2022-11-03 02:11:28,655 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 150 states to 150 states and 181 transitions. [2022-11-03 02:11:28,655 INFO L78 Accepts]: Start accepts. Automaton has 150 states and 181 transitions. Word has length 26 [2022-11-03 02:11:28,656 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:28,656 INFO L495 AbstractCegarLoop]: Abstraction has 150 states and 181 transitions. [2022-11-03 02:11:28,656 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.2) internal successors, (21), 5 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 02:11:28,657 INFO L276 IsEmpty]: Start isEmpty. Operand 150 states and 181 transitions. [2022-11-03 02:11:28,658 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-03 02:11:28,658 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:28,658 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:28,659 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-03 02:11:28,659 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:28,659 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:28,660 INFO L85 PathProgramCache]: Analyzing trace with hash 1972018015, now seen corresponding path program 1 times [2022-11-03 02:11:28,660 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:11:28,660 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1422099984] [2022-11-03 02:11:28,661 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:28,661 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:11:28,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:29,104 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:11:29,105 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:11:29,105 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1422099984] [2022-11-03 02:11:29,105 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1422099984] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:29,106 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:29,106 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-03 02:11:29,106 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [600685960] [2022-11-03 02:11:29,106 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:29,107 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-03 02:11:29,107 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:11:29,108 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-03 02:11:29,108 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=50, Unknown=0, NotChecked=0, Total=72 [2022-11-03 02:11:29,109 INFO L87 Difference]: Start difference. First operand 150 states and 181 transitions. Second operand has 9 states, 8 states have (on average 2.75) internal successors, (22), 8 states have internal predecessors, (22), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-03 02:11:29,846 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:29,846 INFO L93 Difference]: Finished difference Result 340 states and 425 transitions. [2022-11-03 02:11:29,847 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-03 02:11:29,847 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 2.75) internal successors, (22), 8 states have internal predecessors, (22), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 29 [2022-11-03 02:11:29,848 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:29,857 INFO L225 Difference]: With dead ends: 340 [2022-11-03 02:11:29,857 INFO L226 Difference]: Without dead ends: 275 [2022-11-03 02:11:29,862 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 36 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=73, Invalid=167, Unknown=0, NotChecked=0, Total=240 [2022-11-03 02:11:29,864 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 167 mSDsluCounter, 311 mSDsCounter, 0 mSdLazyCounter, 357 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 176 SdHoareTripleChecker+Valid, 318 SdHoareTripleChecker+Invalid, 424 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 357 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:29,867 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [176 Valid, 318 Invalid, 424 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 357 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-03 02:11:29,871 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 275 states. [2022-11-03 02:11:29,984 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 275 to 244. [2022-11-03 02:11:29,985 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 244 states, 168 states have (on average 1.255952380952381) internal successors, (211), 185 states have internal predecessors, (211), 41 states have call successors, (41), 30 states have call predecessors, (41), 34 states have return successors, (49), 40 states have call predecessors, (49), 41 states have call successors, (49) [2022-11-03 02:11:30,013 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 244 states to 244 states and 301 transitions. [2022-11-03 02:11:30,013 INFO L78 Accepts]: Start accepts. Automaton has 244 states and 301 transitions. Word has length 29 [2022-11-03 02:11:30,013 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:30,014 INFO L495 AbstractCegarLoop]: Abstraction has 244 states and 301 transitions. [2022-11-03 02:11:30,014 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 2.75) internal successors, (22), 8 states have internal predecessors, (22), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-03 02:11:30,014 INFO L276 IsEmpty]: Start isEmpty. Operand 244 states and 301 transitions. [2022-11-03 02:11:30,017 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-03 02:11:30,017 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:30,017 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:30,017 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-03 02:11:30,018 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:30,019 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:30,019 INFO L85 PathProgramCache]: Analyzing trace with hash 467117790, now seen corresponding path program 1 times [2022-11-03 02:11:30,019 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:11:30,022 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1286574187] [2022-11-03 02:11:30,022 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:30,023 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:11:30,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:30,365 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:11:30,365 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:11:30,366 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1286574187] [2022-11-03 02:11:30,366 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1286574187] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:11:30,366 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1368920462] [2022-11-03 02:11:30,366 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:30,367 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:11:30,367 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:11:30,369 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:11:30,402 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-03 02:11:30,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:30,510 INFO L263 TraceCheckSpWp]: Trace formula consists of 347 conjuncts, 31 conjunts are in the unsatisfiable core [2022-11-03 02:11:30,517 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:11:30,778 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:11:30,778 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:11:31,124 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:11:31,125 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1368920462] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:11:31,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1622440569] [2022-11-03 02:11:31,149 INFO L159 IcfgInterpreter]: Started Sifa with 29 locations of interest [2022-11-03 02:11:31,149 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:11:31,154 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:11:31,160 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:11:31,161 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:11:33,918 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 294 for LOIs [2022-11-03 02:11:34,018 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 295 for LOIs [2022-11-03 02:11:36,018 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 320 for LOIs [2022-11-03 02:11:36,153 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:12:06,136 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1622440569] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:12:06,136 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:12:06,136 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [22] imperfect sequences [7, 7, 10] total 37 [2022-11-03 02:12:06,137 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1941755317] [2022-11-03 02:12:06,137 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:12:06,138 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-03 02:12:06,138 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:12:06,138 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-03 02:12:06,139 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=238, Invalid=1094, Unknown=0, NotChecked=0, Total=1332 [2022-11-03 02:12:06,139 INFO L87 Difference]: Start difference. First operand 244 states and 301 transitions. Second operand has 23 states, 18 states have (on average 1.2222222222222223) internal successors, (22), 17 states have internal predecessors, (22), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-03 02:12:33,111 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:12:33,111 INFO L93 Difference]: Finished difference Result 505 states and 625 transitions. [2022-11-03 02:12:33,113 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-11-03 02:12:33,113 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 18 states have (on average 1.2222222222222223) internal successors, (22), 17 states have internal predecessors, (22), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Word has length 30 [2022-11-03 02:12:33,114 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:12:33,116 INFO L225 Difference]: With dead ends: 505 [2022-11-03 02:12:33,116 INFO L226 Difference]: Without dead ends: 315 [2022-11-03 02:12:33,118 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 104 GetRequests, 58 SyntacticMatches, 2 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 646 ImplicationChecksByTransitivity, 54.0s TimeCoverageRelationStatistics Valid=342, Invalid=1728, Unknown=0, NotChecked=0, Total=2070 [2022-11-03 02:12:33,119 INFO L413 NwaCegarLoop]: 43 mSDtfsCounter, 84 mSDsluCounter, 358 mSDsCounter, 0 mSdLazyCounter, 789 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 86 SdHoareTripleChecker+Valid, 335 SdHoareTripleChecker+Invalid, 822 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 789 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.9s IncrementalHoareTripleChecker+Time [2022-11-03 02:12:33,119 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [86 Valid, 335 Invalid, 822 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 789 Invalid, 0 Unknown, 0 Unchecked, 2.9s Time] [2022-11-03 02:12:33,120 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 315 states. [2022-11-03 02:12:33,223 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 315 to 294. [2022-11-03 02:12:33,224 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 294 states, 204 states have (on average 1.2352941176470589) internal successors, (252), 222 states have internal predecessors, (252), 48 states have call successors, (48), 37 states have call predecessors, (48), 41 states have return successors, (56), 46 states have call predecessors, (56), 48 states have call successors, (56) [2022-11-03 02:12:33,227 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294 states to 294 states and 356 transitions. [2022-11-03 02:12:33,228 INFO L78 Accepts]: Start accepts. Automaton has 294 states and 356 transitions. Word has length 30 [2022-11-03 02:12:33,228 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:12:33,229 INFO L495 AbstractCegarLoop]: Abstraction has 294 states and 356 transitions. [2022-11-03 02:12:33,229 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 18 states have (on average 1.2222222222222223) internal successors, (22), 17 states have internal predecessors, (22), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-03 02:12:33,229 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 356 transitions. [2022-11-03 02:12:33,231 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-03 02:12:33,231 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:12:33,231 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:12:33,283 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-03 02:12:33,447 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:12:33,448 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:12:33,448 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:12:33,448 INFO L85 PathProgramCache]: Analyzing trace with hash -432583843, now seen corresponding path program 1 times [2022-11-03 02:12:33,449 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:12:33,449 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [759687426] [2022-11-03 02:12:33,449 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:12:33,449 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:12:33,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:12:33,695 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:12:33,695 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:12:33,696 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [759687426] [2022-11-03 02:12:33,696 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [759687426] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:12:33,696 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:12:33,696 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-03 02:12:33,696 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2078158243] [2022-11-03 02:12:33,697 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:12:33,697 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-03 02:12:33,697 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:12:33,698 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-03 02:12:33,698 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2022-11-03 02:12:33,699 INFO L87 Difference]: Start difference. First operand 294 states and 356 transitions. Second operand has 10 states, 8 states have (on average 3.0) internal successors, (24), 8 states have internal predecessors, (24), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-03 02:12:34,450 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:12:34,450 INFO L93 Difference]: Finished difference Result 905 states and 1131 transitions. [2022-11-03 02:12:34,451 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-03 02:12:34,451 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 8 states have (on average 3.0) internal successors, (24), 8 states have internal predecessors, (24), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) Word has length 33 [2022-11-03 02:12:34,452 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:12:34,457 INFO L225 Difference]: With dead ends: 905 [2022-11-03 02:12:34,457 INFO L226 Difference]: Without dead ends: 663 [2022-11-03 02:12:34,459 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 36 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=84, Invalid=296, Unknown=0, NotChecked=0, Total=380 [2022-11-03 02:12:34,460 INFO L413 NwaCegarLoop]: 47 mSDtfsCounter, 148 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 464 mSolverCounterSat, 83 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 154 SdHoareTripleChecker+Valid, 133 SdHoareTripleChecker+Invalid, 547 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 83 IncrementalHoareTripleChecker+Valid, 464 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:12:34,460 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [154 Valid, 133 Invalid, 547 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [83 Valid, 464 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-03 02:12:34,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 663 states. [2022-11-03 02:12:34,625 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 663 to 613. [2022-11-03 02:12:34,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 613 states, 423 states have (on average 1.2198581560283688) internal successors, (516), 461 states have internal predecessors, (516), 104 states have call successors, (104), 75 states have call predecessors, (104), 85 states have return successors, (124), 101 states have call predecessors, (124), 104 states have call successors, (124) [2022-11-03 02:12:34,630 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 613 states to 613 states and 744 transitions. [2022-11-03 02:12:34,631 INFO L78 Accepts]: Start accepts. Automaton has 613 states and 744 transitions. Word has length 33 [2022-11-03 02:12:34,631 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:12:34,631 INFO L495 AbstractCegarLoop]: Abstraction has 613 states and 744 transitions. [2022-11-03 02:12:34,632 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 8 states have (on average 3.0) internal successors, (24), 8 states have internal predecessors, (24), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-03 02:12:34,632 INFO L276 IsEmpty]: Start isEmpty. Operand 613 states and 744 transitions. [2022-11-03 02:12:34,634 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-03 02:12:34,635 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:12:34,635 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:12:34,635 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-03 02:12:34,635 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:12:34,636 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:12:34,636 INFO L85 PathProgramCache]: Analyzing trace with hash 1680646829, now seen corresponding path program 1 times [2022-11-03 02:12:34,636 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:12:34,636 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [400449729] [2022-11-03 02:12:34,637 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:12:34,637 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:12:34,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:12:34,869 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 9 proven. 9 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:12:34,869 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:12:34,870 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [400449729] [2022-11-03 02:12:34,870 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [400449729] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:12:34,870 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [880631631] [2022-11-03 02:12:34,870 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:12:34,870 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:12:34,871 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:12:34,872 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:12:34,903 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-03 02:12:34,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:12:35,000 INFO L263 TraceCheckSpWp]: Trace formula consists of 411 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-03 02:12:35,006 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:12:35,055 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-03 02:12:35,056 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:12:35,056 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [880631631] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:12:35,056 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 02:12:35,056 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [8] total 10 [2022-11-03 02:12:35,057 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1438249112] [2022-11-03 02:12:35,057 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:12:35,057 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:12:35,057 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:12:35,058 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:12:35,058 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-11-03 02:12:35,059 INFO L87 Difference]: Start difference. First operand 613 states and 744 transitions. Second operand has 4 states, 4 states have (on average 8.0) internal successors, (32), 4 states have internal predecessors, (32), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-03 02:12:35,336 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:12:35,336 INFO L93 Difference]: Finished difference Result 1067 states and 1308 transitions. [2022-11-03 02:12:35,337 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:12:35,337 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.0) internal successors, (32), 4 states have internal predecessors, (32), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 53 [2022-11-03 02:12:35,338 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:12:35,343 INFO L225 Difference]: With dead ends: 1067 [2022-11-03 02:12:35,343 INFO L226 Difference]: Without dead ends: 575 [2022-11-03 02:12:35,345 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 54 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=86, Unknown=0, NotChecked=0, Total=110 [2022-11-03 02:12:35,350 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 25 mSDsluCounter, 113 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 143 SdHoareTripleChecker+Invalid, 67 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:12:35,351 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 143 Invalid, 67 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:12:35,352 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 575 states. [2022-11-03 02:12:35,529 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 575 to 355. [2022-11-03 02:12:35,531 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 355 states, 241 states have (on average 1.16597510373444) internal successors, (281), 262 states have internal predecessors, (281), 60 states have call successors, (60), 51 states have call predecessors, (60), 53 states have return successors, (62), 52 states have call predecessors, (62), 60 states have call successors, (62) [2022-11-03 02:12:35,548 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 355 states to 355 states and 403 transitions. [2022-11-03 02:12:35,549 INFO L78 Accepts]: Start accepts. Automaton has 355 states and 403 transitions. Word has length 53 [2022-11-03 02:12:35,552 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:12:35,552 INFO L495 AbstractCegarLoop]: Abstraction has 355 states and 403 transitions. [2022-11-03 02:12:35,552 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.0) internal successors, (32), 4 states have internal predecessors, (32), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-03 02:12:35,553 INFO L276 IsEmpty]: Start isEmpty. Operand 355 states and 403 transitions. [2022-11-03 02:12:35,558 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-03 02:12:35,559 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:12:35,559 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:12:35,607 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-03 02:12:35,783 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:12:35,784 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:12:35,784 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:12:35,784 INFO L85 PathProgramCache]: Analyzing trace with hash -1962773472, now seen corresponding path program 1 times [2022-11-03 02:12:35,784 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:12:35,785 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1498003685] [2022-11-03 02:12:35,785 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:12:35,785 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:12:35,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:12:36,079 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 9 proven. 10 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:12:36,080 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:12:36,080 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1498003685] [2022-11-03 02:12:36,080 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1498003685] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:12:36,080 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1652021388] [2022-11-03 02:12:36,081 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:12:36,081 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:12:36,081 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:12:36,082 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:12:36,117 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-03 02:12:36,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:12:36,222 INFO L263 TraceCheckSpWp]: Trace formula consists of 428 conjuncts, 22 conjunts are in the unsatisfiable core [2022-11-03 02:12:36,225 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:12:36,393 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 20 proven. 1 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:12:36,393 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:12:36,558 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 16 proven. 1 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 02:12:36,559 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1652021388] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:12:36,559 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [268011303] [2022-11-03 02:12:36,576 INFO L159 IcfgInterpreter]: Started Sifa with 34 locations of interest [2022-11-03 02:12:36,577 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:12:36,578 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:12:36,578 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:12:36,578 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:12:42,075 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 25 for LOIs [2022-11-03 02:12:42,080 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 27 for LOIs [2022-11-03 02:12:42,485 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 50 for LOIs [2022-11-03 02:12:42,499 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 25 for LOIs [2022-11-03 02:12:42,501 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:12:48,265 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8985#(and (<= 0 |timeShift_isHighWaterLevel_~tmp~2#1|) (<= |timeShift_processEnvironment_~tmp~0#1| 1) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~3#1|) (<= |timeShift_isHighWaterLevel_#res#1| 1) (<= 0 |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_getWaterLevel_~retValue_acc~6#1| |timeShift_getWaterLevel_#res#1|) (<= 0 |old(~pumpRunning~0)|) (<= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (= 0 |timeShift___utac_acc__Specification3_spec__1_~tmp___1~1#1|) (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1|) (<= |timeShift_isHighWaterSensorDry_#res#1| 1) (<= 0 |timeShift_isHighWaterLevel_~tmp___0~0#1|) (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~4#1|) (<= |timeShift_isHighWaterSensorDry_~retValue_acc~7#1| 1) (= ~head~0.offset 0) (<= 0 |timeShift_processEnvironment_~tmp~0#1|) (<= 0 |timeShift_isHighWaterSensorDry_#res#1|) (= 1 ~systemActive~0) (<= |old(~pumpRunning~0)| 0) (<= |timeShift_isHighWaterLevel_~retValue_acc~4#1| 1) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~4#1| 0) (<= |timeShift_isHighWaterLevel_~tmp___0~0#1| 1) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~3#1|) (<= |timeShift_isHighWaterLevel_~tmp~2#1| 1) (= ~head~0.base 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___1~1#1|) (= |#NULL.offset| 0) (<= 0 |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (= 2 |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1|) (= |timeShift_getWaterLevel_~retValue_acc~6#1| ~waterLevel~0) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-03 02:12:48,265 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:12:48,266 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:12:48,266 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 6, 6] total 14 [2022-11-03 02:12:48,266 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [16522338] [2022-11-03 02:12:48,266 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:12:48,267 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-03 02:12:48,267 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:12:48,267 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-03 02:12:48,268 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=216, Invalid=1266, Unknown=0, NotChecked=0, Total=1482 [2022-11-03 02:12:48,269 INFO L87 Difference]: Start difference. First operand 355 states and 403 transitions. Second operand has 14 states, 13 states have (on average 6.153846153846154) internal successors, (80), 13 states have internal predecessors, (80), 7 states have call successors, (16), 3 states have call predecessors, (16), 4 states have return successors, (14), 7 states have call predecessors, (14), 6 states have call successors, (14) [2022-11-03 02:12:50,821 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:12:50,822 INFO L93 Difference]: Finished difference Result 703 states and 836 transitions. [2022-11-03 02:12:50,822 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 42 states. [2022-11-03 02:12:50,823 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 6.153846153846154) internal successors, (80), 13 states have internal predecessors, (80), 7 states have call successors, (16), 3 states have call predecessors, (16), 4 states have return successors, (14), 7 states have call predecessors, (14), 6 states have call successors, (14) Word has length 54 [2022-11-03 02:12:50,823 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:12:50,828 INFO L225 Difference]: With dead ends: 703 [2022-11-03 02:12:50,828 INFO L226 Difference]: Without dead ends: 517 [2022-11-03 02:12:50,837 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 218 GetRequests, 142 SyntacticMatches, 2 SemanticMatches, 74 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1872 ImplicationChecksByTransitivity, 7.1s TimeCoverageRelationStatistics Valid=666, Invalid=5034, Unknown=0, NotChecked=0, Total=5700 [2022-11-03 02:12:50,838 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 547 mSDsluCounter, 466 mSDsCounter, 0 mSdLazyCounter, 762 mSolverCounterSat, 339 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 553 SdHoareTripleChecker+Valid, 477 SdHoareTripleChecker+Invalid, 1101 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 339 IncrementalHoareTripleChecker+Valid, 762 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-03 02:12:50,839 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [553 Valid, 477 Invalid, 1101 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [339 Valid, 762 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-03 02:12:50,841 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 517 states. [2022-11-03 02:12:51,000 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 517 to 437. [2022-11-03 02:12:51,001 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 437 states, 299 states have (on average 1.173913043478261) internal successors, (351), 325 states have internal predecessors, (351), 71 states have call successors, (71), 59 states have call predecessors, (71), 66 states have return successors, (81), 63 states have call predecessors, (81), 71 states have call successors, (81) [2022-11-03 02:12:51,004 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 437 states to 437 states and 503 transitions. [2022-11-03 02:12:51,005 INFO L78 Accepts]: Start accepts. Automaton has 437 states and 503 transitions. Word has length 54 [2022-11-03 02:12:51,005 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:12:51,005 INFO L495 AbstractCegarLoop]: Abstraction has 437 states and 503 transitions. [2022-11-03 02:12:51,006 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 6.153846153846154) internal successors, (80), 13 states have internal predecessors, (80), 7 states have call successors, (16), 3 states have call predecessors, (16), 4 states have return successors, (14), 7 states have call predecessors, (14), 6 states have call successors, (14) [2022-11-03 02:12:51,006 INFO L276 IsEmpty]: Start isEmpty. Operand 437 states and 503 transitions. [2022-11-03 02:12:51,007 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-03 02:12:51,008 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:12:51,008 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:12:51,042 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-11-03 02:12:51,223 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-03 02:12:51,224 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:12:51,224 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:12:51,225 INFO L85 PathProgramCache]: Analyzing trace with hash -1976671462, now seen corresponding path program 1 times [2022-11-03 02:12:51,225 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:12:51,225 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1863792324] [2022-11-03 02:12:51,225 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:12:51,226 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:12:51,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:12:52,219 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 5 proven. 16 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:12:52,219 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:12:52,220 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1863792324] [2022-11-03 02:12:52,220 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1863792324] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:12:52,220 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1420641215] [2022-11-03 02:12:52,220 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:12:52,220 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:12:52,220 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:12:52,222 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:12:52,235 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-03 02:12:52,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:12:52,368 INFO L263 TraceCheckSpWp]: Trace formula consists of 430 conjuncts, 19 conjunts are in the unsatisfiable core [2022-11-03 02:12:52,371 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:12:52,577 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 23 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:12:52,577 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:12:52,690 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-11-03 02:12:52,690 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1420641215] provided 1 perfect and 1 imperfect interpolant sequences [2022-11-03 02:12:52,691 INFO L184 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-11-03 02:12:52,691 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [18, 6] total 23 [2022-11-03 02:12:52,691 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1948049213] [2022-11-03 02:12:52,691 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:12:52,692 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:12:52,692 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:12:52,693 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:12:52,693 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=69, Invalid=437, Unknown=0, NotChecked=0, Total=506 [2022-11-03 02:12:52,693 INFO L87 Difference]: Start difference. First operand 437 states and 503 transitions. Second operand has 5 states, 5 states have (on average 6.4) internal successors, (32), 5 states have internal predecessors, (32), 2 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-03 02:12:53,058 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:12:53,058 INFO L93 Difference]: Finished difference Result 712 states and 839 transitions. [2022-11-03 02:12:53,058 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:12:53,059 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.4) internal successors, (32), 5 states have internal predecessors, (32), 2 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 59 [2022-11-03 02:12:53,059 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:12:53,063 INFO L225 Difference]: With dead ends: 712 [2022-11-03 02:12:53,063 INFO L226 Difference]: Without dead ends: 569 [2022-11-03 02:12:53,065 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 137 GetRequests, 114 SyntacticMatches, 1 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 146 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=74, Invalid=478, Unknown=0, NotChecked=0, Total=552 [2022-11-03 02:12:53,066 INFO L413 NwaCegarLoop]: 37 mSDtfsCounter, 50 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 57 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 106 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 57 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:12:53,066 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 106 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 57 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:12:53,067 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 569 states. [2022-11-03 02:12:53,344 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 569 to 545. [2022-11-03 02:12:53,345 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 545 states, 377 states have (on average 1.1724137931034482) internal successors, (442), 405 states have internal predecessors, (442), 86 states have call successors, (86), 74 states have call predecessors, (86), 81 states have return successors, (106), 76 states have call predecessors, (106), 86 states have call successors, (106) [2022-11-03 02:12:53,349 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 545 states to 545 states and 634 transitions. [2022-11-03 02:12:53,350 INFO L78 Accepts]: Start accepts. Automaton has 545 states and 634 transitions. Word has length 59 [2022-11-03 02:12:53,353 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:12:53,354 INFO L495 AbstractCegarLoop]: Abstraction has 545 states and 634 transitions. [2022-11-03 02:12:53,354 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.4) internal successors, (32), 5 states have internal predecessors, (32), 2 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-03 02:12:53,354 INFO L276 IsEmpty]: Start isEmpty. Operand 545 states and 634 transitions. [2022-11-03 02:12:53,357 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-03 02:12:53,358 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:12:53,358 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:12:53,410 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-03 02:12:53,583 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:12:53,583 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:12:53,584 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:12:53,584 INFO L85 PathProgramCache]: Analyzing trace with hash -256956262, now seen corresponding path program 2 times [2022-11-03 02:12:53,584 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:12:53,584 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1581475688] [2022-11-03 02:12:53,584 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:12:53,585 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:12:53,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:12:54,132 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 3 proven. 17 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-03 02:12:54,132 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:12:54,132 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1581475688] [2022-11-03 02:12:54,133 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1581475688] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:12:54,133 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [409654372] [2022-11-03 02:12:54,133 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:12:54,133 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:12:54,133 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:12:54,135 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:12:54,164 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-03 02:12:54,273 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-03 02:12:54,274 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:12:54,277 INFO L263 TraceCheckSpWp]: Trace formula consists of 430 conjuncts, 39 conjunts are in the unsatisfiable core [2022-11-03 02:12:54,281 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:12:54,572 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 2 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-03 02:12:54,572 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:12:54,960 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2022-11-03 02:12:54,961 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [409654372] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:12:54,961 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [520717868] [2022-11-03 02:12:54,967 INFO L159 IcfgInterpreter]: Started Sifa with 37 locations of interest [2022-11-03 02:12:54,968 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:12:54,968 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:12:54,968 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:12:54,969 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:13:05,705 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 314 for LOIs [2022-11-03 02:13:05,823 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 46 for LOIs [2022-11-03 02:13:06,436 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 40 for LOIs [2022-11-03 02:13:06,444 INFO L197 IcfgInterpreter]: Interpreting procedure changeMethaneLevel with input of size 26 for LOIs [2022-11-03 02:13:06,448 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 43 for LOIs [2022-11-03 02:13:06,457 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:13:22,369 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13558#(and (<= 0 |timeShift_isHighWaterLevel_~tmp~2#1|) (<= |timeShift_processEnvironment_~tmp~0#1| 1) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~3#1|) (<= |timeShift_isHighWaterLevel_#res#1| 1) (<= 0 |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_getWaterLevel_~retValue_acc~6#1| |timeShift_getWaterLevel_#res#1|) (<= 0 |old(~pumpRunning~0)|) (<= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (= 0 |timeShift___utac_acc__Specification3_spec__1_~tmp___1~1#1|) (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1|) (<= |timeShift_isHighWaterSensorDry_#res#1| 1) (<= 0 |timeShift_isHighWaterLevel_~tmp___0~0#1|) (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~4#1|) (<= |timeShift_isHighWaterSensorDry_~retValue_acc~7#1| 1) (= ~head~0.offset 0) (<= 0 |timeShift_processEnvironment_~tmp~0#1|) (<= 0 |timeShift_isHighWaterSensorDry_#res#1|) (= 1 ~systemActive~0) (<= |old(~pumpRunning~0)| 0) (<= |timeShift_isHighWaterLevel_~retValue_acc~4#1| 1) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~4#1| 0) (<= |timeShift_isHighWaterLevel_~tmp___0~0#1| 1) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~3#1|) (<= |timeShift_isHighWaterLevel_~tmp~2#1| 1) (= ~head~0.base 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___1~1#1|) (= |#NULL.offset| 0) (<= 0 |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (= 2 |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1|) (= |timeShift_getWaterLevel_~retValue_acc~6#1| ~waterLevel~0) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-03 02:13:22,369 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:13:22,370 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:13:22,370 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 11, 10] total 28 [2022-11-03 02:13:22,370 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [813435706] [2022-11-03 02:13:22,370 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:13:22,371 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-03 02:13:22,371 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:13:22,372 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-03 02:13:22,373 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=318, Invalid=2762, Unknown=0, NotChecked=0, Total=3080 [2022-11-03 02:13:22,373 INFO L87 Difference]: Start difference. First operand 545 states and 634 transitions. Second operand has 28 states, 22 states have (on average 4.454545454545454) internal successors, (98), 22 states have internal predecessors, (98), 10 states have call successors, (22), 5 states have call predecessors, (22), 9 states have return successors, (22), 12 states have call predecessors, (22), 10 states have call successors, (22) [2022-11-03 02:13:25,493 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:13:25,493 INFO L93 Difference]: Finished difference Result 1339 states and 1614 transitions. [2022-11-03 02:13:25,494 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-11-03 02:13:25,494 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 22 states have (on average 4.454545454545454) internal successors, (98), 22 states have internal predecessors, (98), 10 states have call successors, (22), 5 states have call predecessors, (22), 9 states have return successors, (22), 12 states have call predecessors, (22), 10 states have call successors, (22) Word has length 59 [2022-11-03 02:13:25,495 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:13:25,496 INFO L225 Difference]: With dead ends: 1339 [2022-11-03 02:13:25,496 INFO L226 Difference]: Without dead ends: 0 [2022-11-03 02:13:25,502 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 233 GetRequests, 144 SyntacticMatches, 4 SemanticMatches, 85 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2182 ImplicationChecksByTransitivity, 17.9s TimeCoverageRelationStatistics Valid=848, Invalid=6634, Unknown=0, NotChecked=0, Total=7482 [2022-11-03 02:13:25,503 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 596 mSDsluCounter, 420 mSDsCounter, 0 mSdLazyCounter, 1236 mSolverCounterSat, 338 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 600 SdHoareTripleChecker+Valid, 373 SdHoareTripleChecker+Invalid, 1574 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 338 IncrementalHoareTripleChecker+Valid, 1236 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:13:25,503 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [600 Valid, 373 Invalid, 1574 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [338 Valid, 1236 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-11-03 02:13:25,504 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-03 02:13:25,504 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-03 02:13:25,505 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:13:25,505 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-03 02:13:25,505 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 59 [2022-11-03 02:13:25,506 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:13:25,506 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-03 02:13:25,506 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 22 states have (on average 4.454545454545454) internal successors, (98), 22 states have internal predecessors, (98), 10 states have call successors, (22), 5 states have call predecessors, (22), 9 states have return successors, (22), 12 states have call predecessors, (22), 10 states have call successors, (22) [2022-11-03 02:13:25,506 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-03 02:13:25,507 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-03 02:13:25,510 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-03 02:13:25,557 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-03 02:13:25,739 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-03 02:13:25,742 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-03 02:13:54,336 WARN L234 SmtUtils]: Spent 10.69s on a formula simplification. DAG size of input: 571 DAG size of output: 449 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-03 02:14:04,058 WARN L234 SmtUtils]: Spent 6.08s on a formula simplification. DAG size of input: 558 DAG size of output: 437 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-03 02:14:21,689 WARN L234 SmtUtils]: Spent 17.58s on a formula simplification. DAG size of input: 621 DAG size of output: 488 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-03 02:14:50,573 WARN L234 SmtUtils]: Spent 25.12s on a formula simplification. DAG size of input: 789 DAG size of output: 499 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-03 02:15:01,535 WARN L234 SmtUtils]: Spent 10.93s on a formula simplification. DAG size of input: 581 DAG size of output: 453 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-03 02:15:33,140 WARN L234 SmtUtils]: Spent 11.28s on a formula simplification. DAG size of input: 607 DAG size of output: 486 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-03 02:15:47,917 WARN L234 SmtUtils]: Spent 11.78s on a formula simplification. DAG size of input: 616 DAG size of output: 480 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-03 02:15:59,648 WARN L234 SmtUtils]: Spent 11.69s on a formula simplification. DAG size of input: 616 DAG size of output: 480 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-03 02:15:59,656 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 125 131) no Hoare annotation was computed. [2022-11-03 02:15:59,657 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 125 131) the Hoare annotation is: true [2022-11-03 02:15:59,659 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 398 409) the Hoare annotation is: (let ((.cse2 (= 1 ~systemActive~0))) (let ((.cse0 (not .cse2)) (.cse1 (and (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0) .cse2))) (and (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse0 .cse1) (or (not (= |old(~methaneLevelCritical~0)| ~systemActive~0)) .cse0 .cse1) (or (= ~pumpRunning~0 0) .cse0 .cse1)))) [2022-11-03 02:15:59,660 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 398 409) no Hoare annotation was computed. [2022-11-03 02:15:59,660 INFO L899 garLoopResultBuilder]: For program point L481(lines 481 485) no Hoare annotation was computed. [2022-11-03 02:15:59,660 INFO L902 garLoopResultBuilder]: At program point L481-1(lines 481 485) the Hoare annotation is: true [2022-11-03 02:15:59,660 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 467 496) no Hoare annotation was computed. [2022-11-03 02:15:59,661 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 467 496) the Hoare annotation is: true [2022-11-03 02:15:59,661 INFO L902 garLoopResultBuilder]: At program point L477-2(lines 477 491) the Hoare annotation is: true [2022-11-03 02:15:59,661 INFO L902 garLoopResultBuilder]: At program point L473(line 473) the Hoare annotation is: true [2022-11-03 02:15:59,661 INFO L899 garLoopResultBuilder]: For program point L473-1(line 473) no Hoare annotation was computed. [2022-11-03 02:15:59,662 INFO L902 garLoopResultBuilder]: At program point L492(lines 467 496) the Hoare annotation is: true [2022-11-03 02:15:59,662 INFO L899 garLoopResultBuilder]: For program point L488(line 488) no Hoare annotation was computed. [2022-11-03 02:15:59,662 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 410 418) the Hoare annotation is: true [2022-11-03 02:15:59,662 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 410 418) no Hoare annotation was computed. [2022-11-03 02:15:59,669 INFO L895 garLoopResultBuilder]: At program point L353(lines 353 366) the Hoare annotation is: (let ((.cse120 (= ~pumpRunning~0 0))) (let ((.cse9 (= |old(~pumpRunning~0)| 0)) (.cse131 (select |#memory_int| 16)) (.cse125 (select |#memory_int| 10)) (.cse127 (select |#memory_int| 11)) (.cse126 (select |#memory_int| 7)) (.cse132 (select |#memory_int| 5)) (.cse129 (select |#memory_int| 8)) (.cse134 (select |#memory_int| 9)) (.cse133 (select |#memory_int| 1)) (.cse123 (select |#memory_int| 15)) (.cse128 (select |#memory_int| 14)) (.cse124 (select |#memory_int| 13)) (.cse130 (select |#memory_int| 6)) (.cse10 (not .cse120)) (.cse122 (= 1 ~systemActive~0))) (let ((.cse7 (not (<= |old(~waterLevel~0)| 1))) (.cse8 (and (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1| 1) .cse10 (<= ~waterLevel~0 1) .cse122)) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse12 (not (= (select .cse130 1) 102))) (.cse13 (not (= (select |#length| 6) 4))) (.cse14 (not (= (select |#valid| 23) 1))) (.cse15 (not (= 77 (select .cse124 1)))) (.cse16 (not (= (select |#length| 28) 25))) (.cse17 (not (= 73 (select .cse128 2)))) (.cse18 (not (= (select .cse123 2) 0))) (.cse19 (not (= (select .cse133 0) 48))) (.cse20 (not (= 30 (select |#length| 23)))) (.cse21 (not (= (select .cse134 3) 0))) (.cse22 (not (= |#NULL.offset| 0))) (.cse23 (not (= (select |#valid| 26) 1))) (.cse24 (not (= (select |#length| 4) 13))) (.cse25 (not (= (select .cse129 0) 79))) (.cse26 (not (= (select |#length| 15) 3))) (.cse27 (not (= 31 (select |#length| 2)))) (.cse28 (not (= (select .cse134 1) 102))) (.cse29 (not (= (select |#valid| 12) 1))) (.cse30 (not (= (select .cse134 0) 79))) (.cse31 (not (= (select .cse130 2) 102))) (.cse32 (not (= 2 (select |#length| 1)))) (.cse33 (not (= 30 (select |#length| 26)))) (.cse34 (not (= (select .cse132 0) 79))) (.cse35 (not (= 2 (select |#length| 11)))) (.cse36 (not (= 44 (select .cse124 0)))) (.cse37 (not (= 58 (select .cse126 5)))) (.cse38 (not (= (select .cse134 2) 102))) (.cse39 (not (= 116 (select .cse124 3)))) (.cse40 (not (= (select .cse130 3) 0))) (.cse41 (not (= (select |#length| 12) 13))) (.cse42 (not (= (select .cse128 0) 67))) (.cse43 (not (= (select |#valid| 6) 1))) (.cse44 (not (= (select |#length| 8) 3))) (.cse45 (not (= (select .cse127 0) 10))) (.cse46 (not (< 0 |#StackHeapBarrier|))) (.cse47 (not (= (select .cse132 1) 110))) (.cse48 (not (= (select |#valid| 3) 1))) (.cse49 (not (= 30 (select |#length| 20)))) (.cse50 (not (= (select |#valid| 25) 1))) (.cse51 (not (= ~head~0.offset 0))) (.cse52 (not (= (select |#valid| 20) 1))) (.cse53 (not (= 25 (select |#length| 25)))) (.cse54 (not (= (select |#valid| 21) 1))) (.cse55 (not (= (select |#valid| 11) 1))) (.cse56 (not (= (select .cse128 4) 0))) (.cse57 (not (= (select |#valid| 16) 1))) (.cse58 (not (= 101 (select .cse124 2)))) (.cse59 (not (= (select |#length| 21) 9))) (.cse60 (not (= (select |#valid| 28) 1))) (.cse61 (not (= (select .cse126 6) 0))) (.cse62 (not (= (select |#valid| 15) 1))) (.cse63 (not (= 1 (select |#valid| 5)))) (.cse64 (not (= (select |#length| 3) 12))) (.cse65 (not (= (select |#valid| 0) 0))) (.cse66 (not (= 109 (select .cse126 3)))) (.cse67 (not (= (select |#valid| 27) 1))) (.cse68 (not (= (select .cse133 1) 0))) (.cse69 (not (= 3 (select |#length| 5)))) (.cse70 (not (= (select |#valid| 24) 1))) (.cse71 (not (= (select .cse126 1) 80))) (.cse72 (not (= (select |#length| 19) 21))) (.cse73 (not (= 5 (select |#length| 14)))) (.cse74 (not (= (select |#valid| 19) 1))) (.cse75 (not (= (select .cse125 0) 41))) (.cse76 (not (= (select |#valid| 1) 1))) (.cse77 (not (= (select |#valid| 22) 1))) (.cse78 (not (= 3 (select |#length| 10)))) (.cse79 (not (= (select .cse132 2) 0))) (.cse80 (not (= 2 (select |#length| 16)))) (.cse81 (not (= 41 (select .cse131 0)))) (.cse82 (not (= (select |#length| 24) 9))) (.cse83 (not (= 112 (select .cse126 4)))) (.cse84 (not (= (select |#valid| 8) 1))) (.cse85 (not (= (select .cse131 1) 0))) (.cse86 (not (= (select |#valid| 4) 1))) (.cse87 (not (= 7 (select |#length| 13)))) (.cse88 (not (= (select .cse123 1) 75))) (.cse89 (not (= |#NULL.base| 0))) (.cse90 (not (= 7 (select |#length| 7)))) (.cse91 (not (= (select .cse129 2) 0))) (.cse92 (not (= (select |#length| 17) 30))) (.cse93 (not (= (select |#valid| 7) 1))) (.cse94 (not (= (select |#valid| 10) 1))) (.cse95 (not (= (select .cse130 0) 79))) (.cse96 (not (= (select |#length| 22) 21))) (.cse97 (not (= (select .cse128 1) 82))) (.cse98 (not (= (select |#valid| 14) 1))) (.cse99 (not (= 110 (select .cse129 1)))) (.cse100 (not (= (select |#valid| 13) 1))) (.cse101 (not (= 58 (select .cse124 5)))) (.cse102 (not (= (select .cse128 3) 84))) (.cse103 (not (= (select |#valid| 2) 1))) (.cse104 (not (= 104 (select .cse124 4)))) (.cse105 (not (= (select |#length| 9) 4))) (.cse106 (not (= 9 (select |#length| 18)))) (.cse107 (not (= (select .cse127 1) 0))) (.cse108 (not (= (select .cse125 2) 0))) (.cse109 (not (= (select |#valid| 17) 1))) (.cse110 (not (= 44 (select .cse126 0)))) (.cse111 (not (= (select |#length| 27) 9))) (.cse112 (not (= 117 (select .cse126 2)))) (.cse113 (not (= (select |#valid| 9) 1))) (.cse114 (not (= 32 (select .cse125 1)))) (.cse115 (not (= ~head~0.base 0))) (.cse116 (not (= ~cleanupTimeShifts~0 4))) (.cse117 (not (= (select |#valid| 18) 1))) (.cse118 (not (= 0 (select .cse124 6)))) (.cse119 (not (= (select .cse123 0) 79))) (.cse0 (not .cse9)) (.cse11 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not .cse122)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= |timeShift_processEnvironment_~tmp~0#1| 0))) (.cse4 (= ~waterLevel~0 |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1|)) (.cse5 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 (and .cse3 (= |old(~waterLevel~0)| ~waterLevel~0) .cse4 .cse5) .cse6) (or .cse7 .cse1 .cse8 .cse9) (or .cse1 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (or .cse10 .cse1 .cse9) (or .cse7 .cse1 .cse8 (and .cse4 (< ~waterLevel~0 2)) .cse2) (or .cse11 .cse1 .cse2 (not (= |old(~pumpRunning~0)| 1))) (or .cse12 .cse13 .cse14 .cse15 .cse16 .cse0 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 (and (<= 0 |timeShift_isHighWaterLevel_~tmp~2#1|) (<= |timeShift_processEnvironment_~tmp~0#1| 1) (<= 1 |timeShift_processEnvironment_~tmp~0#1|) (<= 1 |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (<= 1 |timeShift_isHighWaterLevel_~tmp___0~0#1|) (<= |timeShift_isHighWaterLevel_#res#1| 1) (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1|) (<= |timeShift_isHighWaterLevel_~tmp~2#1| 0) (<= 0 |timeShift_isHighWaterSensorDry_#res#1|) (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1| 2147483647) (<= |timeShift_isMethaneAlarm_#res#1| 0) (<= |timeShift_isHighWaterLevel_~retValue_acc~4#1| 1) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~4#1| 0) (<= |timeShift_isHighWaterLevel_~tmp___0~0#1| 1) (= |timeShift_isMethaneAlarm_~retValue_acc~2#1| |timeShift_isMethaneAlarm_#res#1|) (= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (<= |timeShift_isHighWaterSensorDry_#res#1| 0) (<= 0 |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_activatePump_~tmp~1#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_getWaterLevel_~retValue_acc~6#1| ~waterLevel~0) (<= 1 |timeShift_isHighWaterLevel_#res#1|)) .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse1 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse2 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse6 .cse119) (or .cse12 .cse13 .cse14 .cse15 .cse16 .cse0 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse11 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse1 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse2 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 (and (= |timeShift_isHighWaterSensorDry_~retValue_acc~7#1| 1) (= |timeShift_isHighWaterLevel_~tmp~2#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0) (= |timeShift_processEnvironment_~tmp~0#1| |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_isHighWaterSensorDry_#res#1| |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|)) .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119) (let ((.cse121 (= ~waterLevel~0 1))) (or .cse0 .cse11 .cse1 .cse2 (and .cse120 .cse121) (and .cse3 .cse4 .cse121 .cse5))))))) [2022-11-03 02:15:59,671 INFO L895 garLoopResultBuilder]: At program point L353-1(lines 338 370) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0)))) (let ((.cse123 (= ~waterLevel~0 1)) (.cse9 (= |old(~pumpRunning~0)| 0)) (.cse126 (or .cse2 (= ~pumpRunning~0 1))) (.cse125 (not (= |timeShift_processEnvironment_~tmp~0#1| 0))) (.cse136 (select |#memory_int| 16)) (.cse130 (select |#memory_int| 10)) (.cse132 (select |#memory_int| 11)) (.cse131 (select |#memory_int| 7)) (.cse137 (select |#memory_int| 5)) (.cse134 (select |#memory_int| 8)) (.cse139 (select |#memory_int| 9)) (.cse138 (select |#memory_int| 1)) (.cse128 (select |#memory_int| 15)) (.cse133 (select |#memory_int| 14)) (.cse129 (select |#memory_int| 13)) (.cse135 (select |#memory_int| 6)) (.cse124 (= ~pumpRunning~0 0)) (.cse127 (= 1 ~systemActive~0)) (.cse99 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~4#1| 0))) (let ((.cse3 (< ~waterLevel~0 2)) (.cse8 (not .cse99)) (.cse100 (= ~waterLevel~0 |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1|)) (.cse122 (and (not .cse124) .cse127)) (.cse12 (not (= (select .cse135 1) 102))) (.cse13 (not (= (select |#length| 6) 4))) (.cse14 (not (= (select |#valid| 23) 1))) (.cse15 (not (= 77 (select .cse129 1)))) (.cse16 (not (= (select |#length| 28) 25))) (.cse17 (not (= 73 (select .cse133 2)))) (.cse18 (not (= (select .cse128 2) 0))) (.cse19 (not (= (select .cse138 0) 48))) (.cse20 (not (= 30 (select |#length| 23)))) (.cse21 (not (= (select .cse139 3) 0))) (.cse22 (not (= |#NULL.offset| 0))) (.cse23 (not (= (select |#valid| 26) 1))) (.cse24 (not (= (select |#length| 4) 13))) (.cse25 (not (= (select .cse134 0) 79))) (.cse26 (not (= (select |#length| 15) 3))) (.cse27 (not (= 31 (select |#length| 2)))) (.cse28 (not (= (select .cse139 1) 102))) (.cse29 (not (= (select |#valid| 12) 1))) (.cse30 (not (= (select .cse139 0) 79))) (.cse31 (not (= (select .cse135 2) 102))) (.cse32 (not (= 2 (select |#length| 1)))) (.cse33 (not (= 30 (select |#length| 26)))) (.cse34 (not (= (select .cse137 0) 79))) (.cse35 (not (= 2 (select |#length| 11)))) (.cse36 (not (= 44 (select .cse129 0)))) (.cse37 (not (= 58 (select .cse131 5)))) (.cse38 (not (= (select .cse139 2) 102))) (.cse39 (not (= 116 (select .cse129 3)))) (.cse40 (not (= (select .cse135 3) 0))) (.cse41 (not (= (select |#length| 12) 13))) (.cse42 (not (= (select .cse133 0) 67))) (.cse43 (not (= (select |#valid| 6) 1))) (.cse44 (not (= (select |#length| 8) 3))) (.cse45 (not (= (select .cse132 0) 10))) (.cse46 (not (< 0 |#StackHeapBarrier|))) (.cse47 (not (= (select .cse137 1) 110))) (.cse48 (not (= (select |#valid| 3) 1))) (.cse49 (not (= 30 (select |#length| 20)))) (.cse50 (not (= (select |#valid| 25) 1))) (.cse51 (not (= ~head~0.offset 0))) (.cse52 (not (= (select |#valid| 20) 1))) (.cse53 (not (= 25 (select |#length| 25)))) (.cse54 (not (= (select |#valid| 21) 1))) (.cse55 (not (= (select |#valid| 11) 1))) (.cse56 (not (= (select .cse133 4) 0))) (.cse57 (not (= (select |#valid| 16) 1))) (.cse58 (not (= 101 (select .cse129 2)))) (.cse59 (not (= (select |#length| 21) 9))) (.cse60 (not (= (select |#valid| 28) 1))) (.cse61 (not (= (select .cse131 6) 0))) (.cse62 (not (= (select |#valid| 15) 1))) (.cse63 (not (= 1 (select |#valid| 5)))) (.cse64 (not (= (select |#length| 3) 12))) (.cse65 (not (= (select |#valid| 0) 0))) (.cse66 (not (= 109 (select .cse131 3)))) (.cse67 (not (= (select |#valid| 27) 1))) (.cse68 (not (= (select .cse138 1) 0))) (.cse69 (not (= 3 (select |#length| 5)))) (.cse70 (not (= (select |#valid| 24) 1))) (.cse71 (not (= (select .cse131 1) 80))) (.cse72 (not (= (select |#length| 19) 21))) (.cse73 (not (= 5 (select |#length| 14)))) (.cse74 (not (= (select |#valid| 19) 1))) (.cse75 (not (= (select .cse130 0) 41))) (.cse76 (not (= (select |#valid| 1) 1))) (.cse77 (not (= (select |#valid| 22) 1))) (.cse78 (not (= 3 (select |#length| 10)))) (.cse79 (not (= (select .cse137 2) 0))) (.cse80 (not (= 2 (select |#length| 16)))) (.cse81 (not (= 41 (select .cse136 0)))) (.cse82 (not (= (select |#length| 24) 9))) (.cse83 (not (= 112 (select .cse131 4)))) (.cse84 (not (= (select |#valid| 8) 1))) (.cse85 (not (= (select .cse136 1) 0))) (.cse86 (not (= (select |#valid| 4) 1))) (.cse87 (not (= 7 (select |#length| 13)))) (.cse88 (not (= (select .cse128 1) 75))) (.cse89 (not (= |#NULL.base| 0))) (.cse90 (not (= 7 (select |#length| 7)))) (.cse91 (not (= (select .cse134 2) 0))) (.cse92 (not (= (select |#length| 17) 30))) (.cse93 (not (= (select |#valid| 7) 1))) (.cse94 (not (= (select |#valid| 10) 1))) (.cse95 (not (= (select .cse135 0) 79))) (.cse96 (not (= (select |#length| 22) 21))) (.cse97 (not (= (select .cse133 1) 82))) (.cse98 (not (= (select |#valid| 14) 1))) (.cse101 (not (= 110 (select .cse134 1)))) (.cse102 (not (= (select |#valid| 13) 1))) (.cse103 (not (= 58 (select .cse129 5)))) (.cse104 (not (= (select .cse133 3) 84))) (.cse105 (not (= (select |#valid| 2) 1))) (.cse106 (not (= 104 (select .cse129 4)))) (.cse107 (not (= (select |#length| 9) 4))) (.cse108 (not (= 9 (select |#length| 18)))) (.cse109 (not (= (select .cse132 1) 0))) (.cse110 (not (= (select .cse130 2) 0))) (.cse111 (not (= (select |#valid| 17) 1))) (.cse112 (not (= 44 (select .cse131 0)))) (.cse113 (not (= (select |#length| 27) 9))) (.cse114 (not (= 117 (select .cse131 2)))) (.cse115 (not (= (select |#valid| 9) 1))) (.cse116 (not (= 32 (select .cse130 1)))) (.cse117 (not (= ~head~0.base 0))) (.cse118 (not (= ~cleanupTimeShifts~0 4))) (.cse119 (not (= (select |#valid| 18) 1))) (.cse120 (not (= 0 (select .cse129 6)))) (.cse121 (not (= (select .cse128 0) 79))) (.cse5 (and .cse126 .cse127 .cse125 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse4 (not .cse9)) (.cse10 (and .cse124 .cse127 .cse123)) (.cse11 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not .cse127))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse5 .cse6 .cse7) (or .cse8 .cse1 .cse6) (or .cse0 .cse1 .cse6 .cse3) (or .cse0 .cse1 (<= ~waterLevel~0 1) .cse9) (or .cse10 .cse11 .cse1 .cse6) (or .cse11 .cse1 .cse2 (not (= |old(~pumpRunning~0)| 1))) (or .cse12 .cse13 .cse14 .cse15 .cse16 .cse4 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse1 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse2 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 (and (<= 0 |timeShift_isHighWaterLevel_~tmp~2#1|) (<= |timeShift_processEnvironment_~tmp~0#1| 1) (<= 1 |timeShift_processEnvironment_~tmp~0#1|) (<= 1 |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (<= 1 |timeShift_isHighWaterLevel_~tmp___0~0#1|) (<= |timeShift_isHighWaterLevel_#res#1| 1) (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1|) (<= |timeShift_isHighWaterLevel_~tmp~2#1| 0) (<= 0 |timeShift_isHighWaterSensorDry_#res#1|) (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1| 2147483647) (<= |timeShift_isMethaneAlarm_#res#1| 0) (<= |timeShift_isHighWaterLevel_~retValue_acc~4#1| 1) .cse99 (<= |timeShift_isHighWaterLevel_~tmp___0~0#1| 1) .cse100 (= |timeShift_isMethaneAlarm_~retValue_acc~2#1| |timeShift_isMethaneAlarm_#res#1|) (= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (<= |timeShift_isHighWaterSensorDry_#res#1| 0) (<= 0 |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_activatePump_~tmp~1#1| |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_getWaterLevel_~retValue_acc~6#1| ~waterLevel~0) (<= 1 |timeShift_isHighWaterLevel_#res#1|)) .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120 .cse7 .cse121) (or .cse8 .cse1 .cse2 .cse122 .cse100) (or .cse1 .cse9 .cse122) (or .cse12 .cse13 .cse14 .cse15 .cse16 .cse4 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse11 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse1 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse2 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 (and (= |timeShift_isHighWaterSensorDry_~retValue_acc~7#1| 1) (= |timeShift_isHighWaterLevel_~tmp~2#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0) (= |timeShift_processEnvironment_~tmp~0#1| |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_isHighWaterSensorDry_#res#1| |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|)) .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120 .cse121) (or .cse4 .cse1 .cse5 .cse2 .cse7) (or .cse0 .cse1 .cse6 (and (or (not .cse123) .cse124) (or .cse124 .cse125))) (or .cse4 .cse10 .cse11 .cse1 .cse2 (and .cse126 .cse125 .cse123)))))) [2022-11-03 02:15:59,675 INFO L895 garLoopResultBuilder]: At program point L345(line 345) the Hoare annotation is: (let ((.cse124 (= ~pumpRunning~0 0))) (let ((.cse133 (select |#memory_int| 16)) (.cse127 (select |#memory_int| 10)) (.cse129 (select |#memory_int| 11)) (.cse128 (select |#memory_int| 7)) (.cse134 (select |#memory_int| 5)) (.cse131 (select |#memory_int| 8)) (.cse137 (select |#memory_int| 9)) (.cse135 (select |#memory_int| 1)) (.cse125 (select |#memory_int| 15)) (.cse130 (select |#memory_int| 14)) (.cse6 (= |old(~pumpRunning~0)| 0)) (.cse126 (select |#memory_int| 13)) (.cse132 (select |#memory_int| 6)) (.cse138 (= ~methaneLevelCritical~0 ~systemActive~0)) (.cse5 (not .cse124)) (.cse7 (<= ~waterLevel~0 1)) (.cse136 (= 1 ~systemActive~0))) (let ((.cse123 (= ~pumpRunning~0 1)) (.cse3 (and .cse5 .cse7 .cse136)) (.cse122 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse119 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse10 (= ~waterLevel~0 1)) (.cse121 (not (= |timeShift_processEnvironment_~tmp~0#1| 0))) (.cse2 (not .cse138)) (.cse4 (and .cse138 .cse124 .cse7 .cse136)) (.cse11 (not (= (select .cse132 1) 102))) (.cse12 (not (= (select |#length| 6) 4))) (.cse13 (not (= (select |#valid| 23) 1))) (.cse14 (not (= 77 (select .cse126 1)))) (.cse15 (not (= (select |#length| 28) 25))) (.cse16 (not .cse6)) (.cse17 (not (= 73 (select .cse130 2)))) (.cse18 (not (= (select .cse125 2) 0))) (.cse19 (not (= (select .cse135 0) 48))) (.cse20 (not (= 30 (select |#length| 23)))) (.cse21 (not (= (select .cse137 3) 0))) (.cse22 (not (= |#NULL.offset| 0))) (.cse23 (not (= (select |#valid| 26) 1))) (.cse24 (not (= (select |#length| 4) 13))) (.cse25 (not (= (select .cse131 0) 79))) (.cse26 (not (= (select |#length| 15) 3))) (.cse27 (not (= 31 (select |#length| 2)))) (.cse28 (not (= (select .cse137 1) 102))) (.cse29 (not (= (select |#valid| 12) 1))) (.cse30 (not (= (select .cse137 0) 79))) (.cse31 (not (= (select .cse132 2) 102))) (.cse32 (not (= 2 (select |#length| 1)))) (.cse33 (not (= 30 (select |#length| 26)))) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse34 (not (= (select .cse134 0) 79))) (.cse35 (not (= 2 (select |#length| 11)))) (.cse36 (not (= 44 (select .cse126 0)))) (.cse37 (not (= 58 (select .cse128 5)))) (.cse38 (not (= (select .cse137 2) 102))) (.cse39 (not (= 116 (select .cse126 3)))) (.cse1 (not .cse136)) (.cse40 (not (= (select .cse132 3) 0))) (.cse41 (not (= (select |#length| 12) 13))) (.cse42 (not (= (select .cse130 0) 67))) (.cse43 (not (= (select |#valid| 6) 1))) (.cse44 (not (= (select |#length| 8) 3))) (.cse45 (not (= (select .cse129 0) 10))) (.cse46 (not (< 0 |#StackHeapBarrier|))) (.cse47 (not (= (select .cse134 1) 110))) (.cse48 (not (= (select |#valid| 3) 1))) (.cse49 (not (= 30 (select |#length| 20)))) (.cse50 (not (= (select |#valid| 25) 1))) (.cse51 (not (= ~head~0.offset 0))) (.cse52 (not (= (select |#valid| 20) 1))) (.cse53 (not (= 25 (select |#length| 25)))) (.cse54 (not (= (select |#valid| 21) 1))) (.cse55 (not (= (select |#valid| 11) 1))) (.cse56 (not (= (select .cse130 4) 0))) (.cse57 (not (= (select |#valid| 16) 1))) (.cse58 (not (= 101 (select .cse126 2)))) (.cse59 (not (= (select |#length| 21) 9))) (.cse60 (not (= (select |#valid| 28) 1))) (.cse61 (not (= (select .cse128 6) 0))) (.cse62 (not (= (select |#valid| 15) 1))) (.cse63 (not (= 1 (select |#valid| 5)))) (.cse64 (not (= (select |#length| 3) 12))) (.cse65 (not (= (select |#valid| 0) 0))) (.cse66 (not (= 109 (select .cse128 3)))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse67 (not (= (select |#valid| 27) 1))) (.cse68 (not (= (select .cse135 1) 0))) (.cse69 (not (= 3 (select |#length| 5)))) (.cse70 (not (= (select |#valid| 24) 1))) (.cse71 (not (= (select .cse128 1) 80))) (.cse72 (not (= (select |#length| 19) 21))) (.cse73 (not (= 5 (select |#length| 14)))) (.cse74 (not (= (select |#valid| 19) 1))) (.cse75 (not (= (select .cse127 0) 41))) (.cse76 (not (= (select |#valid| 1) 1))) (.cse77 (not (= (select |#valid| 22) 1))) (.cse78 (not (= 3 (select |#length| 10)))) (.cse79 (not (= (select .cse134 2) 0))) (.cse80 (not (= 2 (select |#length| 16)))) (.cse81 (not (= 41 (select .cse133 0)))) (.cse82 (not (= (select |#length| 24) 9))) (.cse83 (not (= 112 (select .cse128 4)))) (.cse84 (not (= (select |#valid| 8) 1))) (.cse85 (not (= (select .cse133 1) 0))) (.cse86 (not (= (select |#valid| 4) 1))) (.cse87 (not (= 7 (select |#length| 13)))) (.cse88 (not (= (select .cse125 1) 75))) (.cse89 (not (= |#NULL.base| 0))) (.cse90 (not (= 7 (select |#length| 7)))) (.cse91 (not (= (select .cse131 2) 0))) (.cse92 (not (= (select |#length| 17) 30))) (.cse93 (not (= (select |#valid| 7) 1))) (.cse94 (not (= (select |#valid| 10) 1))) (.cse95 (not (= (select .cse132 0) 79))) (.cse96 (not (= (select |#length| 22) 21))) (.cse97 (not (= (select .cse130 1) 82))) (.cse98 (not (= (select |#valid| 14) 1))) (.cse99 (not (= 110 (select .cse131 1)))) (.cse100 (not (= (select |#valid| 13) 1))) (.cse101 (not (= 58 (select .cse126 5)))) (.cse102 (not (= (select .cse130 3) 84))) (.cse103 (not (= (select |#valid| 2) 1))) (.cse104 (not (= 104 (select .cse126 4)))) (.cse105 (not (= (select |#length| 9) 4))) (.cse106 (not (= 9 (select |#length| 18)))) (.cse107 (not (= (select .cse129 1) 0))) (.cse108 (not (= (select .cse127 2) 0))) (.cse109 (not (= (select |#valid| 17) 1))) (.cse110 (not (= 44 (select .cse128 0)))) (.cse111 (not (= (select |#length| 27) 9))) (.cse112 (not (= 117 (select .cse128 2)))) (.cse113 (not (= (select |#valid| 9) 1))) (.cse114 (not (= 32 (select .cse127 1)))) (.cse115 (not (= ~head~0.base 0))) (.cse116 (not (= ~cleanupTimeShifts~0 4))) (.cse117 (not (= (select |#valid| 18) 1))) (.cse118 (not (= 0 (select .cse126 6)))) (.cse120 (not (= (select .cse125 0) 79)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6) (or .cse0 .cse1 .cse7 .cse8) (or .cse9 .cse1 .cse2 .cse10) (or .cse11 .cse12 .cse13 .cse14 (and (<= 0 |timeShift_isHighWaterLevel_~tmp~2#1|) (<= |timeShift_processEnvironment_~tmp~0#1| 1) (<= 1 |timeShift_processEnvironment_~tmp~0#1|) (<= 1 |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (<= 1 |timeShift_isHighWaterLevel_~tmp___0~0#1|) (<= |timeShift_isHighWaterLevel_#res#1| 1) (<= |timeShift_isMethaneAlarm_~retValue_acc~2#1| 0) (<= |timeShift_isHighWaterLevel_~tmp~2#1| 0) (<= 0 |timeShift_isHighWaterSensorDry_#res#1|) (<= |timeShift_isHighWaterLevel_~retValue_acc~4#1| 1) (<= |timeShift_isHighWaterLevel_~tmp___0~0#1| 1) (= |timeShift_isMethaneAlarm_~retValue_acc~2#1| |timeShift_isMethaneAlarm_#res#1|) (= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (<= |timeShift_isHighWaterSensorDry_#res#1| 0) (<= 0 |timeShift_isMethaneAlarm_~retValue_acc~2#1|) (= |timeShift_activatePump_~tmp~1#1| |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_isHighWaterLevel_#res#1|)) .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse1 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse8 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120) (or .cse16 .cse1 (and .cse121 .cse122 .cse123) .cse8 .cse119) (or (and .cse121 .cse10 .cse123) .cse16 .cse9 .cse1 .cse8 (and .cse124 .cse10)) (or .cse0 .cse1 .cse6 .cse3) (or (and .cse121 .cse122) .cse16 .cse1 .cse2 .cse119) (or .cse9 .cse1 .cse8 (not (= |old(~pumpRunning~0)| 1))) (or .cse0 .cse1 (and (not .cse10) .cse121) .cse2 .cse4) (or .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse9 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse1 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse8 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 (and (= |timeShift_isHighWaterSensorDry_~retValue_acc~7#1| 1) (= |timeShift_isHighWaterLevel_~tmp~2#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0) (= |timeShift_processEnvironment_~tmp~0#1| |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_isHighWaterSensorDry_#res#1| |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|)) .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse120))))) [2022-11-03 02:15:59,675 INFO L899 garLoopResultBuilder]: For program point L345-1(line 345) no Hoare annotation was computed. [2022-11-03 02:15:59,678 INFO L895 garLoopResultBuilder]: At program point L147(line 147) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse6 (and (= ~pumpRunning~0 0) (< ~waterLevel~0 2))) (.cse4 (= ~waterLevel~0 1)) (.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (= |old(~pumpRunning~0)| 0)) (or .cse0 .cse1 .cse2) (or .cse3 .cse0 .cse1 .cse4) (or .cse0 .cse5 .cse6) (or .cse0 .cse1 .cse6) (or .cse3 .cse0 .cse5 .cse4) (or .cse0 .cse5 .cse2) (let ((.cse12 (select |#memory_int| 9)) (.cse11 (select |#memory_int| 1)) (.cse14 (select |#memory_int| 5)) (.cse18 (select |#memory_int| 16)) (.cse7 (select |#memory_int| 6)) (.cse13 (select |#memory_int| 8)) (.cse9 (select |#memory_int| 14)) (.cse16 (select |#memory_int| 11)) (.cse15 (select |#memory_int| 7)) (.cse17 (select |#memory_int| 10)) (.cse8 (select |#memory_int| 13)) (.cse10 (select |#memory_int| 15))) (or (not (= (select .cse7 1) 102)) (not (= (select |#length| 6) 4)) (not (= (select |#valid| 23) 1)) (not (= 77 (select .cse8 1))) (not (= (select |#length| 28) 25)) (not (= 73 (select .cse9 2))) (not (= (select .cse10 2) 0)) (not (= (select .cse11 0) 48)) (not (= 30 (select |#length| 23))) (not (= (select .cse12 3) 0)) (not (= |#NULL.offset| 0)) (not (= (select |#valid| 26) 1)) (not (= (select |#length| 4) 13)) (not (= (select .cse13 0) 79)) (not (= (select |#length| 15) 3)) (not (= 31 (select |#length| 2))) (not (= (select .cse12 1) 102)) (not (= (select |#valid| 12) 1)) (not (= (select .cse12 0) 79)) (not (= (select .cse7 2) 102)) (not (= 2 (select |#length| 1))) (not (= 30 (select |#length| 26))) .cse3 (not (= (select .cse14 0) 79)) (not (= 2 (select |#length| 11))) (not (= 44 (select .cse8 0))) (not (= 58 (select .cse15 5))) (not (= (select .cse12 2) 102)) (not (= 116 (select .cse8 3))) .cse0 (not (= (select .cse7 3) 0)) (not (= (select |#length| 12) 13)) (not (= (select .cse9 0) 67)) (not (= (select |#valid| 6) 1)) (not (= (select |#length| 8) 3)) (not (= (select .cse16 0) 10)) (not (< 0 |#StackHeapBarrier|)) (not (= (select .cse14 1) 110)) (not (= (select |#valid| 3) 1)) (not (= 30 (select |#length| 20))) (not (= (select |#valid| 25) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 20) 1)) (not (= 25 (select |#length| 25))) (not (= (select |#valid| 21) 1)) (not (= (select |#valid| 11) 1)) (not (= (select .cse9 4) 0)) (not (= (select |#valid| 16) 1)) (not (= 101 (select .cse8 2))) (not (= (select |#length| 21) 9)) (not (= (select |#valid| 28) 1)) (not (= (select .cse15 6) 0)) (not (= (select |#valid| 15) 1)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= 109 (select .cse15 3))) .cse5 (not (= (select |#valid| 27) 1)) (not (= (select .cse11 1) 0)) (not (= 3 (select |#length| 5))) (not (= (select |#valid| 24) 1)) (not (= (select .cse15 1) 80)) (not (= (select |#length| 19) 21)) (not (= 5 (select |#length| 14))) (not (= (select |#valid| 19) 1)) (not (= (select .cse17 0) 41)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 22) 1)) (not (= 3 (select |#length| 10))) (not (= (select .cse14 2) 0)) (not (= 2 (select |#length| 16))) (not (= 41 (select .cse18 0))) (not (= (select |#length| 24) 9)) (and (= |timeShift_isHighWaterSensorDry_~retValue_acc~7#1| 1) (= |timeShift_isHighWaterLevel_~tmp~2#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0) (= |timeShift_processEnvironment_~tmp~0#1| |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_isHighWaterSensorDry_#res#1| |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|)) (not (= 112 (select .cse15 4))) (not (= (select |#valid| 8) 1)) (not (= (select .cse18 1) 0)) (not (= (select |#valid| 4) 1)) (not (= 7 (select |#length| 13))) (not (= (select .cse10 1) 75)) (not (= |#NULL.base| 0)) (not (= 7 (select |#length| 7))) (not (= (select .cse13 2) 0)) (not (= (select |#length| 17) 30)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select .cse7 0) 79)) (not (= (select |#length| 22) 21)) (not (= (select .cse9 1) 82)) (not (= (select |#valid| 14) 1)) (not (= 110 (select .cse13 1))) (not (= (select |#valid| 13) 1)) (not (= 58 (select .cse8 5))) (not (= (select .cse9 3) 84)) (not (= (select |#valid| 2) 1)) (not (= 104 (select .cse8 4))) (not (= (select |#length| 9) 4)) (not (= 9 (select |#length| 18))) (not (= (select .cse16 1) 0)) (not (= (select .cse17 2) 0)) (not (= (select |#valid| 17) 1)) (not (= 44 (select .cse15 0))) (not (= (select |#length| 27) 9)) (not (= 117 (select .cse15 2))) (not (= (select |#valid| 9) 1)) (not (= 32 (select .cse17 1))) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)) (not (= (select |#valid| 18) 1)) (not (= 0 (select .cse8 6))) (not (= (select .cse10 0) 79)))))) [2022-11-03 02:15:59,681 INFO L895 garLoopResultBuilder]: At program point L197(line 197) the Hoare annotation is: (let ((.cse125 (select |#memory_int| 16)) (.cse119 (select |#memory_int| 10)) (.cse121 (select |#memory_int| 11)) (.cse120 (select |#memory_int| 7)) (.cse126 (select |#memory_int| 5)) (.cse123 (select |#memory_int| 8)) (.cse128 (select |#memory_int| 9)) (.cse127 (select |#memory_int| 1)) (.cse117 (select |#memory_int| 15)) (.cse122 (select |#memory_int| 14)) (.cse118 (select |#memory_int| 13)) (.cse124 (select |#memory_int| 6))) (let ((.cse8 (= ~waterLevel~0 1)) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse9 (not (= (select .cse124 1) 102))) (.cse10 (not (= (select |#length| 6) 4))) (.cse11 (not (= (select |#valid| 23) 1))) (.cse12 (not (= 77 (select .cse118 1)))) (.cse13 (not (= (select |#length| 28) 25))) (.cse14 (not (= 73 (select .cse122 2)))) (.cse15 (not (= (select .cse117 2) 0))) (.cse16 (not (= (select .cse127 0) 48))) (.cse17 (not (= 30 (select |#length| 23)))) (.cse18 (not (= (select .cse128 3) 0))) (.cse19 (not (= |#NULL.offset| 0))) (.cse20 (not (= (select |#valid| 26) 1))) (.cse21 (not (= (select |#length| 4) 13))) (.cse22 (not (= (select .cse123 0) 79))) (.cse23 (not (= (select |#length| 15) 3))) (.cse24 (not (= 31 (select |#length| 2)))) (.cse25 (not (= (select .cse128 1) 102))) (.cse26 (not (= (select |#valid| 12) 1))) (.cse27 (not (= (select .cse128 0) 79))) (.cse28 (not (= (select .cse124 2) 102))) (.cse29 (not (= 2 (select |#length| 1)))) (.cse30 (not (= 30 (select |#length| 26)))) (.cse31 (not (= (select .cse126 0) 79))) (.cse32 (not (= 2 (select |#length| 11)))) (.cse33 (not (= 44 (select .cse118 0)))) (.cse34 (not (= 58 (select .cse120 5)))) (.cse35 (not (= (select .cse128 2) 102))) (.cse36 (not (= 116 (select .cse118 3)))) (.cse37 (not (= (select .cse124 3) 0))) (.cse38 (not (= (select |#length| 12) 13))) (.cse39 (not (= (select .cse122 0) 67))) (.cse40 (not (= (select |#valid| 6) 1))) (.cse41 (not (= (select |#length| 8) 3))) (.cse42 (not (= (select .cse121 0) 10))) (.cse43 (not (< 0 |#StackHeapBarrier|))) (.cse44 (not (= (select .cse126 1) 110))) (.cse45 (not (= (select |#valid| 3) 1))) (.cse46 (not (= 30 (select |#length| 20)))) (.cse47 (not (= (select |#valid| 25) 1))) (.cse48 (not (= ~head~0.offset 0))) (.cse49 (not (= (select |#valid| 20) 1))) (.cse50 (not (= 25 (select |#length| 25)))) (.cse51 (not (= (select |#valid| 21) 1))) (.cse52 (not (= (select |#valid| 11) 1))) (.cse53 (not (= (select .cse122 4) 0))) (.cse54 (not (= (select |#valid| 16) 1))) (.cse55 (not (= 101 (select .cse118 2)))) (.cse56 (not (= (select |#length| 21) 9))) (.cse57 (not (= (select |#valid| 28) 1))) (.cse58 (not (= (select .cse120 6) 0))) (.cse59 (not (= (select |#valid| 15) 1))) (.cse60 (not (= 1 (select |#valid| 5)))) (.cse61 (not (= (select |#length| 3) 12))) (.cse62 (not (= (select |#valid| 0) 0))) (.cse63 (not (= 109 (select .cse120 3)))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse64 (not (= (select |#valid| 27) 1))) (.cse65 (not (= (select .cse127 1) 0))) (.cse66 (not (= 3 (select |#length| 5)))) (.cse67 (not (= (select |#valid| 24) 1))) (.cse68 (not (= (select .cse120 1) 80))) (.cse69 (not (= (select |#length| 19) 21))) (.cse70 (not (= 5 (select |#length| 14)))) (.cse71 (not (= (select |#valid| 19) 1))) (.cse72 (not (= (select .cse119 0) 41))) (.cse73 (not (= (select |#valid| 1) 1))) (.cse74 (not (= (select |#valid| 22) 1))) (.cse75 (not (= 3 (select |#length| 10)))) (.cse76 (not (= (select .cse126 2) 0))) (.cse77 (not (= 2 (select |#length| 16)))) (.cse78 (not (= 41 (select .cse125 0)))) (.cse79 (not (= (select |#length| 24) 9))) (.cse80 (not (= 112 (select .cse120 4)))) (.cse81 (not (= (select |#valid| 8) 1))) (.cse82 (not (= (select .cse125 1) 0))) (.cse83 (not (= (select |#valid| 4) 1))) (.cse84 (not (= 7 (select |#length| 13)))) (.cse85 (not (= (select .cse117 1) 75))) (.cse86 (not (= |#NULL.base| 0))) (.cse87 (not (= 7 (select |#length| 7)))) (.cse88 (not (= (select .cse123 2) 0))) (.cse89 (not (= (select |#length| 17) 30))) (.cse90 (not (= (select |#valid| 7) 1))) (.cse91 (not (= (select |#valid| 10) 1))) (.cse92 (not (= (select .cse124 0) 79))) (.cse93 (not (= (select |#length| 22) 21))) (.cse94 (not (= (select .cse122 1) 82))) (.cse95 (not (= (select |#valid| 14) 1))) (.cse96 (not (= 110 (select .cse123 1)))) (.cse97 (not (= (select |#valid| 13) 1))) (.cse98 (not (= 58 (select .cse118 5)))) (.cse99 (not (= (select .cse122 3) 84))) (.cse100 (not (= (select |#valid| 2) 1))) (.cse101 (not (= 104 (select .cse118 4)))) (.cse102 (not (= (select |#length| 9) 4))) (.cse103 (not (= 9 (select |#length| 18)))) (.cse104 (not (= (select .cse121 1) 0))) (.cse105 (not (= (select .cse119 2) 0))) (.cse106 (not (= (select |#valid| 17) 1))) (.cse107 (not (= 44 (select .cse120 0)))) (.cse108 (not (= (select |#length| 27) 9))) (.cse109 (not (= 117 (select .cse120 2)))) (.cse110 (not (= (select |#valid| 9) 1))) (.cse111 (not (= 32 (select .cse119 1)))) (.cse112 (not (= ~head~0.base 0))) (.cse113 (not (= ~cleanupTimeShifts~0 4))) (.cse114 (not (= (select |#valid| 18) 1))) (.cse115 (not (= 0 (select .cse118 6)))) (.cse116 (not (= (select .cse117 0) 79))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (not (= |timeShift_processEnvironment_~tmp~0#1| 0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (= |old(~pumpRunning~0)| 0)) (or .cse0 .cse1 .cse2 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse4 (<= ~waterLevel~0 1) .cse5) .cse0 .cse6) (or .cse7 .cse0 .cse6 .cse8) (or .cse0 (not (< |old(~waterLevel~0)| 2)) .cse1 (< ~waterLevel~0 2)) (or .cse7 .cse0 .cse1 .cse8) (or .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse7 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse0 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse1 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116) (or .cse0 .cse1 (and .cse4 .cse5)) (or .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse0 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 (and (= |timeShift_isHighWaterLevel_~tmp~2#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 1) (= |timeShift_isHighWaterLevel_~tmp~2#1| 0) (= |timeShift_processEnvironment_~tmp~0#1| |timeShift_isHighWaterLevel_#res#1|) (= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|)) .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse1 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse3 .cse116) (or .cse0 .cse6 (and .cse4 .cse5 .cse2) .cse3)))) [2022-11-03 02:15:59,683 INFO L895 garLoopResultBuilder]: At program point L197-1(line 197) the Hoare annotation is: (let ((.cse124 (select |#memory_int| 16)) (.cse118 (select |#memory_int| 10)) (.cse120 (select |#memory_int| 11)) (.cse119 (select |#memory_int| 7)) (.cse125 (select |#memory_int| 5)) (.cse122 (select |#memory_int| 8)) (.cse128 (select |#memory_int| 9)) (.cse126 (select |#memory_int| 1)) (.cse116 (select |#memory_int| 15)) (.cse121 (select |#memory_int| 14)) (.cse117 (select |#memory_int| 13)) (.cse123 (select |#memory_int| 6)) (.cse127 (= 1 ~systemActive~0))) (let ((.cse2 (and (= ~pumpRunning~0 0) (= |timeShift_isMethaneAlarm_#t~ret7#1| ~methaneLevelCritical~0) .cse127 (not (= |timeShift_processEnvironment_~tmp~0#1| 0)))) (.cse7 (= ~waterLevel~0 1)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (= |old(~waterLevel~0)| 1))) (.cse6 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse8 (not (= (select .cse123 1) 102))) (.cse9 (not (= (select |#length| 6) 4))) (.cse10 (not (= (select |#valid| 23) 1))) (.cse11 (not (= 77 (select .cse117 1)))) (.cse12 (not (= (select |#length| 28) 25))) (.cse13 (not (= 73 (select .cse121 2)))) (.cse14 (not (= (select .cse116 2) 0))) (.cse15 (not (= (select .cse126 0) 48))) (.cse16 (not (= 30 (select |#length| 23)))) (.cse17 (not (= (select .cse128 3) 0))) (.cse18 (not (= |#NULL.offset| 0))) (.cse19 (not (= (select |#valid| 26) 1))) (.cse20 (not (= (select |#length| 4) 13))) (.cse21 (not (= (select .cse122 0) 79))) (.cse22 (not (= (select |#length| 15) 3))) (.cse23 (not (= 31 (select |#length| 2)))) (.cse24 (not (= (select .cse128 1) 102))) (.cse25 (not (= (select |#valid| 12) 1))) (.cse26 (not (= (select .cse128 0) 79))) (.cse27 (not (= (select .cse123 2) 102))) (.cse28 (not (= 2 (select |#length| 1)))) (.cse29 (not (= 30 (select |#length| 26)))) (.cse30 (not (= (select .cse125 0) 79))) (.cse31 (not (= 2 (select |#length| 11)))) (.cse32 (not (= 44 (select .cse117 0)))) (.cse33 (not (= 58 (select .cse119 5)))) (.cse34 (not (= (select .cse128 2) 102))) (.cse35 (not (= 116 (select .cse117 3)))) (.cse0 (not .cse127)) (.cse36 (not (= (select .cse123 3) 0))) (.cse37 (not (= (select |#length| 12) 13))) (.cse38 (not (= (select .cse121 0) 67))) (.cse39 (not (= (select |#valid| 6) 1))) (.cse40 (not (= (select |#length| 8) 3))) (.cse41 (not (= (select .cse120 0) 10))) (.cse42 (not (< 0 |#StackHeapBarrier|))) (.cse43 (not (= (select .cse125 1) 110))) (.cse44 (not (= (select |#valid| 3) 1))) (.cse45 (not (= 30 (select |#length| 20)))) (.cse46 (not (= (select |#valid| 25) 1))) (.cse47 (not (= ~head~0.offset 0))) (.cse48 (not (= (select |#valid| 20) 1))) (.cse49 (not (= 25 (select |#length| 25)))) (.cse50 (not (= (select |#valid| 21) 1))) (.cse51 (not (= (select |#valid| 11) 1))) (.cse52 (not (= (select .cse121 4) 0))) (.cse53 (not (= (select |#valid| 16) 1))) (.cse54 (not (= 101 (select .cse117 2)))) (.cse55 (not (= (select |#length| 21) 9))) (.cse56 (not (= (select |#valid| 28) 1))) (.cse57 (not (= (select .cse119 6) 0))) (.cse58 (not (= (select |#valid| 15) 1))) (.cse59 (not (= 1 (select |#valid| 5)))) (.cse60 (not (= (select |#length| 3) 12))) (.cse61 (not (= (select |#valid| 0) 0))) (.cse62 (not (= 109 (select .cse119 3)))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse63 (not (= (select |#valid| 27) 1))) (.cse64 (not (= (select .cse126 1) 0))) (.cse65 (not (= 3 (select |#length| 5)))) (.cse66 (not (= (select |#valid| 24) 1))) (.cse67 (not (= (select .cse119 1) 80))) (.cse68 (not (= (select |#length| 19) 21))) (.cse69 (not (= 5 (select |#length| 14)))) (.cse70 (not (= (select |#valid| 19) 1))) (.cse71 (not (= (select .cse118 0) 41))) (.cse72 (not (= (select |#valid| 1) 1))) (.cse73 (not (= (select |#valid| 22) 1))) (.cse74 (not (= 3 (select |#length| 10)))) (.cse75 (not (= (select .cse125 2) 0))) (.cse76 (not (= 2 (select |#length| 16)))) (.cse77 (not (= 41 (select .cse124 0)))) (.cse78 (not (= (select |#length| 24) 9))) (.cse79 (not (= 112 (select .cse119 4)))) (.cse80 (not (= (select |#valid| 8) 1))) (.cse81 (not (= (select .cse124 1) 0))) (.cse82 (not (= (select |#valid| 4) 1))) (.cse83 (not (= 7 (select |#length| 13)))) (.cse84 (not (= (select .cse116 1) 75))) (.cse85 (not (= |#NULL.base| 0))) (.cse86 (not (= 7 (select |#length| 7)))) (.cse87 (not (= (select .cse122 2) 0))) (.cse88 (not (= (select |#length| 17) 30))) (.cse89 (not (= (select |#valid| 7) 1))) (.cse90 (not (= (select |#valid| 10) 1))) (.cse91 (not (= (select .cse123 0) 79))) (.cse92 (not (= (select |#length| 22) 21))) (.cse93 (not (= (select .cse121 1) 82))) (.cse94 (not (= (select |#valid| 14) 1))) (.cse95 (not (= 110 (select .cse122 1)))) (.cse96 (not (= (select |#valid| 13) 1))) (.cse97 (not (= 58 (select .cse117 5)))) (.cse98 (not (= (select .cse121 3) 84))) (.cse99 (not (= (select |#valid| 2) 1))) (.cse100 (not (= 104 (select .cse117 4)))) (.cse101 (not (= (select |#length| 9) 4))) (.cse102 (not (= 9 (select |#length| 18)))) (.cse103 (not (= (select .cse120 1) 0))) (.cse104 (not (= (select .cse118 2) 0))) (.cse105 (not (= (select |#valid| 17) 1))) (.cse106 (not (= 44 (select .cse119 0)))) (.cse107 (not (= (select |#length| 27) 9))) (.cse108 (not (= 117 (select .cse119 2)))) (.cse109 (not (= (select |#valid| 9) 1))) (.cse110 (not (= 32 (select .cse118 1)))) (.cse111 (not (= ~head~0.base 0))) (.cse112 (not (= ~cleanupTimeShifts~0 4))) (.cse113 (not (= (select |#valid| 18) 1))) (.cse114 (not (= 0 (select .cse117 6)))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse115 (not (= (select .cse116 0) 79)))) (and (or .cse0 (= |old(~pumpRunning~0)| 0)) (or .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse3 .cse4) (or .cse5 .cse0 .cse6 .cse7) (or .cse0 (not (< |old(~waterLevel~0)| 2)) .cse1 (< ~waterLevel~0 2)) (or .cse0 .cse6 .cse2) (or .cse5 .cse0 .cse1 .cse7) (or .cse0 .cse6 .cse3 .cse4) (or .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse5 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse0 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse1 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 (<= ~waterLevel~0 1) .cse6) (or .cse8 .cse9 .cse10 .cse11 .cse12 (and (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (= |timeShift_isHighWaterLevel_~tmp~2#1| 0) (<= 0 |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_processEnvironment_~tmp~0#1| |timeShift_isHighWaterLevel_#res#1|) (<= |timeShift_isHighWaterLevel_~tmp___0~0#1| 1) (= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (<= |timeShift_isHighWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|)) .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse0 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse1 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse4 .cse115)))) [2022-11-03 02:15:59,684 INFO L895 garLoopResultBuilder]: At program point L932(line 932) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (= |old(~pumpRunning~0)| 0)) (or .cse0 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (or .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-03 02:15:59,684 INFO L895 garLoopResultBuilder]: At program point L152(line 152) the Hoare annotation is: (let ((.cse5 (not (= ~pumpRunning~0 0))) (.cse9 (= 1 ~systemActive~0)) (.cse6 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not .cse6)) (.cse2 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse7 (not (<= |old(~waterLevel~0)| 1))) (.cse8 (and .cse5 (<= ~waterLevel~0 1) .cse9)) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not .cse9)) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse1 .cse4) (or .cse0 .cse1 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse1 .cse6) (or .cse7 .cse1 .cse2) (or .cse7 .cse1 .cse6 .cse8) (or .cse7 .cse1 .cse4 .cse8) (or .cse3 .cse1 .cse4 (not (= |old(~pumpRunning~0)| 1)))))) [2022-11-03 02:15:59,687 INFO L895 garLoopResultBuilder]: At program point L152-1(lines 133 157) the Hoare annotation is: (let ((.cse124 (= ~pumpRunning~0 0))) (let ((.cse133 (select |#memory_int| 16)) (.cse127 (select |#memory_int| 10)) (.cse129 (select |#memory_int| 11)) (.cse128 (select |#memory_int| 7)) (.cse134 (select |#memory_int| 5)) (.cse131 (select |#memory_int| 8)) (.cse137 (select |#memory_int| 9)) (.cse135 (select |#memory_int| 1)) (.cse125 (select |#memory_int| 15)) (.cse130 (select |#memory_int| 14)) (.cse6 (= |old(~pumpRunning~0)| 0)) (.cse126 (select |#memory_int| 13)) (.cse132 (select |#memory_int| 6)) (.cse138 (= ~methaneLevelCritical~0 ~systemActive~0)) (.cse5 (not .cse124)) (.cse7 (<= ~waterLevel~0 1)) (.cse136 (= 1 ~systemActive~0))) (let ((.cse123 (= ~pumpRunning~0 1)) (.cse3 (and .cse5 .cse7 .cse136)) (.cse122 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse119 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse10 (= ~waterLevel~0 1)) (.cse121 (not (= |timeShift_processEnvironment_~tmp~0#1| 0))) (.cse2 (not .cse138)) (.cse4 (and .cse138 .cse124 .cse7 .cse136)) (.cse11 (not (= (select .cse132 1) 102))) (.cse12 (not (= (select |#length| 6) 4))) (.cse13 (not (= (select |#valid| 23) 1))) (.cse14 (not (= 77 (select .cse126 1)))) (.cse15 (not (= (select |#length| 28) 25))) (.cse16 (not .cse6)) (.cse17 (not (= 73 (select .cse130 2)))) (.cse18 (not (= (select .cse125 2) 0))) (.cse19 (not (= (select .cse135 0) 48))) (.cse20 (not (= 30 (select |#length| 23)))) (.cse21 (not (= (select .cse137 3) 0))) (.cse22 (not (= |#NULL.offset| 0))) (.cse23 (not (= (select |#valid| 26) 1))) (.cse24 (not (= (select |#length| 4) 13))) (.cse25 (not (= (select .cse131 0) 79))) (.cse26 (not (= (select |#length| 15) 3))) (.cse27 (not (= 31 (select |#length| 2)))) (.cse28 (not (= (select .cse137 1) 102))) (.cse29 (not (= (select |#valid| 12) 1))) (.cse30 (not (= (select .cse137 0) 79))) (.cse31 (not (= (select .cse132 2) 102))) (.cse32 (not (= 2 (select |#length| 1)))) (.cse33 (not (= 30 (select |#length| 26)))) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse34 (not (= (select .cse134 0) 79))) (.cse35 (not (= 2 (select |#length| 11)))) (.cse36 (not (= 44 (select .cse126 0)))) (.cse37 (not (= 58 (select .cse128 5)))) (.cse38 (not (= (select .cse137 2) 102))) (.cse39 (not (= 116 (select .cse126 3)))) (.cse1 (not .cse136)) (.cse40 (not (= (select .cse132 3) 0))) (.cse41 (not (= (select |#length| 12) 13))) (.cse42 (not (= (select .cse130 0) 67))) (.cse43 (not (= (select |#valid| 6) 1))) (.cse44 (not (= (select |#length| 8) 3))) (.cse45 (not (= (select .cse129 0) 10))) (.cse46 (not (< 0 |#StackHeapBarrier|))) (.cse47 (not (= (select .cse134 1) 110))) (.cse48 (not (= (select |#valid| 3) 1))) (.cse49 (not (= 30 (select |#length| 20)))) (.cse50 (not (= (select |#valid| 25) 1))) (.cse51 (not (= ~head~0.offset 0))) (.cse52 (not (= (select |#valid| 20) 1))) (.cse53 (not (= 25 (select |#length| 25)))) (.cse54 (not (= (select |#valid| 21) 1))) (.cse55 (not (= (select |#valid| 11) 1))) (.cse56 (not (= (select .cse130 4) 0))) (.cse57 (not (= (select |#valid| 16) 1))) (.cse58 (not (= 101 (select .cse126 2)))) (.cse59 (not (= (select |#length| 21) 9))) (.cse60 (not (= (select |#valid| 28) 1))) (.cse61 (not (= (select .cse128 6) 0))) (.cse62 (not (= (select |#valid| 15) 1))) (.cse63 (not (= 1 (select |#valid| 5)))) (.cse64 (not (= (select |#length| 3) 12))) (.cse65 (not (= (select |#valid| 0) 0))) (.cse66 (not (= 109 (select .cse128 3)))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse67 (not (= (select |#valid| 27) 1))) (.cse68 (not (= (select .cse135 1) 0))) (.cse69 (not (= 3 (select |#length| 5)))) (.cse70 (not (= (select |#valid| 24) 1))) (.cse71 (not (= (select .cse128 1) 80))) (.cse72 (not (= (select |#length| 19) 21))) (.cse73 (not (= 5 (select |#length| 14)))) (.cse74 (not (= (select |#valid| 19) 1))) (.cse75 (not (= (select .cse127 0) 41))) (.cse76 (not (= (select |#valid| 1) 1))) (.cse77 (not (= (select |#valid| 22) 1))) (.cse78 (not (= 3 (select |#length| 10)))) (.cse79 (not (= (select .cse134 2) 0))) (.cse80 (not (= 2 (select |#length| 16)))) (.cse81 (not (= 41 (select .cse133 0)))) (.cse82 (not (= (select |#length| 24) 9))) (.cse83 (not (= 112 (select .cse128 4)))) (.cse84 (not (= (select |#valid| 8) 1))) (.cse85 (not (= (select .cse133 1) 0))) (.cse86 (not (= (select |#valid| 4) 1))) (.cse87 (not (= 7 (select |#length| 13)))) (.cse88 (not (= (select .cse125 1) 75))) (.cse89 (not (= |#NULL.base| 0))) (.cse90 (not (= 7 (select |#length| 7)))) (.cse91 (not (= (select .cse131 2) 0))) (.cse92 (not (= (select |#length| 17) 30))) (.cse93 (not (= (select |#valid| 7) 1))) (.cse94 (not (= (select |#valid| 10) 1))) (.cse95 (not (= (select .cse132 0) 79))) (.cse96 (not (= (select |#length| 22) 21))) (.cse97 (not (= (select .cse130 1) 82))) (.cse98 (not (= (select |#valid| 14) 1))) (.cse99 (not (= 110 (select .cse131 1)))) (.cse100 (not (= (select |#valid| 13) 1))) (.cse101 (not (= 58 (select .cse126 5)))) (.cse102 (not (= (select .cse130 3) 84))) (.cse103 (not (= (select |#valid| 2) 1))) (.cse104 (not (= 104 (select .cse126 4)))) (.cse105 (not (= (select |#length| 9) 4))) (.cse106 (not (= 9 (select |#length| 18)))) (.cse107 (not (= (select .cse129 1) 0))) (.cse108 (not (= (select .cse127 2) 0))) (.cse109 (not (= (select |#valid| 17) 1))) (.cse110 (not (= 44 (select .cse128 0)))) (.cse111 (not (= (select |#length| 27) 9))) (.cse112 (not (= 117 (select .cse128 2)))) (.cse113 (not (= (select |#valid| 9) 1))) (.cse114 (not (= 32 (select .cse127 1)))) (.cse115 (not (= ~head~0.base 0))) (.cse116 (not (= ~cleanupTimeShifts~0 4))) (.cse117 (not (= (select |#valid| 18) 1))) (.cse118 (not (= 0 (select .cse126 6)))) (.cse120 (not (= (select .cse125 0) 79)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6) (or .cse0 .cse1 .cse7 .cse8) (or .cse9 .cse1 .cse2 .cse10) (or .cse11 .cse12 .cse13 .cse14 (and (<= 0 |timeShift_isHighWaterLevel_~tmp~2#1|) (<= |timeShift_processEnvironment_~tmp~0#1| 1) (<= 1 |timeShift_processEnvironment_~tmp~0#1|) (<= 1 |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (<= 1 |timeShift_isHighWaterLevel_~tmp___0~0#1|) (<= |timeShift_isHighWaterLevel_#res#1| 1) (<= |timeShift_isMethaneAlarm_~retValue_acc~2#1| 0) (<= |timeShift_isHighWaterLevel_~tmp~2#1| 0) (<= 0 |timeShift_isHighWaterSensorDry_#res#1|) (<= |timeShift_isHighWaterLevel_~retValue_acc~4#1| 1) (<= |timeShift_isHighWaterLevel_~tmp___0~0#1| 1) (= |timeShift_isMethaneAlarm_~retValue_acc~2#1| |timeShift_isMethaneAlarm_#res#1|) (= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (<= |timeShift_isHighWaterSensorDry_#res#1| 0) (<= 0 |timeShift_isMethaneAlarm_~retValue_acc~2#1|) (= |timeShift_activatePump_~tmp~1#1| |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_isHighWaterLevel_#res#1|)) .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse1 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse8 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120) (or .cse16 .cse1 (and .cse121 .cse122 .cse123) .cse8 .cse119) (or (and .cse121 .cse10 .cse123) .cse16 .cse9 .cse1 .cse8 (and .cse124 .cse10)) (or .cse0 .cse1 .cse6 .cse3) (or (and .cse121 .cse122) .cse16 .cse1 .cse2 .cse119) (or .cse9 .cse1 .cse8 (not (= |old(~pumpRunning~0)| 1))) (or .cse0 .cse1 (and (not .cse10) .cse121) .cse2 .cse4) (or .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse9 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse1 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse8 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 (and (= |timeShift_isHighWaterSensorDry_~retValue_acc~7#1| 1) (= |timeShift_isHighWaterLevel_~tmp~2#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0) (= |timeShift_processEnvironment_~tmp~0#1| |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_isHighWaterSensorDry_#res#1| |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|)) .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse120))))) [2022-11-03 02:15:59,690 INFO L895 garLoopResultBuilder]: At program point L347(lines 347 367) the Hoare annotation is: (let ((.cse130 (select |#memory_int| 16)) (.cse124 (select |#memory_int| 10)) (.cse126 (select |#memory_int| 11)) (.cse125 (select |#memory_int| 7)) (.cse131 (select |#memory_int| 5)) (.cse128 (select |#memory_int| 8)) (.cse133 (select |#memory_int| 9)) (.cse132 (select |#memory_int| 1)) (.cse122 (select |#memory_int| 15)) (.cse127 (select |#memory_int| 14)) (.cse2 (= |old(~pumpRunning~0)| 0)) (.cse123 (select |#memory_int| 13)) (.cse129 (select |#memory_int| 6))) (let ((.cse121 (= ~pumpRunning~0 1)) (.cse120 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse117 (not (<= 2 |old(~waterLevel~0)|))) (.cse9 (not (= (select .cse129 1) 102))) (.cse10 (not (= (select |#length| 6) 4))) (.cse11 (not (= (select |#valid| 23) 1))) (.cse12 (not (= 77 (select .cse123 1)))) (.cse13 (not (= (select |#length| 28) 25))) (.cse14 (not .cse2)) (.cse15 (not (= 73 (select .cse127 2)))) (.cse16 (not (= (select .cse122 2) 0))) (.cse17 (not (= (select .cse132 0) 48))) (.cse18 (not (= 30 (select |#length| 23)))) (.cse19 (not (= (select .cse133 3) 0))) (.cse20 (not (= |#NULL.offset| 0))) (.cse21 (not (= (select |#valid| 26) 1))) (.cse22 (not (= (select |#length| 4) 13))) (.cse23 (not (= (select .cse128 0) 79))) (.cse24 (not (= (select |#length| 15) 3))) (.cse25 (not (= 31 (select |#length| 2)))) (.cse26 (not (= (select .cse133 1) 102))) (.cse27 (not (= (select |#valid| 12) 1))) (.cse28 (not (= (select .cse133 0) 79))) (.cse29 (not (= (select .cse129 2) 102))) (.cse30 (not (= 2 (select |#length| 1)))) (.cse31 (not (= 30 (select |#length| 26)))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse32 (not (= (select .cse131 0) 79))) (.cse33 (not (= 2 (select |#length| 11)))) (.cse34 (not (= 44 (select .cse123 0)))) (.cse35 (not (= 58 (select .cse125 5)))) (.cse36 (not (= (select .cse133 2) 102))) (.cse37 (not (= 116 (select .cse123 3)))) (.cse38 (not (= (select .cse129 3) 0))) (.cse39 (not (= (select |#length| 12) 13))) (.cse40 (not (= (select .cse127 0) 67))) (.cse41 (not (= (select |#valid| 6) 1))) (.cse42 (not (= (select |#length| 8) 3))) (.cse43 (not (= (select .cse126 0) 10))) (.cse44 (not (< 0 |#StackHeapBarrier|))) (.cse45 (not (= (select .cse131 1) 110))) (.cse46 (not (= (select |#valid| 3) 1))) (.cse47 (not (= 30 (select |#length| 20)))) (.cse48 (not (= (select |#valid| 25) 1))) (.cse49 (not (= ~head~0.offset 0))) (.cse50 (not (= (select |#valid| 20) 1))) (.cse51 (not (= 25 (select |#length| 25)))) (.cse52 (not (= (select |#valid| 21) 1))) (.cse53 (not (= (select |#valid| 11) 1))) (.cse54 (not (= (select .cse127 4) 0))) (.cse55 (not (= (select |#valid| 16) 1))) (.cse56 (not (= 101 (select .cse123 2)))) (.cse57 (not (= (select |#length| 21) 9))) (.cse58 (not (= (select |#valid| 28) 1))) (.cse59 (not (= (select .cse125 6) 0))) (.cse60 (not (= (select |#valid| 15) 1))) (.cse61 (not (= 1 (select |#valid| 5)))) (.cse62 (not (= (select |#length| 3) 12))) (.cse63 (not (= (select |#valid| 0) 0))) (.cse64 (not (= 109 (select .cse125 3)))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse65 (not (= (select |#valid| 27) 1))) (.cse66 (not (= (select .cse132 1) 0))) (.cse67 (not (= 3 (select |#length| 5)))) (.cse68 (not (= (select |#valid| 24) 1))) (.cse69 (not (= (select .cse125 1) 80))) (.cse70 (not (= (select |#length| 19) 21))) (.cse71 (not (= 5 (select |#length| 14)))) (.cse72 (not (= (select |#valid| 19) 1))) (.cse73 (not (= (select .cse124 0) 41))) (.cse74 (not (= (select |#valid| 1) 1))) (.cse75 (not (= (select |#valid| 22) 1))) (.cse76 (not (= 3 (select |#length| 10)))) (.cse77 (not (= (select .cse131 2) 0))) (.cse78 (not (= 2 (select |#length| 16)))) (.cse79 (not (= 41 (select .cse130 0)))) (.cse80 (not (= (select |#length| 24) 9))) (.cse81 (not (= 112 (select .cse125 4)))) (.cse82 (not (= (select |#valid| 8) 1))) (.cse83 (not (= (select .cse130 1) 0))) (.cse84 (not (= (select |#valid| 4) 1))) (.cse85 (not (= 7 (select |#length| 13)))) (.cse86 (not (= (select .cse122 1) 75))) (.cse87 (not (= |#NULL.base| 0))) (.cse88 (not (= 7 (select |#length| 7)))) (.cse89 (not (= (select .cse128 2) 0))) (.cse90 (not (= (select |#length| 17) 30))) (.cse91 (not (= (select |#valid| 7) 1))) (.cse92 (not (= (select |#valid| 10) 1))) (.cse93 (not (= (select .cse129 0) 79))) (.cse94 (not (= (select |#length| 22) 21))) (.cse95 (not (= (select .cse127 1) 82))) (.cse96 (not (= (select |#valid| 14) 1))) (.cse97 (not (= 110 (select .cse128 1)))) (.cse98 (not (= (select |#valid| 13) 1))) (.cse99 (not (= 58 (select .cse123 5)))) (.cse100 (not (= (select .cse127 3) 84))) (.cse101 (not (= (select |#valid| 2) 1))) (.cse102 (not (= 104 (select .cse123 4)))) (.cse103 (not (= (select |#length| 9) 4))) (.cse104 (not (= 9 (select |#length| 18)))) (.cse105 (not (= (select .cse126 1) 0))) (.cse106 (not (= (select .cse124 2) 0))) (.cse107 (not (= (select |#valid| 17) 1))) (.cse108 (not (= 44 (select .cse125 0)))) (.cse109 (not (= (select |#length| 27) 9))) (.cse110 (not (= 117 (select .cse125 2)))) (.cse111 (not (= (select |#valid| 9) 1))) (.cse112 (not (= 32 (select .cse124 1)))) (.cse113 (not (= ~head~0.base 0))) (.cse114 (not (= ~cleanupTimeShifts~0 4))) (.cse115 (not (= (select |#valid| 18) 1))) (.cse116 (not (= 0 (select .cse123 6)))) (.cse118 (not (= (select .cse122 0) 79))) (.cse3 (not (<= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse119 (not (= |timeShift_processEnvironment_~tmp~0#1| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse5 (< ~waterLevel~0 2))) (and (or (not .cse0) .cse1 .cse2) (or .cse3 .cse1 .cse4 .cse5) (or (not (= |timeShift___utac_acc__Specification3_spec__1_~tmp~4#1| 0)) .cse1 .cse6) (or .cse7 .cse1 .cse6 .cse8) (or .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse1 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse4 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 (and (<= 0 |timeShift_isHighWaterLevel_~tmp~2#1|) (<= |timeShift_processEnvironment_~tmp~0#1| 1) (<= 1 |timeShift_processEnvironment_~tmp~0#1|) (<= 1 |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (<= 1 |timeShift_isHighWaterLevel_~tmp___0~0#1|) (<= |timeShift_isHighWaterLevel_#res#1| 1) (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~4#1|) (<= |timeShift_isHighWaterLevel_~tmp~2#1| 0) (<= 0 |timeShift_isHighWaterSensorDry_#res#1|) (<= |timeShift_isMethaneAlarm_#res#1| 0) (<= |timeShift_isHighWaterLevel_~retValue_acc~4#1| 1) (<= |timeShift_isHighWaterLevel_~tmp___0~0#1| 1) (= |timeShift_isMethaneAlarm_~retValue_acc~2#1| |timeShift_isMethaneAlarm_#res#1|) (= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (<= |timeShift_isHighWaterSensorDry_#res#1| 0) (<= 0 |timeShift_isMethaneAlarm_#res#1|) (= |timeShift_activatePump_~tmp~1#1| |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_isHighWaterLevel_#res#1|)) .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118) (or .cse14 .cse1 (and .cse119 .cse120 .cse121) .cse4 .cse117) (or (and .cse119 .cse8 .cse121) .cse14 .cse7 .cse1 .cse4 (and .cse0 .cse8)) (or .cse3 .cse1 (<= ~waterLevel~0 1) .cse2) (or (and .cse119 .cse120) .cse14 .cse1 .cse6 .cse117) (or .cse7 .cse1 .cse4 (not (= |old(~pumpRunning~0)| 1))) (or .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse7 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse1 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse4 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 (and (= |timeShift_isHighWaterSensorDry_~retValue_acc~7#1| 1) (= |timeShift_isHighWaterLevel_~tmp~2#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0) (= |timeShift_processEnvironment_~tmp~0#1| |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_isHighWaterSensorDry_#res#1| |timeShift_isHighWaterSensorDry_~retValue_acc~7#1|) (= |timeShift_isHighWaterLevel_~tmp___0~0#1| |timeShift_isHighWaterLevel_~retValue_acc~4#1|)) .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse118) (or .cse3 .cse1 .cse6 (and (or (not .cse8) .cse0) (or .cse0 .cse119))) (or .cse1 (not (< |old(~waterLevel~0)| 2)) .cse6 .cse5)))) [2022-11-03 02:15:59,690 INFO L899 garLoopResultBuilder]: For program point L112-1(lines 112 118) no Hoare annotation was computed. [2022-11-03 02:15:59,691 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 149) no Hoare annotation was computed. [2022-11-03 02:15:59,691 INFO L895 garLoopResultBuilder]: At program point L137(lines 137 154) the Hoare annotation is: (let ((.cse18 (= ~pumpRunning~0 0)) (.cse4 (= ~waterLevel~0 1))) (let ((.cse14 (= |old(~pumpRunning~0)| 0)) (.cse15 (not .cse4)) (.cse13 (not .cse18))) (let ((.cse12 (= |old(~waterLevel~0)| 2)) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse11 (< ~waterLevel~0 2)) (.cse6 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse8 (not (<= |old(~waterLevel~0)| 1))) (.cse9 (and .cse18 (not (= 2 ~waterLevel~0)))) (.cse10 (and .cse15 .cse13)) (.cse0 (not .cse14)) (.cse16 (and .cse18 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse17 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 1))) (.cse7 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse5 .cse6 .cse7) (or .cse8 .cse2 .cse6 (and (or .cse9 .cse10) .cse11)) (or .cse2 .cse9 .cse3 .cse5 .cse10 .cse12) (or .cse13 .cse2 .cse14) (or .cse15 .cse2 .cse14 .cse6 .cse12) (or .cse0 .cse1 .cse2 .cse6 .cse4) (or .cse2 (not (< |old(~waterLevel~0)| 2)) .cse3 .cse11) (or .cse0 .cse16 .cse2 .cse6 .cse17) (or .cse8 .cse2 (<= ~waterLevel~0 1) .cse14) (or .cse8 .cse2 .cse9 .cse3 .cse10) (or .cse0 .cse16 .cse2 .cse3 .cse17) (or .cse2 .cse3 .cse5 .cse7))))) [2022-11-03 02:15:59,692 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 101 124) the Hoare annotation is: (let ((.cse16 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse15 (= ~waterLevel~0 1))) (let ((.cse8 (= |old(~pumpRunning~0)| 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse7 (or .cse16 .cse15)) (.cse14 (= 1 ~systemActive~0))) (let ((.cse5 (and .cse14 (= ~pumpRunning~0 1))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= |old(~waterLevel~0)| 1)) (.cse9 (and .cse14 .cse7)) (.cse10 (and .cse1 .cse16)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse12 (not (<= 2 |old(~waterLevel~0)|))) (.cse13 (not .cse15)) (.cse0 (not .cse8)) (.cse3 (not .cse14)) (.cse11 (not (= ~methaneLevelCritical~0 ~systemActive~0)))) (and (or .cse0 .cse1 (not .cse2) .cse3 .cse4) (or .cse3 .cse5 .cse4 .cse6) (or .cse3 (and (not .cse1) .cse7) .cse8) (or .cse3 .cse4 .cse9) (or .cse0 .cse10 .cse3 .cse11 .cse12) (or .cse3 .cse5 .cse6 .cse11) (or .cse13 .cse2 .cse3 .cse4 .cse6) (or .cse13 .cse2 .cse3 .cse8 .cse11) (or .cse3 .cse11 .cse9) (or .cse0 .cse10 .cse3 .cse4 .cse12) (or .cse13 .cse0 .cse1 .cse3 .cse11))))) [2022-11-03 02:15:59,692 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 101 124) no Hoare annotation was computed. [2022-11-03 02:15:59,693 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 932) no Hoare annotation was computed. [2022-11-03 02:15:59,693 INFO L899 garLoopResultBuilder]: For program point L105-1(lines 104 123) no Hoare annotation was computed. [2022-11-03 02:15:59,693 INFO L899 garLoopResultBuilder]: For program point L357(lines 357 363) no Hoare annotation was computed. [2022-11-03 02:15:59,695 INFO L895 garLoopResultBuilder]: At program point L548(lines 548 555) the Hoare annotation is: (let ((.cse2 (select |#memory_int| 11)) (.cse8 (select |#memory_int| 8)) (.cse9 (select |#memory_int| 16)) (.cse4 (select |#memory_int| 9)) (.cse0 (select |#memory_int| 14)) (.cse5 (select |#memory_int| 7)) (.cse1 (select |#memory_int| 6)) (.cse6 (select |#memory_int| 13)) (.cse10 (select |#memory_int| 1)) (.cse11 (select |#memory_int| 15)) (.cse3 (select |#memory_int| 10)) (.cse7 (select |#memory_int| 5))) (and (= (select .cse0 3) 84) (= (select .cse1 2) 102) (= (select .cse2 1) 0) (= 1 (select |#valid| 5)) (= 32 (select .cse3 1)) (= (select |#length| 3) 12) (= (select .cse4 0) 79) (= (select |#valid| 15) 1) (= 112 (select .cse5 4)) (= (select .cse1 0) 79) (= 3 (select |#length| 10)) (= ~pumpRunning~0 0) (= (select |#valid| 26) 1) (= (select .cse5 1) 80) (= 58 (select .cse6 5)) (= (select |#length| 8) 3) (= (select |#length| 6) 4) (= (select |#valid| 9) 1) (= (select |#length| 4) 13) (= 117 (select .cse5 2)) (= (select .cse7 2) 0) (= 7 (select |#length| 7)) (= 7 (select |#length| 13)) (= 110 (select .cse8 1)) (= (select .cse1 1) 102) (= (select |#valid| 11) 1) (= (select |#valid| 27) 1) (= ~methaneLevelCritical~0 0) (= 58 (select .cse5 5)) (= (select .cse8 0) 79) (= 30 (select |#length| 23)) (= 41 (select .cse9 0)) (= 44 (select .cse5 0)) (= (select |#length| 24) 9) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= 44 (select .cse6 0)) (= (select .cse2 0) 10) (= (select .cse0 4) 0) (= 2 (select |#length| 1)) (= (select |#length| 17) 30) (= 73 (select .cse0 2)) (= 9 (select |#length| 18)) (= (select |#length| 19) 21) (= (select |#valid| 3) 1) (= (select |#valid| 7) 1) (= (select |#length| 22) 21) (= (select |#valid| 18) 1) (= (select |#valid| 22) 1) (= 3 (select |#length| 5)) (= 30 (select |#length| 26)) (= 77 (select .cse6 1)) (= 2 (select |#length| 11)) (= 1 ~systemActive~0) (= (select |#length| 15) 3) (= (select |#valid| 24) 1) (= (select .cse4 3) 0) (= (select |#valid| 12) 1) (= (select |#valid| 28) 1) (= (select .cse0 1) 82) (= (select |#valid| 4) 1) (= (select .cse4 1) 102) (= (select .cse8 2) 0) (= (select .cse9 1) 0) (= 101 (select .cse6 2)) (= 25 (select |#length| 25)) (= (select |#valid| 1) 1) (= (select .cse5 6) 0) (= (select .cse4 2) 102) (= (select |#valid| 20) 1) (= (select .cse7 0) 79) (= (select |#length| 12) 13) (= 2 (select |#length| 16)) (= (select |#valid| 21) 1) (= (select |#length| 9) 4) (= 104 (select .cse6 4)) (= (select |#length| 21) 9) (= (select |#valid| 14) 1) (= |ULTIMATE.start_valid_product_~retValue_acc~1#1| |ULTIMATE.start_valid_product_#res#1|) (= 116 (select .cse6 3)) (= 5 (select |#length| 14)) (= (select |#valid| 0) 0) (= 30 (select |#length| 20)) (= (select |#valid| 25) 1) (= ~head~0.base 0) (= (select |#valid| 2) 1) (= |#NULL.offset| 0) (= (select .cse0 0) 67) (= ~waterLevel~0 1) (= |ULTIMATE.start_valid_product_~retValue_acc~1#1| 1) (= (select .cse3 2) 0) (= (select |#length| 27) 9) (= (select .cse10 0) 48) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_main_~tmp~5#1|) (= (select |#valid| 23) 1) (= (select |#valid| 19) 1) (= (select .cse11 1) 75) (= 109 (select .cse5 3)) (= (select .cse1 3) 0) (= 0 (select .cse6 6)) (= (select |#valid| 16) 1) (= (select .cse11 2) 0) (= (select |#valid| 6) 1) (= (select .cse10 1) 0) (= (select .cse11 0) 79) (= (select .cse3 0) 41) (= (select |#valid| 17) 1) (= (select |#valid| 10) 1) (= (select .cse7 1) 110) (= (select |#valid| 8) 1) (= (select |#length| 28) 25) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))) [2022-11-03 02:15:59,695 INFO L902 garLoopResultBuilder]: At program point L548-2(lines 548 555) the Hoare annotation is: true [2022-11-03 02:15:59,695 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-03 02:15:59,696 INFO L895 garLoopResultBuilder]: At program point L317-2(lines 311 322) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 ~systemActive~0) .cse0 .cse1) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (not (= ~pumpRunning~0 0)) .cse0 .cse1))) [2022-11-03 02:15:59,696 INFO L899 garLoopResultBuilder]: For program point L301(lines 301 307) no Hoare annotation was computed. [2022-11-03 02:15:59,696 INFO L899 garLoopResultBuilder]: For program point L301-1(lines 301 307) no Hoare annotation was computed. [2022-11-03 02:15:59,696 INFO L902 garLoopResultBuilder]: At program point L330(lines 271 334) the Hoare annotation is: true [2022-11-03 02:15:59,697 INFO L895 garLoopResultBuilder]: At program point L293(line 293) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 (< ~waterLevel~0 2)) (and (= ~methaneLevelCritical~0 ~systemActive~0) .cse0 .cse1) (and (not (= ~pumpRunning~0 0)) .cse0 .cse1))) [2022-11-03 02:15:59,697 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-03 02:15:59,697 INFO L895 garLoopResultBuilder]: At program point L327(lines 280 328) the Hoare annotation is: false [2022-11-03 02:15:59,697 INFO L899 garLoopResultBuilder]: For program point L282(lines 281 326) no Hoare annotation was computed. [2022-11-03 02:15:59,698 INFO L895 garLoopResultBuilder]: At program point L303(line 303) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 ~systemActive~0) .cse0 .cse1) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (not (= ~pumpRunning~0 0)) .cse0 .cse1))) [2022-11-03 02:15:59,698 INFO L895 garLoopResultBuilder]: At program point L324(lines 281 326) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 (< ~waterLevel~0 2)) (and (= ~methaneLevelCritical~0 ~systemActive~0) .cse0 .cse1) (and (not (= ~pumpRunning~0 0)) .cse0 .cse1))) [2022-11-03 02:15:59,698 INFO L899 garLoopResultBuilder]: For program point L291(lines 291 297) no Hoare annotation was computed. [2022-11-03 02:15:59,699 INFO L899 garLoopResultBuilder]: For program point L291-1(lines 291 297) no Hoare annotation was computed. [2022-11-03 02:15:59,699 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 386 397) no Hoare annotation was computed. [2022-11-03 02:15:59,699 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 386 397) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= ~waterLevel~0 1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 0) .cse0 .cse1 .cse2) (or .cse0 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse1 .cse2) (or .cse0 (not (< |old(~waterLevel~0)| 2)) .cse3 .cse1 .cse2) (or (not .cse2) (= |old(~waterLevel~0)| 1) .cse0 .cse3 (not (= ~pumpRunning~0 1))))) [2022-11-03 02:15:59,705 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:15:59,708 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-03 02:15:59,849 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 03.11 02:15:59 BoogieIcfgContainer [2022-11-03 02:15:59,849 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-03 02:15:59,850 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-03 02:15:59,851 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-03 02:15:59,851 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-03 02:15:59,852 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:11:26" (3/4) ... [2022-11-03 02:15:59,855 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-03 02:15:59,864 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-03 02:15:59,865 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-03 02:15:59,865 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-03 02:15:59,865 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-03 02:15:59,865 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-03 02:15:59,866 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-03 02:15:59,885 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 74 nodes and edges [2022-11-03 02:15:59,886 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 26 nodes and edges [2022-11-03 02:15:59,886 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2022-11-03 02:15:59,887 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-03 02:15:59,887 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-03 02:15:59,888 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 02:15:59,889 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 02:15:59,922 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((unknown-#memory_int-unknown[14][3] == 84 && unknown-#memory_int-unknown[6][2] == 102) && unknown-#memory_int-unknown[11][1] == 0) && 1 == \valid[5]) && 32 == unknown-#memory_int-unknown[10][1]) && unknown-#length-unknown[3] == 12) && unknown-#memory_int-unknown[9][0] == 79) && \valid[15] == 1) && 112 == unknown-#memory_int-unknown[7][4]) && unknown-#memory_int-unknown[6][0] == 79) && 3 == unknown-#length-unknown[10]) && pumpRunning == 0) && \valid[26] == 1) && unknown-#memory_int-unknown[7][1] == 80) && 58 == unknown-#memory_int-unknown[13][5]) && unknown-#length-unknown[8] == 3) && unknown-#length-unknown[6] == 4) && \valid[9] == 1) && unknown-#length-unknown[4] == 13) && 117 == unknown-#memory_int-unknown[7][2]) && unknown-#memory_int-unknown[5][2] == 0) && 7 == unknown-#length-unknown[7]) && 7 == unknown-#length-unknown[13]) && 110 == unknown-#memory_int-unknown[8][1]) && unknown-#memory_int-unknown[6][1] == 102) && \valid[11] == 1) && \valid[27] == 1) && methaneLevelCritical == 0) && 58 == unknown-#memory_int-unknown[7][5]) && unknown-#memory_int-unknown[8][0] == 79) && 30 == unknown-#length-unknown[23]) && 41 == unknown-#memory_int-unknown[16][0]) && 44 == unknown-#memory_int-unknown[7][0]) && unknown-#length-unknown[24] == 9) && 31 == unknown-#length-unknown[2]) && head == 0) && 44 == unknown-#memory_int-unknown[13][0]) && unknown-#memory_int-unknown[11][0] == 10) && unknown-#memory_int-unknown[14][4] == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[17] == 30) && 73 == unknown-#memory_int-unknown[14][2]) && 9 == unknown-#length-unknown[18]) && unknown-#length-unknown[19] == 21) && \valid[3] == 1) && \valid[7] == 1) && unknown-#length-unknown[22] == 21) && \valid[18] == 1) && \valid[22] == 1) && 3 == unknown-#length-unknown[5]) && 30 == unknown-#length-unknown[26]) && 77 == unknown-#memory_int-unknown[13][1]) && 2 == unknown-#length-unknown[11]) && 1 == systemActive) && unknown-#length-unknown[15] == 3) && \valid[24] == 1) && unknown-#memory_int-unknown[9][3] == 0) && \valid[12] == 1) && \valid[28] == 1) && unknown-#memory_int-unknown[14][1] == 82) && \valid[4] == 1) && unknown-#memory_int-unknown[9][1] == 102) && unknown-#memory_int-unknown[8][2] == 0) && unknown-#memory_int-unknown[16][1] == 0) && 101 == unknown-#memory_int-unknown[13][2]) && 25 == unknown-#length-unknown[25]) && \valid[1] == 1) && unknown-#memory_int-unknown[7][6] == 0) && unknown-#memory_int-unknown[9][2] == 102) && \valid[20] == 1) && unknown-#memory_int-unknown[5][0] == 79) && unknown-#length-unknown[12] == 13) && 2 == unknown-#length-unknown[16]) && \valid[21] == 1) && unknown-#length-unknown[9] == 4) && 104 == unknown-#memory_int-unknown[13][4]) && unknown-#length-unknown[21] == 9) && \valid[14] == 1) && retValue_acc == \result) && 116 == unknown-#memory_int-unknown[13][3]) && 5 == unknown-#length-unknown[14]) && \valid[0] == 0) && 30 == unknown-#length-unknown[20]) && \valid[25] == 1) && head == 0) && \valid[2] == 1) && #NULL == 0) && unknown-#memory_int-unknown[14][0] == 67) && waterLevel == 1) && retValue_acc == 1) && unknown-#memory_int-unknown[10][2] == 0) && unknown-#length-unknown[27] == 9) && unknown-#memory_int-unknown[1][0] == 48) && \result == tmp) && \valid[23] == 1) && \valid[19] == 1) && unknown-#memory_int-unknown[15][1] == 75) && 109 == unknown-#memory_int-unknown[7][3]) && unknown-#memory_int-unknown[6][3] == 0) && 0 == unknown-#memory_int-unknown[13][6]) && \valid[16] == 1) && unknown-#memory_int-unknown[15][2] == 0) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && unknown-#memory_int-unknown[15][0] == 79) && unknown-#memory_int-unknown[10][0] == 41) && \valid[17] == 1) && \valid[10] == 1) && unknown-#memory_int-unknown[5][1] == 110) && \valid[8] == 1) && unknown-#length-unknown[28] == 25) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 [2022-11-03 02:15:59,924 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || (1 == systemActive && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1))) && ((!(1 == systemActive) || (!(pumpRunning == 0) && (\old(waterLevel) == waterLevel || waterLevel == 1))) || \old(pumpRunning) == 0)) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (1 == systemActive && (\old(waterLevel) == waterLevel || waterLevel == 1)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || (1 == systemActive && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == systemActive))) && ((((!(waterLevel == 1) || \old(waterLevel) == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1))) && ((((!(waterLevel == 1) || \old(waterLevel) == 1) || !(1 == systemActive)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive))) && ((!(1 == systemActive) || !(methaneLevelCritical == systemActive)) || (1 == systemActive && (\old(waterLevel) == waterLevel || waterLevel == 1)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) [2022-11-03 02:15:59,926 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == systemActive)) || pumpRunning == 1)) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || (((pumpRunning == 0 && !(2 == waterLevel)) || (!(waterLevel == 1) && !(pumpRunning == 0))) && waterLevel < 2))) && (((((!(1 == systemActive) || (pumpRunning == 0 && !(2 == waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (!(waterLevel == 1) && !(pumpRunning == 0))) || \old(waterLevel) == 2)) && ((!(pumpRunning == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0)) && ((((!(waterLevel == 1) || !(1 == systemActive)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || \old(waterLevel) == 2)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || waterLevel == 1)) && (((!(1 == systemActive) || !(\old(waterLevel) < 2)) || !(methaneLevelCritical == 0)) || waterLevel < 2)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1) || \old(pumpRunning) == 0)) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || (pumpRunning == 0 && !(2 == waterLevel))) || !(methaneLevelCritical == 0)) || (!(waterLevel == 1) && !(pumpRunning == 0)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || pumpRunning == 1) [2022-11-03 02:15:59,926 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || ((!(pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || (((methaneLevelCritical == systemActive && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) && ((!(pumpRunning == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0)) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1) || !(methaneLevelCritical == 0))) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || waterLevel == 1)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || ((((((((((((((((0 <= tmp && tmp <= 1) && 1 <= tmp) && 1 <= retValue_acc) && 1 <= tmp___0) && \result <= 1) && retValue_acc <= 0) && tmp <= 0) && 0 <= \result) && retValue_acc <= 1) && tmp___0 <= 1) && retValue_acc == \result) && 0 == retValue_acc) && \result <= 0) && 0 <= retValue_acc) && tmp == \result) && 1 <= \result)) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((!(tmp == 0) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((((((!(tmp == 0) && waterLevel == 1) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || \old(pumpRunning) == 0) || ((!(pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive))) && (((((!(tmp == 0) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1))) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || (!(waterLevel == 1) && !(tmp == 0))) || !(methaneLevelCritical == systemActive)) || (((methaneLevelCritical == systemActive && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || ((((((retValue_acc == 1 && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && tmp == \result) && \result == retValue_acc) && tmp___0 == retValue_acc)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79)) [2022-11-03 02:15:59,928 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(pumpRunning == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel < 2)) && ((!(tmp == 0) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive))) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || waterLevel == 1)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || (((((((((((((((((0 <= tmp && tmp <= 1) && 1 <= tmp) && 1 <= retValue_acc) && 1 <= tmp___0) && \result <= 1) && methaneLevelCritical == tmp) && tmp <= 0) && 0 <= \result) && \result <= 0) && retValue_acc <= 1) && tmp___0 <= 1) && retValue_acc == \result) && 0 == retValue_acc) && \result <= 0) && 0 <= \result) && tmp == \result) && 1 <= \result)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((!(tmp == 0) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((((((!(tmp == 0) && waterLevel == 1) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1) || \old(pumpRunning) == 0)) && (((((!(tmp == 0) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || ((((((retValue_acc == 1 && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && tmp == \result) && \result == retValue_acc) && tmp___0 == retValue_acc)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || ((!(waterLevel == 1) || pumpRunning == 0) && (pumpRunning == 0 || !(tmp == 0))))) && (((!(1 == systemActive) || !(\old(waterLevel) < 2)) || !(methaneLevelCritical == systemActive)) || waterLevel < 2) [2022-11-03 02:15:59,929 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel < 2) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((!(methaneLevelCritical == 0) || pumpRunning == 1) && 1 == systemActive) && !(tmp == 0)) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == systemActive)) || !(2 <= \old(waterLevel)))) && ((!(tmp == 0) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || waterLevel < 2)) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1) || \old(pumpRunning) == 0)) && (((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive))) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || (((((((((((((((((((((0 <= tmp && tmp <= 1) && 1 <= tmp) && 1 <= retValue_acc) && 1 <= tmp___0) && \result <= 1) && \result == tmp___0) && tmp <= 0) && 0 <= \result) && tmp___0 <= 2147483647) && \result <= 0) && retValue_acc <= 1) && tmp == 0) && tmp___0 <= 1) && waterLevel == tmp___0) && retValue_acc == \result) && 0 == retValue_acc) && \result <= 0) && 0 <= \result) && tmp == \result) && retValue_acc == waterLevel) && 1 <= \result)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((!(tmp == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (!(pumpRunning == 0) && 1 == systemActive)) || waterLevel == tmp___0)) && ((!(1 == systemActive) || \old(pumpRunning) == 0) || (!(pumpRunning == 0) && 1 == systemActive))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || ((((((retValue_acc == 1 && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && tmp == \result) && \result == retValue_acc) && tmp___0 == retValue_acc)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((!(methaneLevelCritical == 0) || pumpRunning == 1) && 1 == systemActive) && !(tmp == 0)) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || ((!(waterLevel == 1) || pumpRunning == 0) && (pumpRunning == 0 || !(tmp == 0))))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((!(methaneLevelCritical == 0) || pumpRunning == 1) && !(tmp == 0)) && waterLevel == 1)) [2022-11-03 02:15:59,930 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(1 == systemActive) || \old(pumpRunning) == 0) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && aux-isMethaneLevelCritical()-aux == methaneLevelCritical) && 1 == systemActive) && !(tmp == 0)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || waterLevel == 1)) && (((!(1 == systemActive) || !(\old(waterLevel) < 2)) || !(methaneLevelCritical == 0)) || waterLevel < 2)) && ((!(1 == systemActive) || !(methaneLevelCritical == systemActive)) || (((pumpRunning == 0 && aux-isMethaneLevelCritical()-aux == methaneLevelCritical) && 1 == systemActive) && !(tmp == 0)))) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && (((!(1 == systemActive) || !(methaneLevelCritical == systemActive)) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel)))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1) || !(methaneLevelCritical == systemActive))) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || ((((((((\result == retValue_acc && tmp == 0) && 0 <= \result) && tmp == \result) && tmp___0 <= 1) && 0 == retValue_acc) && \result <= 0) && 1 <= \result) && tmp___0 == retValue_acc)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79)) [2022-11-03 02:15:59,931 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((!(tmp == 0) && \old(waterLevel) == waterLevel) && waterLevel == tmp___0) && pumpRunning == 1)) || !(2 <= \old(waterLevel))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || (((tmp___0 <= 1 && !(pumpRunning == 0)) && waterLevel <= 1) && 1 == systemActive)) || \old(pumpRunning) == 0)) && (!(1 == systemActive) || !(methaneLevelCritical == systemActive))) && ((!(pumpRunning == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0)) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || (((tmp___0 <= 1 && !(pumpRunning == 0)) && waterLevel <= 1) && 1 == systemActive)) || (waterLevel == tmp___0 && waterLevel < 2)) || !(methaneLevelCritical == 0))) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || ((((((((((((((((((((0 <= tmp && tmp <= 1) && 1 <= tmp) && 1 <= retValue_acc) && 1 <= tmp___0) && \result <= 1) && \result == tmp___0) && tmp <= 0) && 0 <= \result) && tmp___0 <= 2147483647) && \result <= 0) && retValue_acc <= 1) && tmp == 0) && tmp___0 <= 1) && retValue_acc == \result) && 0 == retValue_acc) && \result <= 0) && 0 <= \result) && tmp == \result) && retValue_acc == waterLevel) && 1 <= \result)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || ((((((retValue_acc == 1 && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && tmp == \result) && \result == retValue_acc) && tmp___0 == retValue_acc)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && waterLevel == 1)) || (((!(tmp == 0) && waterLevel == tmp___0) && waterLevel == 1) && pumpRunning == 1)) [2022-11-03 02:15:59,932 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || \old(pumpRunning) == 0) && (!(1 == systemActive) || !(methaneLevelCritical == systemActive))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) [2022-11-03 02:15:59,980 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/witness.graphml [2022-11-03 02:15:59,982 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-03 02:15:59,984 INFO L158 Benchmark]: Toolchain (without parser) took 275369.32ms. Allocated memory was 100.7MB in the beginning and 587.2MB in the end (delta: 486.5MB). Free memory was 65.8MB in the beginning and 426.8MB in the end (delta: -361.0MB). Peak memory consumption was 123.9MB. Max. memory is 16.1GB. [2022-11-03 02:15:59,985 INFO L158 Benchmark]: CDTParser took 0.37ms. Allocated memory is still 100.7MB. Free memory is still 55.2MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 02:15:59,985 INFO L158 Benchmark]: CACSL2BoogieTranslator took 637.73ms. Allocated memory is still 100.7MB. Free memory was 65.6MB in the beginning and 65.9MB in the end (delta: -313.6kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-11-03 02:15:59,987 INFO L158 Benchmark]: Boogie Procedure Inliner took 98.35ms. Allocated memory is still 100.7MB. Free memory was 65.9MB in the beginning and 63.5MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 02:15:59,987 INFO L158 Benchmark]: Boogie Preprocessor took 61.55ms. Allocated memory is still 100.7MB. Free memory was 63.5MB in the beginning and 61.8MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 02:15:59,987 INFO L158 Benchmark]: RCFGBuilder took 936.74ms. Allocated memory was 100.7MB in the beginning and 121.6MB in the end (delta: 21.0MB). Free memory was 61.8MB in the beginning and 86.0MB in the end (delta: -24.3MB). Peak memory consumption was 22.4MB. Max. memory is 16.1GB. [2022-11-03 02:15:59,988 INFO L158 Benchmark]: TraceAbstraction took 273490.17ms. Allocated memory was 121.6MB in the beginning and 587.2MB in the end (delta: 465.6MB). Free memory was 85.4MB in the beginning and 433.1MB in the end (delta: -347.7MB). Peak memory consumption was 356.3MB. Max. memory is 16.1GB. [2022-11-03 02:15:59,988 INFO L158 Benchmark]: Witness Printer took 132.12ms. Allocated memory is still 587.2MB. Free memory was 433.1MB in the beginning and 426.8MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-03 02:15:59,992 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.37ms. Allocated memory is still 100.7MB. Free memory is still 55.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 637.73ms. Allocated memory is still 100.7MB. Free memory was 65.6MB in the beginning and 65.9MB in the end (delta: -313.6kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 98.35ms. Allocated memory is still 100.7MB. Free memory was 65.9MB in the beginning and 63.5MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 61.55ms. Allocated memory is still 100.7MB. Free memory was 63.5MB in the beginning and 61.8MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 936.74ms. Allocated memory was 100.7MB in the beginning and 121.6MB in the end (delta: 21.0MB). Free memory was 61.8MB in the beginning and 86.0MB in the end (delta: -24.3MB). Peak memory consumption was 22.4MB. Max. memory is 16.1GB. * TraceAbstraction took 273490.17ms. Allocated memory was 121.6MB in the beginning and 587.2MB in the end (delta: 465.6MB). Free memory was 85.4MB in the beginning and 433.1MB in the end (delta: -347.7MB). Peak memory consumption was 356.3MB. Max. memory is 16.1GB. * Witness Printer took 132.12ms. Allocated memory is still 587.2MB. Free memory was 433.1MB in the beginning and 426.8MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 932]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 51 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 273.3s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 35.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 153.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1789 SdHoareTripleChecker+Valid, 6.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1757 mSDsluCounter, 2268 SdHoareTripleChecker+Invalid, 5.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2089 mSDsCounter, 873 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3892 IncrementalHoareTripleChecker+Invalid, 4765 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 873 mSolverCounterUnsat, 626 mSDtfsCounter, 3892 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 816 GetRequests, 533 SyntacticMatches, 9 SemanticMatches, 274 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4924 ImplicationChecksByTransitivity, 79.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=613occurred in iteration=8, InterpolantAutomatonStates: 157, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.2s AutomataMinimizationTime, 12 MinimizatonAttempts, 441 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 30 LocationsWithAnnotation, 1700 PreInvPairs, 2397 NumberOfFragments, 14728 HoareAnnotationTreeSize, 1700 FomulaSimplifications, 13291 FormulaSimplificationTreeSizeReduction, 15.1s HoareSimplificationTime, 30 FomulaSimplificationsInter, 927497 FormulaSimplificationTreeSizeReductionInter, 138.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.7s SatisfiabilityAnalysisTime, 5.8s InterpolantComputationTime, 678 NumberOfCodeBlocks, 678 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 859 ConstructedInterpolants, 0 QuantifiedInterpolants, 2950 SizeOfPredicates, 59 NumberOfNonLiveVariables, 2046 ConjunctsInSsa, 122 ConjunctsInUnsatCore, 21 InterpolantComputations, 9 PerfectInterpolantSequences, 178/271 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 5.0s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 4, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 29, DAG_INTERPRETER_EARLY_EXITS: 1, TOOLS_POST_APPLICATIONS: 23, TOOLS_POST_TIME: 1.8s, TOOLS_POST_CALL_APPLICATIONS: 10, TOOLS_POST_CALL_TIME: 1.9s, TOOLS_POST_RETURN_APPLICATIONS: 6, TOOLS_POST_RETURN_TIME: 0.6s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 39, TOOLS_QUANTIFIERELIM_TIME: 4.2s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.3s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 68, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 7, DOMAIN_JOIN_TIME: 0.5s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 0, DOMAIN_WIDEN_TIME: 0.0s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 0, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 29, DOMAIN_ISBOTTOM_TIME: 0.1s, LOOP_SUMMARIZER_APPLICATIONS: 0, LOOP_SUMMARIZER_CACHE_MISSES: 0, LOOP_SUMMARIZER_OVERALL_TIME: 0.0s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 0.0s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 0, CALL_SUMMARIZER_APPLICATIONS: 6, CALL_SUMMARIZER_CACHE_MISSES: 2, CALL_SUMMARIZER_OVERALL_TIME: 0.0s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.0s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 275, DAG_COMPRESSION_RETAINED_NODES: 78, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 280]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: (((((((((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == systemActive)) || pumpRunning == 1)) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || (((pumpRunning == 0 && !(2 == waterLevel)) || (!(waterLevel == 1) && !(pumpRunning == 0))) && waterLevel < 2))) && (((((!(1 == systemActive) || (pumpRunning == 0 && !(2 == waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (!(waterLevel == 1) && !(pumpRunning == 0))) || \old(waterLevel) == 2)) && ((!(pumpRunning == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0)) && ((((!(waterLevel == 1) || !(1 == systemActive)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || \old(waterLevel) == 2)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || waterLevel == 1)) && (((!(1 == systemActive) || !(\old(waterLevel) < 2)) || !(methaneLevelCritical == 0)) || waterLevel < 2)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1) || \old(pumpRunning) == 0)) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || (pumpRunning == 0 && !(2 == waterLevel))) || !(methaneLevelCritical == 0)) || (!(waterLevel == 1) && !(pumpRunning == 0)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || pumpRunning == 1) - InvariantResult [Line: 932]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || \old(pumpRunning) == 0) && (!(1 == systemActive) || !(methaneLevelCritical == systemActive))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 101]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || (1 == systemActive && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1))) && ((!(1 == systemActive) || (!(pumpRunning == 0) && (\old(waterLevel) == waterLevel || waterLevel == 1))) || \old(pumpRunning) == 0)) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (1 == systemActive && (\old(waterLevel) == waterLevel || waterLevel == 1)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || (1 == systemActive && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == systemActive))) && ((((!(waterLevel == 1) || \old(waterLevel) == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1))) && ((((!(waterLevel == 1) || \old(waterLevel) == 1) || !(1 == systemActive)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive))) && ((!(1 == systemActive) || !(methaneLevelCritical == systemActive)) || (1 == systemActive && (\old(waterLevel) == waterLevel || waterLevel == 1)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) - InvariantResult [Line: 548]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 347]: Loop Invariant Derived loop invariant: (((((((((((((!(pumpRunning == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel < 2)) && ((!(tmp == 0) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive))) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || waterLevel == 1)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || (((((((((((((((((0 <= tmp && tmp <= 1) && 1 <= tmp) && 1 <= retValue_acc) && 1 <= tmp___0) && \result <= 1) && methaneLevelCritical == tmp) && tmp <= 0) && 0 <= \result) && \result <= 0) && retValue_acc <= 1) && tmp___0 <= 1) && retValue_acc == \result) && 0 == retValue_acc) && \result <= 0) && 0 <= \result) && tmp == \result) && 1 <= \result)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((!(tmp == 0) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((((((!(tmp == 0) && waterLevel == 1) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1) || \old(pumpRunning) == 0)) && (((((!(tmp == 0) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || ((((((retValue_acc == 1 && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && tmp == \result) && \result == retValue_acc) && tmp___0 == retValue_acc)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || ((!(waterLevel == 1) || pumpRunning == 0) && (pumpRunning == 0 || !(tmp == 0))))) && (((!(1 == systemActive) || !(\old(waterLevel) < 2)) || !(methaneLevelCritical == systemActive)) || waterLevel < 2) - InvariantResult [Line: 548]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((unknown-#memory_int-unknown[14][3] == 84 && unknown-#memory_int-unknown[6][2] == 102) && unknown-#memory_int-unknown[11][1] == 0) && 1 == \valid[5]) && 32 == unknown-#memory_int-unknown[10][1]) && unknown-#length-unknown[3] == 12) && unknown-#memory_int-unknown[9][0] == 79) && \valid[15] == 1) && 112 == unknown-#memory_int-unknown[7][4]) && unknown-#memory_int-unknown[6][0] == 79) && 3 == unknown-#length-unknown[10]) && pumpRunning == 0) && \valid[26] == 1) && unknown-#memory_int-unknown[7][1] == 80) && 58 == unknown-#memory_int-unknown[13][5]) && unknown-#length-unknown[8] == 3) && unknown-#length-unknown[6] == 4) && \valid[9] == 1) && unknown-#length-unknown[4] == 13) && 117 == unknown-#memory_int-unknown[7][2]) && unknown-#memory_int-unknown[5][2] == 0) && 7 == unknown-#length-unknown[7]) && 7 == unknown-#length-unknown[13]) && 110 == unknown-#memory_int-unknown[8][1]) && unknown-#memory_int-unknown[6][1] == 102) && \valid[11] == 1) && \valid[27] == 1) && methaneLevelCritical == 0) && 58 == unknown-#memory_int-unknown[7][5]) && unknown-#memory_int-unknown[8][0] == 79) && 30 == unknown-#length-unknown[23]) && 41 == unknown-#memory_int-unknown[16][0]) && 44 == unknown-#memory_int-unknown[7][0]) && unknown-#length-unknown[24] == 9) && 31 == unknown-#length-unknown[2]) && head == 0) && 44 == unknown-#memory_int-unknown[13][0]) && unknown-#memory_int-unknown[11][0] == 10) && unknown-#memory_int-unknown[14][4] == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[17] == 30) && 73 == unknown-#memory_int-unknown[14][2]) && 9 == unknown-#length-unknown[18]) && unknown-#length-unknown[19] == 21) && \valid[3] == 1) && \valid[7] == 1) && unknown-#length-unknown[22] == 21) && \valid[18] == 1) && \valid[22] == 1) && 3 == unknown-#length-unknown[5]) && 30 == unknown-#length-unknown[26]) && 77 == unknown-#memory_int-unknown[13][1]) && 2 == unknown-#length-unknown[11]) && 1 == systemActive) && unknown-#length-unknown[15] == 3) && \valid[24] == 1) && unknown-#memory_int-unknown[9][3] == 0) && \valid[12] == 1) && \valid[28] == 1) && unknown-#memory_int-unknown[14][1] == 82) && \valid[4] == 1) && unknown-#memory_int-unknown[9][1] == 102) && unknown-#memory_int-unknown[8][2] == 0) && unknown-#memory_int-unknown[16][1] == 0) && 101 == unknown-#memory_int-unknown[13][2]) && 25 == unknown-#length-unknown[25]) && \valid[1] == 1) && unknown-#memory_int-unknown[7][6] == 0) && unknown-#memory_int-unknown[9][2] == 102) && \valid[20] == 1) && unknown-#memory_int-unknown[5][0] == 79) && unknown-#length-unknown[12] == 13) && 2 == unknown-#length-unknown[16]) && \valid[21] == 1) && unknown-#length-unknown[9] == 4) && 104 == unknown-#memory_int-unknown[13][4]) && unknown-#length-unknown[21] == 9) && \valid[14] == 1) && retValue_acc == \result) && 116 == unknown-#memory_int-unknown[13][3]) && 5 == unknown-#length-unknown[14]) && \valid[0] == 0) && 30 == unknown-#length-unknown[20]) && \valid[25] == 1) && head == 0) && \valid[2] == 1) && #NULL == 0) && unknown-#memory_int-unknown[14][0] == 67) && waterLevel == 1) && retValue_acc == 1) && unknown-#memory_int-unknown[10][2] == 0) && unknown-#length-unknown[27] == 9) && unknown-#memory_int-unknown[1][0] == 48) && \result == tmp) && \valid[23] == 1) && \valid[19] == 1) && unknown-#memory_int-unknown[15][1] == 75) && 109 == unknown-#memory_int-unknown[7][3]) && unknown-#memory_int-unknown[6][3] == 0) && 0 == unknown-#memory_int-unknown[13][6]) && \valid[16] == 1) && unknown-#memory_int-unknown[15][2] == 0) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && unknown-#memory_int-unknown[15][0] == 79) && unknown-#memory_int-unknown[10][0] == 41) && \valid[17] == 1) && \valid[10] == 1) && unknown-#memory_int-unknown[5][1] == 110) && \valid[8] == 1) && unknown-#length-unknown[28] == 25) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 - InvariantResult [Line: 353]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((!(tmp == 0) && \old(waterLevel) == waterLevel) && waterLevel == tmp___0) && pumpRunning == 1)) || !(2 <= \old(waterLevel))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || (((tmp___0 <= 1 && !(pumpRunning == 0)) && waterLevel <= 1) && 1 == systemActive)) || \old(pumpRunning) == 0)) && (!(1 == systemActive) || !(methaneLevelCritical == systemActive))) && ((!(pumpRunning == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0)) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || (((tmp___0 <= 1 && !(pumpRunning == 0)) && waterLevel <= 1) && 1 == systemActive)) || (waterLevel == tmp___0 && waterLevel < 2)) || !(methaneLevelCritical == 0))) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || ((((((((((((((((((((0 <= tmp && tmp <= 1) && 1 <= tmp) && 1 <= retValue_acc) && 1 <= tmp___0) && \result <= 1) && \result == tmp___0) && tmp <= 0) && 0 <= \result) && tmp___0 <= 2147483647) && \result <= 0) && retValue_acc <= 1) && tmp == 0) && tmp___0 <= 1) && retValue_acc == \result) && 0 == retValue_acc) && \result <= 0) && 0 <= \result) && tmp == \result) && retValue_acc == waterLevel) && 1 <= \result)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || ((((((retValue_acc == 1 && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && tmp == \result) && \result == retValue_acc) && tmp___0 == retValue_acc)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && waterLevel == 1)) || (((!(tmp == 0) && waterLevel == tmp___0) && waterLevel == 1) && pumpRunning == 1)) - InvariantResult [Line: 338]: Loop Invariant Derived loop invariant: (((((((((((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel < 2) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((!(methaneLevelCritical == 0) || pumpRunning == 1) && 1 == systemActive) && !(tmp == 0)) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == systemActive)) || !(2 <= \old(waterLevel)))) && ((!(tmp == 0) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || waterLevel < 2)) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1) || \old(pumpRunning) == 0)) && (((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive))) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || (((((((((((((((((((((0 <= tmp && tmp <= 1) && 1 <= tmp) && 1 <= retValue_acc) && 1 <= tmp___0) && \result <= 1) && \result == tmp___0) && tmp <= 0) && 0 <= \result) && tmp___0 <= 2147483647) && \result <= 0) && retValue_acc <= 1) && tmp == 0) && tmp___0 <= 1) && waterLevel == tmp___0) && retValue_acc == \result) && 0 == retValue_acc) && \result <= 0) && 0 <= \result) && tmp == \result) && retValue_acc == waterLevel) && 1 <= \result)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((!(tmp == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (!(pumpRunning == 0) && 1 == systemActive)) || waterLevel == tmp___0)) && ((!(1 == systemActive) || \old(pumpRunning) == 0) || (!(pumpRunning == 0) && 1 == systemActive))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || ((((((retValue_acc == 1 && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && tmp == \result) && \result == retValue_acc) && tmp___0 == retValue_acc)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((!(methaneLevelCritical == 0) || pumpRunning == 1) && 1 == systemActive) && !(tmp == 0)) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || ((!(waterLevel == 1) || pumpRunning == 0) && (pumpRunning == 0 || !(tmp == 0))))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((!(methaneLevelCritical == 0) || pumpRunning == 1) && !(tmp == 0)) && waterLevel == 1)) - InvariantResult [Line: 133]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || ((!(pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || (((methaneLevelCritical == systemActive && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) && ((!(pumpRunning == 0) || !(1 == systemActive)) || \old(pumpRunning) == 0)) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1) || !(methaneLevelCritical == 0))) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || waterLevel == 1)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || ((((((((((((((((0 <= tmp && tmp <= 1) && 1 <= tmp) && 1 <= retValue_acc) && 1 <= tmp___0) && \result <= 1) && retValue_acc <= 0) && tmp <= 0) && 0 <= \result) && retValue_acc <= 1) && tmp___0 <= 1) && retValue_acc == \result) && 0 == retValue_acc) && \result <= 0) && 0 <= retValue_acc) && tmp == \result) && 1 <= \result)) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((!(tmp == 0) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((((((!(tmp == 0) && waterLevel == 1) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || \old(pumpRunning) == 0) || ((!(pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive))) && (((((!(tmp == 0) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1))) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || (!(waterLevel == 1) && !(tmp == 0))) || !(methaneLevelCritical == systemActive)) || (((methaneLevelCritical == systemActive && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || ((((((retValue_acc == 1 && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && tmp == \result) && \result == retValue_acc) && tmp___0 == retValue_acc)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79)) - InvariantResult [Line: 197]: Loop Invariant Derived loop invariant: ((((((((((!(1 == systemActive) || \old(pumpRunning) == 0) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && aux-isMethaneLevelCritical()-aux == methaneLevelCritical) && 1 == systemActive) && !(tmp == 0)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(methaneLevelCritical == systemActive)) || waterLevel == 1)) && (((!(1 == systemActive) || !(\old(waterLevel) < 2)) || !(methaneLevelCritical == 0)) || waterLevel < 2)) && ((!(1 == systemActive) || !(methaneLevelCritical == systemActive)) || (((pumpRunning == 0 && aux-isMethaneLevelCritical()-aux == methaneLevelCritical) && 1 == systemActive) && !(tmp == 0)))) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && (((!(1 == systemActive) || !(methaneLevelCritical == systemActive)) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel)))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1) || !(methaneLevelCritical == systemActive))) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || ((((((((\result == retValue_acc && tmp == 0) && 0 <= \result) && tmp == \result) && tmp___0 <= 1) && 0 == retValue_acc) && \result <= 0) && 1 <= \result) && tmp___0 == retValue_acc)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79)) - InvariantResult [Line: 281]: Loop Invariant Derived loop invariant: ((((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel < 2) || ((methaneLevelCritical == systemActive && 1 == systemActive) && splverifierCounter == 0)) || ((!(pumpRunning == 0) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-11-03 02:16:00,142 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a924bca9-8e0c-43d5-bad7-c8e1a6f9a87f/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE